last executing test programs: 19m28.644268922s ago: executing program 4 (id=1049): r0 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, 0x0) kexec_load(0x100, 0x0, 0x0, 0x140000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@fallback, 0x24, 0x1, 0x6, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 19m28.324379857s ago: executing program 4 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000) 19m28.053743513s ago: executing program 4 (id=1056): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x1c, &(0x7f0000000040)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m25.946191791s ago: executing program 4 (id=1076): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 19m25.699497835s ago: executing program 4 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19m24.454943966s ago: executing program 4 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 19m24.025545755s ago: executing program 32 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15m34.26570978s ago: executing program 1 (id=3379): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0xfffffffe, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x1, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xfffd, 0x5, 0x6, 0xc4f4}, {0x74, 0x1, 0x8, 0x576, 0x8001, 0x2}, 0xa, 0xc0000, 0xb43}}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000000, 0x81, 0x997, 0x0, 0x7, 0x6, 0x6, 0x3, 0xf601eeff, 0x5, 0x5, 0x4, 0xfffffff9, 0x8, 0x7fff, 0x2, 0x5, 0x5, 0xfa1, 0xd0, 0x10001, 0x7, 0x4, 0xf, 0x4, 0x3, 0x7fffffff, 0x7f, 0x0, 0x140e, 0xfd, 0x8, 0xe998, 0x1, 0xa4b, 0x4, 0x6, 0x9, 0x0, 0x8, 0x3ba2, 0xf89, 0x8, 0x7, 0x4, 0x1, 0x7, 0x2, 0x5, 0x2, 0x0, 0x7ff, 0x401, 0x1, 0x9, 0x3, 0x4, 0x9af, 0x59be665a, 0x5, 0x2d, 0x7, 0xd25, 0x80, 0x9348, 0x60000000, 0x9, 0x101, 0x9, 0x8, 0x1, 0x96, 0x8, 0x99, 0x7, 0x0, 0x6, 0x5, 0x400, 0x2, 0xfb6, 0x1, 0xc, 0x7, 0xfffffffd, 0x3, 0x498fe38a, 0xf4, 0x9742, 0x8, 0x8c48, 0x9, 0xd, 0xf, 0x3, 0x7, 0x8, 0x4, 0x7a2, 0x4, 0x6, 0x0, 0x80000000, 0x701e, 0x7, 0x0, 0x2, 0x2, 0x2, 0x76da, 0xf94c, 0x4, 0x32ce5349, 0xa, 0x0, 0x5, 0x8cdc, 0x8, 0x3, 0x2, 0x3ff, 0x6, 0x81, 0x1, 0x99, 0x4, 0x101, 0x40, 0x8, 0x5, 0x9, 0x81, 0x8000000, 0x3, 0x4f88, 0x9, 0x98, 0x37, 0x3, 0x8001, 0x31, 0x2, 0x3fd4, 0x5, 0x0, 0x200, 0x6, 0xc, 0xd, 0x5, 0xc55ee, 0x1000, 0xf, 0x400, 0x3, 0x100, 0x2, 0x0, 0xffff, 0x5, 0x9d, 0x80000001, 0xffffff81, 0x6, 0x3ff, 0xffffffff, 0x7, 0xd83, 0x343, 0x9, 0x400, 0x5, 0xfffffff7, 0x0, 0x200, 0xf, 0x8, 0x5, 0x1, 0x9, 0x7, 0x6, 0x7, 0x81, 0x2, 0xff, 0x6a, 0xfff, 0x1, 0x5, 0x9, 0x8000, 0xaf, 0x1, 0x5, 0x7, 0x2, 0x0, 0x7, 0x7, 0x3ff, 0x7, 0x1, 0xa4, 0x3a, 0x9, 0x1, 0x3, 0x6, 0x8000, 0x27, 0x2, 0x3, 0x4, 0xff, 0x1, 0x5, 0x1c000000, 0x7, 0x7, 0x8, 0x4, 0x5, 0xffffffbe, 0x8, 0x5, 0x7ff, 0x9, 0x1ff, 0x413b, 0x5, 0x0, 0x5, 0xd8, 0x1, 0x100, 0x9, 0x2, 0x1ff, 0x2, 0x8, 0xfffffffa, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x38, 0x2, 0xc, 0x6164, 0x9, 0xec, 0xffffffff, 0x56, 0xfa53]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x80}, 0x40) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 15m34.016826301s ago: executing program 1 (id=3383): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2022, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) truncate(0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000d000006111600000000000009500"/35], &(0x7f0000000000)='GPL\x00'}, 0x94) 15m32.944870688s ago: executing program 1 (id=3389): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc}) 15m32.06469922s ago: executing program 1 (id=3400): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 15m31.827821042s ago: executing program 1 (id=3403): unshare(0x40400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200137000f80100000001000000edaf5e0ab247e29cfaf3"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 15m30.000555096s ago: executing program 1 (id=3423): r0 = socket(0x400000000010, 0x3, 0x0) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000001640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc5, r2, &(0x7f0000000280)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x401, r0, &(0x7f0000000580), 0x0, 0x474d, 0x0, 0x2, r2}]) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 15m29.747673765s ago: executing program 33 (id=3423): r0 = socket(0x400000000010, 0x3, 0x0) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000001640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc5, r2, &(0x7f0000000280)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x401, r0, &(0x7f0000000580), 0x0, 0x474d, 0x0, 0x2, r2}]) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 14m37.572635533s ago: executing program 3 (id=3881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/107, 0x6b}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {0x0}, {&(0x7f0000003340)=""/181, 0xb5}], 0x7}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m37.078525205s ago: executing program 3 (id=3886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m36.751778208s ago: executing program 3 (id=3889): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x13, 0x0, 0x1, 0x9, 0x8010, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @value=r1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m36.482764836s ago: executing program 3 (id=3892): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 14m36.110388915s ago: executing program 3 (id=3896): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9, 0xf06}}}}]}, 0x44}}, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0xc}}]}}]}, 0x3c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m34.395129811s ago: executing program 3 (id=3915): socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14m34.072811888s ago: executing program 34 (id=3915): socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m10.038802752s ago: executing program 2 (id=5457): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f0000000640)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459cb7a62862721ec1fa534fd95e262c5814426816e60000000000000000001a00000000ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0x508, 0x6000000000000000, 0x0, 0x0) 12m9.639249678s ago: executing program 2 (id=5461): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 12m9.221583695s ago: executing program 2 (id=5465): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, 0x0, 0x413, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x80000000}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x30000000, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x44) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m8.992911172s ago: executing program 2 (id=5470): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 12m8.712743649s ago: executing program 2 (id=5475): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m7.526407771s ago: executing program 2 (id=5492): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r3, 0xc0106440, 0x0) 12m7.351457035s ago: executing program 35 (id=5492): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r3, 0xc0106440, 0x0) 46.09581606s ago: executing program 5 (id=9072): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x540, 0x8000009, 0x100005, 0x808, 0x16, "737b27e9aba937801cf3a25bada40a9fd86040"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x1, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x8, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x2000005, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0xffff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 45.833250132s ago: executing program 5 (id=9077): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e244e2203000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 44.649033946s ago: executing program 5 (id=9092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x80, 0x1, 0x0, 0x2, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x30000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x21, 0x3, 0xdd, 0x0, 0xfe, 0x0, 0x40000800}]}) 44.332107292s ago: executing program 5 (id=9094): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 44.026615765s ago: executing program 5 (id=9098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x30, r2, 0x1, 0x70bd25, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}, {0x8, 0x0, 0xc7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 43.837150799s ago: executing program 5 (id=9103): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 27.742571972s ago: executing program 36 (id=9103): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.222954166s ago: executing program 7 (id=9464): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x1, r2, 0x9}, 0x10) 4.821830891s ago: executing program 7 (id=9470): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fab000/0x18000)=nil, &(0x7f0000001440)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 3.467133908s ago: executing program 7 (id=9487): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.043347309s ago: executing program 8 (id=9493): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.043059725s ago: executing program 9 (id=9494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2.77820744s ago: executing program 8 (id=9497): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 2.706840159s ago: executing program 9 (id=9498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x1, [0x515]}, 0xa) 2.50121847s ago: executing program 8 (id=9501): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 2.486243179s ago: executing program 9 (id=9502): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001480)}, 0x2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) shutdown(r0, 0x1) 2.317488887s ago: executing program 7 (id=9504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x300, 0x1, 0x0, r0, 0x0}]) 2.134405322s ago: executing program 9 (id=9506): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904", @ANYRES16, @ANYRES16], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r8, &(0x7f0000001500)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002ec0)={0x10, 0xffffffffffffffda, r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a801800209c14000700fc010000000000000000000000000000140003007369743000"/56], 0x50}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) 2.049267381s ago: executing program 0 (id=9508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.919239149s ago: executing program 7 (id=9509): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x42000080, 0x4) recvmmsg(r0, &(0x7f000000a340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/16, 0x10}, 0x4}], 0x1, 0x45833af92e4bbbfe, 0x0) 1.871042239s ago: executing program 6 (id=9510): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1.815157269s ago: executing program 0 (id=9511): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.65825632s ago: executing program 6 (id=9512): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffec4}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x40, 0x30, 0x2, "dd84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.474661955s ago: executing program 0 (id=9513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.342533628s ago: executing program 8 (id=9514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0x9, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) 1.31247077s ago: executing program 7 (id=9515): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x100, 0x3, 0x4, 0x8, 0x9}) 1.262917329s ago: executing program 6 (id=9516): socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000002340)='./file0\x00', 0x200) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x78, 0x0, r5, {0x2000000004, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0x8, 0x5, 0xffffffff, 0x202, 0xa000, 0x0, r6, r7, 0x0, 0x6}}}, 0x78) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) 1.223472941s ago: executing program 0 (id=9517): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000003840)=@delchain={0x2348, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x6}, {0xd, 0x2}}, [@f_tcindex={{0xc}, {0x4}}, @f_rsvp={{0x9}, {0x2308, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_RSVP_POLICE={0x47c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x95, 0x6, 0x1, 0x10, 0x9, {0x8, 0x1, 0x200, 0x7, 0x5, 0x5}, {0x7, 0x2, 0x101, 0x1, 0x4a, 0x4}, 0x7, 0xffff1380, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x5, 0x1, 0x1, 0x5e, 0x64, 0x7, 0xd, 0xf, 0xb7d, 0x81, 0x2, 0xfffffff7, 0x9, 0x6c, 0x2, 0x8, 0x4, 0x1, 0x8000, 0xdd, 0x7, 0x4, 0x4, 0x0, 0x8001, 0x2, 0x8, 0xff, 0x0, 0x3, 0x9, 0x81, 0x4, 0x7860fe36, 0x3, 0x9, 0x1, 0x200, 0x7fff, 0xfffffffa, 0x3, 0x9ea, 0x6, 0x6, 0x8, 0x10001, 0x1, 0x0, 0x5, 0x3, 0x3, 0x10001, 0x4, 0x6, 0x101, 0xc56a746b, 0x2, 0x8, 0x7fffffff, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x240b, 0x2, 0x44bd, 0x9, 0xfffffffb, 0x1, 0x3, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x4, 0x3, 0x1, 0x8, 0xfffffff9, 0x1, 0x10000, 0x1, 0x9, 0x40, 0xfffffff9, 0x5, 0x75e, 0xfffffff7, 0x518d, 0x0, 0x7, 0x6, 0x7, 0x1, 0x0, 0x81, 0x10, 0x5, 0x7, 0x0, 0x8000, 0x0, 0x4, 0x6, 0x2, 0xfffffff7, 0x6a, 0x4, 0x0, 0x3, 0x8, 0xfffffff7, 0x5, 0xd, 0x0, 0x5, 0x4, 0x6, 0xc3a, 0x80000001, 0x9, 0x4, 0x3, 0x80000001, 0x7, 0x44, 0x8, 0xfffffffa, 0x81, 0x1688, 0x4, 0x10, 0x4, 0x1, 0x10001, 0x8, 0x6, 0x10001, 0x2, 0x34, 0xfff, 0x22d, 0x8, 0xdd, 0x9, 0x1, 0x5, 0x3, 0x9, 0x5e7b8185, 0xe631, 0x0, 0x1, 0x3, 0x9, 0x7, 0xe, 0x6, 0xbe, 0x4, 0x1, 0x40, 0x1, 0x3, 0xdb37, 0x5, 0x5, 0x307, 0x4, 0x8, 0x13a, 0x8, 0x8001, 0xff, 0x34, 0x75, 0xc, 0x2, 0x9, 0xff, 0x0, 0x1, 0x3, 0x9, 0x0, 0x2, 0x8, 0x1, 0x0, 0x4, 0x4, 0x80, 0x3, 0x6, 0x7, 0x6, 0x2, 0x2, 0x3, 0x8, 0xff, 0x3, 0xaa11, 0x101, 0x3ff, 0x3, 0x7, 0x7, 0x6, 0x7, 0x9, 0x9, 0x7fff, 0x2, 0x513, 0x6, 0x1, 0x9, 0x2, 0x0, 0x3ff, 0x2, 0x3, 0x1, 0x6, 0x8, 0x1ff, 0x40, 0x7b21, 0x3c7, 0x800, 0x5, 0x77, 0x80, 0x9, 0x1, 0x7, 0x9, 0x1, 0x20471e25, 0x7, 0x1, 0x3, 0x2, 0x5, 0x1613e000, 0x6, 0x1, 0x9, 0x2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x1e78, 0x6, [@m_csum={0x128, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6234, 0x8, 0x20000000, 0x9, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x7, 0xffffffffffffffff, 0x6, 0x9}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x0, 0x5, 0xabb5, 0x100}, 0x6a}}]}, {0xa5, 0x6, "944c985fb4ce8e44a33a89a0ba583a586ec5b4cb1a6aa4e2631902b8e897570ae8c131b63967eea0810720c5a31d1f395dc4c39130f2af03c61903f8bdc5ccc1bfb0cef96bfa6226bfc047e4cc3fc5c45c1e03d2ee83b74e7aa398b70d953c4be416787d65a2fe92c8bffb6a2dd2c3b3bb9f8b6afc45546ef4deb0bfa792f08f08cd14bb4745f9698e86d1ea6016a2ceb43dacb8e9dcd753aaf510a5b7f7320cfa"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x94, 0x9, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x6, 0x9, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x10}}]}, {0x15, 0x6, "273f6967a4c06a6679942a1a780c508f0a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x1cb8, 0x2, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3c9a, 0xe, 0x3, 0x0, 0x50}, 0x8, 0xa6, [{0x42, 0x6, 0x2, 0x0, 0x7, 0x40}, {0xffffffff, 0x1ff, 0x8, 0x1af25878, 0x0, 0x3}, {0x8, 0x0, 0x5, 0x0, 0x800, 0x6}]}, [{0x5b, 0xf, 0x80000000, 0x8, 0x9, 0x3}, {0x7, 0x9, 0x4, 0x6, 0xd3e1cce, 0x4}, {0x2f8, 0x400, 0x9, 0x6, 0x1, 0x5}, {0xa2, 0x1f, 0x2, 0xa748, 0x0, 0xffffff6d}, {0x5, 0x6, 0x10001, 0x4, 0x7, 0x5}, {0x6, 0x2, 0xa, 0xb19}, {0x100, 0x6e9fc58, 0x1, 0xfffffff8, 0x6, 0x7fff}, {0xfffffff5, 0x1, 0x2, 0xd, 0xc8, 0x1}, {0x2, 0x3, 0x8, 0xe337, 0x0, 0x101}, {0x7105, 0x4, 0x7, 0x9fcc, 0x101, 0x7f}, {0xb3, 0x6, 0x7, 0xb6, 0xff, 0x10001}, {0x7, 0x1, 0x4, 0x0, 0x0, 0x9}, {0x5, 0x100, 0x1, 0x5, 0x5, 0x8}, {0x23, 0x7, 0xfffffffc, 0x1, 0x1, 0x1ff}, {0x40, 0x4, 0x6, 0x4, 0x8, 0xf}, {0x0, 0x3, 0x4, 0xb3d, 0x0, 0x5}, {0x9, 0x0, 0xb05f, 0x1, 0x4, 0x7}, {0x6, 0x8, 0xec, 0x6ac6, 0x1}, {0x9, 0x3000000, 0x7, 0xa, 0xe33, 0xf0}, {0x200, 0x0, 0xfab5, 0x2a3, 0x7, 0x10000}, {0xae01, 0x8, 0x0, 0x4, 0x7, 0x8}, {0x2, 0x3, 0xf, 0x5, 0xffff8000, 0x7}, {0x0, 0x4, 0x100, 0x925, 0xfffffffc, 0xb}, {0x81, 0xe397, 0x5, 0x1800, 0x1c0000, 0x800}, {0xb71, 0x0, 0x9, 0x9, 0xceab, 0x2}, {0x3, 0x3bb3, 0x1, 0x2800000, 0x1, 0x41}, {0x6, 0x9, 0x9, 0x3, 0x7e, 0x8000}, {0x4, 0x8, 0x8b4, 0x5, 0xe92, 0x80000000}, {0x446b, 0x8, 0x0, 0x1, 0x1, 0x2}, {0x4, 0x3, 0x8, 0x3, 0xa7, 0x4}, {0x2c, 0x9, 0x10, 0x8000, 0x7fffffff, 0x3}, {0x5, 0x50c, 0xe, 0xf, 0x7, 0x928}, {0x0, 0x34, 0xc, 0x800, 0x55, 0x9}, {0xd97, 0xc, 0x1, 0x7b99, 0x4, 0x3219}, {0x200, 0x5, 0x9, 0x800, 0x3, 0x6}, {0x6, 0x3, 0xf, 0x4, 0x0, 0xffff}, {0x6, 0xfffff2b9, 0x4, 0x2, 0x0, 0xfff}, {0x40, 0x8876, 0x4, 0x1, 0xfc80, 0x91}, {0x81, 0x0, 0x4, 0x6, 0x20000, 0x8}, {0xf7, 0x6, 0x3, 0x4aad, 0xffff465e, 0x4}, {0x7, 0x6, 0x2, 0x8, 0x9, 0x3}, {0x8, 0x1, 0x28, 0x1, 0x495c, 0x5}, {0xacb, 0x140, 0x4, 0x8001, 0x0, 0x401}, {0xea4, 0x0, 0x9441, 0xc0000, 0x8, 0x7}, {0x0, 0x800, 0x58, 0x6, 0x7}, {0x2, 0x8, 0xe, 0xa0, 0x10001, 0x1d4}, {0x2edc, 0x8, 0x400, 0x70c2afe8, 0x3, 0xe}, {0xffffffff, 0x7f, 0x4, 0x9, 0x2, 0x1}, {0x972, 0xb00, 0xb2a, 0x0, 0x6, 0x584bd55d}, {0x53c, 0x8, 0x2, 0x7ff, 0x9, 0x6}, {0xff, 0x3, 0x1ff, 0x10001, 0x0, 0x8000}, {0x47, 0x7, 0x33, 0x25, 0x7f, 0x7}, {0x9, 0x1, 0x0, 0x5, 0x6, 0x7fd}, {0xd96, 0x9, 0xbda9, 0xf, 0x2, 0x6}, {0x8, 0x19d, 0xfffffffe, 0x1, 0x8000, 0x8}, {0x3211, 0x1, 0x1, 0x6, 0x8}, {0x2, 0x0, 0x9, 0x0, 0x1, 0x5}, {0x9b98, 0x7fffffff, 0x4, 0x8, 0x65000000, 0x6}, {0x80000, 0x9, 0x7, 0x6, 0x7, 0x2}, {0x4, 0x5, 0x80, 0x5, 0x9, 0xfb01}, {0x9, 0x4, 0x8, 0xff5, 0x4d, 0x7}, {0x8, 0x0, 0xfffffffd, 0x2, 0x9, 0x3}, {0x80000001, 0x5, 0x2, 0x7, 0x10001, 0xa}, {0x7fff, 0x5, 0x2, 0xffff, 0x1, 0x6}, {0x4, 0x0, 0x1, 0x7, 0x0, 0x8}, {0x6, 0x424f, 0xb, 0xae0, 0xaa, 0xff}, {0x6, 0x101, 0x7, 0x3, 0x8, 0xfff}, {0x8001, 0x797, 0x3, 0x9, 0x3ff, 0x5}, {0xffff, 0x1ff, 0x156, 0x1, 0x3d000000, 0x6}, {0x6, 0x3, 0x6, 0x8, 0x800, 0x7fffffff}, {0x8, 0x3, 0x401, 0x1, 0x1165, 0x4}, {0x3, 0x3, 0xb, 0x10000, 0x7, 0x5}, {0x3, 0x3, 0x0, 0x0, 0x17bf, 0x9}, {0x3, 0x1c95, 0x9, 0x2, 0x7, 0x1}, {0x2, 0x4, 0x800, 0x8, 0x8, 0x8605}, {0xd, 0x2, 0x400, 0xd5, 0x7, 0x7c200000}, {0x0, 0x8, 0x6, 0x1, 0x100, 0x9}, {0x2, 0xfff, 0x7fff, 0x2, 0x2, 0x5}, {0x5, 0x1, 0x7f, 0x3, 0x3d0, 0x1}, {0x2, 0x0, 0xff, 0x9, 0x7, 0x506}, {0x0, 0xffffffff, 0x9, 0x2, 0xa8000000, 0x3}, {0x7, 0x4f7a, 0xfffffffd, 0x0, 0xd, 0x1}, {0x9, 0x9, 0x9, 0x9d, 0xffffff7f, 0xf121}, {0xe, 0x1, 0x0, 0x2, 0x7fffffff, 0x9}, {0x4, 0x6, 0xffff, 0x6, 0x1ff, 0x3}, {0x87f, 0xfffffffd, 0x1, 0x10000, 0x80000000, 0x9}, {0x1, 0xfffffff8, 0x2, 0x10, 0x80000000, 0x3}, {0x47668b5b, 0x9, 0x7, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x10001, 0x100, 0xc76, 0xffffcf79}, {0x5, 0x2, 0x7fffffff, 0x400, 0xa}, {0xfffffffd, 0x1, 0x3, 0x80000001, 0xa00, 0x1ff}, {0x5, 0xe, 0x8, 0x4, 0x3, 0xb}, {0xffffffff, 0x9, 0xdd5, 0x9, 0x8, 0x7de}, {0x1, 0x5, 0xf, 0x5, 0x7, 0x1}, {0x5, 0x6, 0xd9, 0x1, 0x4, 0x8a}, {0x2, 0xffffffff, 0x7, 0x1, 0x200, 0x5}, {0xfffffffc, 0x1, 0xa, 0x0, 0xfffffff1, 0x7ff}, {0x8001, 0x10, 0x3ff, 0xe4, 0xf, 0x9}, {0x8, 0x9, 0x7, 0x8, 0x4, 0x5}, {0x8, 0xf, 0x0, 0x7, 0x1, 0x6284}, {0x6, 0x81, 0x4, 0x80000001, 0x2, 0x8000}, {0x3, 0x5, 0xa, 0x0, 0x8, 0x3e10fb6f}, {0x4, 0x1, 0x6d, 0x9, 0x3, 0x6}, {0x8, 0x4, 0x8000, 0x3fc, 0x2, 0x8}, {0x83, 0x9c34, 0xfffffffd, 0x57b1, 0x6, 0x4}, {0x5, 0x9, 0x6, 0x36e, 0x1c8, 0xff}, {0x200, 0x2, 0xe00000, 0x9, 0x4, 0x8}, {0xff, 0x3, 0x5, 0x200, 0x6, 0xa5}, {0x5, 0x7, 0x40, 0x3, 0x2, 0x200}, {0xfffffffb, 0x9, 0xd, 0x7, 0x7, 0x2}, {0x2, 0x7, 0x4, 0x1e78, 0x1, 0x400}, {0x101, 0x7, 0xff, 0x1, 0x6, 0x4}, {0x6, 0x8, 0x2f, 0x8, 0xab3, 0x1ff}, {0x0, 0x8, 0x800, 0x9, 0x9, 0x1}, {0xf, 0x6b4, 0xfffffffd, 0x6, 0x4e95, 0x7ff}, {0x2, 0x7, 0x38ae, 0x0, 0x10000, 0x3a01}, {0x7, 0x4, 0xffff, 0x0, 0x3, 0x5}, {0x4, 0xf99, 0x80000000, 0x10000, 0xfffffff6, 0xb5c}, {0x100, 0x9, 0x9, 0xfff, 0x7, 0x200}, {0x1ff, 0x800, 0x4, 0x3ff, 0x1, 0x5}, {0x9, 0x81, 0x0, 0x1, 0x4b5, 0xffffff58}, {0x10000, 0x100, 0x5, 0xe3a, 0xffffffff, 0x6}, {0x7, 0x400, 0x7, 0xae, 0x5, 0x8000}, {0x1, 0x4, 0x7ff, 0x9, 0x3ff, 0x990000}, {0x22, 0x321, 0x9, 0x34, 0x3, 0x200}, {0x5, 0x10000, 0x0, 0x540, 0x4, 0x9}, {0x8, 0x1, 0x2, 0x3, 0x7, 0x9}, {0xa, 0x2, 0xffff, 0x2, 0x8, 0x80}], [{0x7, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x6a258c997b6550f}, {0x4}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x7}, {}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0xd3913c054123744d}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x5, 0xb, 0x4, 0x7}, 0x7c, 0x81}, [{0x8, 0xc999, 0x10, 0x40, 0x2}, {0x7, 0xca40, 0xf, 0x5, 0x0, 0x80000000}, {0x3, 0x355, 0x9, 0xc, 0xf, 0xc21}, {0x5, 0xea, 0x5, 0x2, 0xfee4, 0x2}, {0x6, 0x4, 0x1, 0x35e4e998, 0xd12, 0x2}, {0x7fffffff, 0xfffffffb, 0x0, 0x4, 0x401, 0xfffffff8}, {0xb, 0x1, 0x3, 0x6, 0x3, 0xf}, {0x6, 0x9, 0x1, 0x6, 0x5, 0x5}, {0xffffffff, 0x1, 0xff, 0x9, 0x8, 0x80000001}, {0x6, 0x3, 0x7fff, 0x2, 0x59, 0x7}, {0xdbde, 0x40, 0x3fa, 0x1, 0x9, 0xb03}, {0x2, 0xba, 0x6, 0x80, 0xef3a, 0x5}, {0x100, 0x1, 0x101, 0x34a, 0x8, 0xffff8000}, {0x4, 0xfffffffb, 0xa27, 0x8, 0xfffffffb, 0x7}, {0x0, 0x0, 0x6, 0xb5c, 0x3, 0x2}, {0xd0d, 0x2, 0x81, 0x4, 0x8000, 0x5f}, {0xd, 0x6, 0x8, 0x1, 0x400, 0x4}, {0x5, 0x80000, 0x401, 0x0, 0x1, 0x3}, {0x96ea, 0xd, 0x63e, 0x4, 0x0, 0x1000}, {0x7, 0x8, 0x4725, 0x6, 0xfff}, {0x6, 0xf, 0xff, 0x2, 0x7f, 0x6}, {0x0, 0x5, 0x2, 0xf, 0x461, 0x4}, {0x80000000, 0xef45, 0xf10e, 0x40, 0xc, 0x9}, {0xd, 0xd, 0x5, 0x6fc, 0x6, 0x5}, {0x3, 0x8, 0x80, 0x2, 0x10001, 0x8}, {0x1000, 0x60000000, 0x6, 0x2}, {0x7fff, 0x8, 0x3ff, 0x4, 0x0, 0x3}, {0xf1, 0x7ff, 0xc622, 0xd, 0x5, 0x3}, {0x6, 0x29e, 0x31, 0x2, 0x800, 0x3ff}, {0x8, 0x8, 0xffff, 0x6, 0x6, 0x6}, {0xf5, 0x9, 0x10, 0x139e, 0x9, 0x81}, {0x2, 0x8, 0x101, 0x98, 0x8, 0x99}, {0xb, 0x9, 0x800, 0x5, 0x27d8, 0x10}, {0x9, 0x67, 0x2, 0x40, 0xcc, 0x9e}, {0x9e5a, 0x0, 0x8, 0x1, 0x200, 0x3}, {0x8, 0x81, 0x6, 0x53d, 0xe, 0x5}, {0x6, 0x6, 0x101, 0x7, 0x6, 0x7}, {0x2, 0x100, 0x5f80, 0x2, 0x2}, {0x2a1, 0x7, 0x5, 0x10, 0x1, 0xd}, {0x37, 0x3, 0x6, 0xad5b, 0xeb, 0x4}, {0x2, 0xaf0, 0x0, 0x1, 0x3, 0x1}, {0x5, 0x6, 0xff, 0x5, 0x7, 0x2}, {0x10000, 0x0, 0x6, 0x9, 0x9, 0x6}, {0x2, 0xf12, 0x7, 0x5, 0x40, 0x80000}, {0x1, 0xc53, 0x5dc0, 0x200, 0x8, 0x8}, {0x5, 0xe6cc, 0x8, 0x4, 0x8, 0x8}, {0x1, 0x6, 0x59, 0x0, 0x4, 0xeba}, {0x4, 0x7, 0x2, 0x654, 0x2}, {0x0, 0x2, 0xbafa, 0x9, 0x7d90, 0x1000}, {0x4, 0x40, 0x1, 0x6, 0xa, 0x6}, {0x7, 0xffffff6d, 0x8000, 0x5, 0x6, 0x81}, {0x2, 0x4, 0xd, 0x7, 0x2, 0x6}, {0x290, 0x7ff, 0xf, 0x10001, 0x80000001, 0x6}, {0x80, 0x0, 0x6, 0x9, 0xa, 0x40}, {0x7, 0x6, 0x6, 0x9, 0xc, 0x4}, {0x455, 0x7fffffff, 0x8, 0x1, 0x89, 0x3}, {0x3, 0x5, 0x7f, 0xa90, 0x8000, 0x8}, {0xffff, 0x2, 0x8, 0x20000, 0xe5e, 0x1}, {0x0, 0x6, 0x5b, 0x6, 0xd, 0x42b}, {0x5, 0x6, 0xfffffffe, 0x1, 0x10000, 0x6}, {0x2, 0xff, 0x7, 0x6, 0x0, 0x1}, {0xcaef, 0x13, 0x8, 0x3, 0x9, 0xd}, {0x401, 0x35c, 0xe, 0x2, 0x3, 0x8}, {0x9, 0xf5, 0x3, 0xfff, 0x9, 0x8}, {0x1ff, 0x9, 0x2, 0x2b73e25a, 0x5, 0x7f}, {0x6, 0x3ff, 0xc, 0x62f7a8ca, 0xac, 0x8}, {0x0, 0x31, 0x9, 0xfffffffb, 0x4, 0xee25}, {0xd, 0x7, 0x0, 0x0, 0x9, 0x71}, {0x2, 0x5, 0x2, 0x0, 0x1, 0x1}, {0x8, 0x401, 0x0, 0x4, 0x1, 0xd5d}, {0x4, 0x5, 0x5, 0xf5a7, 0x0, 0x7fff}, {0xfffffff9, 0x7, 0x3, 0x3, 0x4000, 0x3ff}, {0xfffffff8, 0x6, 0x140, 0x1000, 0x3300d576, 0x5}, {0x10, 0x40, 0x4, 0x80, 0x9, 0x8000}, {0x5c, 0x6, 0xae5, 0x9, 0x4c757b28, 0xf}, {0xb2, 0x3, 0x1, 0x8160, 0x5, 0x9}, {0xb3b7, 0x4, 0x6, 0x4, 0x7fff, 0x7}, {0xf, 0x908, 0xd2, 0x4, 0x7, 0x1}, {0x9e35, 0x1040, 0x6, 0x1, 0x9, 0x3}, {0x3, 0x2, 0xc862, 0x4, 0x2a, 0x6}, {0x3, 0x0, 0x80000001, 0x7, 0x400, 0xff}, {0x7, 0xe119, 0x2, 0xa, 0x9, 0x1}, {0x1, 0xffff, 0x5, 0x0, 0x410f, 0x1}, {0x6f0b, 0x6483b1cc, 0x8, 0x8, 0x2, 0xc}, {0xc, 0xd, 0x0, 0xffffffc0, 0x76d, 0x2}, {0x1a0000, 0x5, 0x4, 0x7fff, 0x6, 0x9}, {0x2, 0x1, 0x80000000, 0xe1ae, 0x2000, 0x8}, {0x3a, 0x0, 0x6, 0x9, 0xffff7fff, 0x5}, {0x94, 0x9, 0x31, 0x4, 0x1, 0x3}, {0xffffffff, 0x1ff, 0x0, 0x6c, 0x9, 0x8}, {0x4, 0xfffffff8, 0x0, 0xffff8001, 0x93a, 0x1}, {0x5, 0x9, 0x7, 0x0, 0x7}, {0x5, 0x5, 0x10, 0x5, 0x82b, 0x5}, {0x5, 0x8001, 0x4, 0x2, 0x8001, 0x5}, {0x1, 0xffffff03, 0x6, 0x2, 0x3, 0x5}, {0x80000000, 0x9, 0x3, 0x917, 0x1000, 0x7}, {0x8, 0xcfc, 0x5, 0x2, 0x6, 0x14}, {0x6b6, 0x0, 0x10, 0x8, 0x8, 0x3}, {0x7, 0x100, 0x8, 0xdbc2, 0x80000000, 0x3}, {0xa261, 0x2, 0x2, 0x80000001, 0x47b4, 0x46b}, {0x2, 0x8, 0x9, 0x1, 0x3ff, 0x3}, {0x3af9, 0x80000000, 0x7ff, 0x2, 0xfffffffa, 0x5}, {0xffffffff, 0x0, 0x526, 0x2, 0x9, 0x3}, {0x8, 0x4, 0xd1, 0x8, 0x8000, 0xaef5}, {0x9, 0xffff, 0x9, 0x5, 0x3, 0x8af}, {0xe50e, 0x6, 0x8, 0x1a10cf72, 0x4, 0x10000}, {0xffff, 0x1, 0x3cf, 0x9, 0x80000000, 0x10}, {0x1, 0x9, 0x72a, 0x7fffffff, 0xffffffff, 0x7}, {0xd43, 0x99a, 0x0, 0x2, 0xfffffabd, 0x100}, {0x77c, 0xb, 0x1, 0xfffffffd, 0x5, 0x200}, {0x7, 0xb, 0x7, 0x7, 0x49b, 0xfffffffb}, {0xbd, 0x1, 0x6, 0x2, 0x91, 0x200}, {0x5, 0x9, 0x0, 0x8, 0xfff, 0x7}, {0x3, 0x40, 0x101, 0x0, 0x9, 0x6}, {0xffffffff, 0x9, 0x1000, 0x5, 0x2, 0x1}, {0x8001, 0x0, 0x0, 0x0, 0x5, 0xe5b}, {0x1000, 0x331727be, 0x9, 0x5, 0x8b, 0x8}, {0x4, 0x7f, 0x5, 0x7f, 0x4ed, 0x9}, {0x9, 0x9, 0x863, 0xb, 0x3, 0x3}, {0x5, 0x4, 0x3, 0x0, 0x0, 0xd}, {0xa, 0x7, 0x0, 0x9, 0xac4, 0xb}, {0x0, 0xffff, 0x80000000, 0x4, 0x5}, {0x1, 0x3, 0x1000, 0x400, 0x990f, 0x5}, {0x6, 0x5adb8af4, 0x9, 0x80000000, 0x10, 0x5}, {0xfffff998, 0x6, 0x0, 0x5a63, 0x401, 0xe3b}, {0x4, 0x1, 0x6, 0x4, 0x10001, 0x7}, {0x7, 0xfffffffa, 0x5, 0x8, 0x101, 0xff}, {0x5, 0x10, 0x2, 0xfd2, 0x2, 0x6}], [{0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {}, {0x0, 0x1}, {}, {0x56a71822b758125, 0x1}, {0x1}, {0x1}, {0x1}, {}, {0x6, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2348}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 985.560873ms ago: executing program 9 (id=9518): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 834.5081ms ago: executing program 6 (id=9519): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue0\x00', 0x4}) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @random="a1b855c18be6", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xa5f2, 0x195, 0x89aa, 0x3, 0x64}}}}}, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) 803.340875ms ago: executing program 8 (id=9520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, 0x0) 779.634308ms ago: executing program 0 (id=9521): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e"], 0x50) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 351.545376ms ago: executing program 6 (id=9522): syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(0xffffffffffffffff) socket(0x25, 0xa, 0x3ff) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) 344.603914ms ago: executing program 9 (id=9523): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 259.140841ms ago: executing program 8 (id=9524): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000340)={0x505f15132580c539, 0x15, 0x3, "d70799"}, &(0x7f0000001200)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 258.778046ms ago: executing program 0 (id=9525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r1, &(0x7f0000000140)=""/87, 0x57) 0s ago: executing program 6 (id=9526): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99", 0x1}], 0x1}}], 0x1, 0x40) kernel console output (not intermixed with test programs): USB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 630.389768][ T5728] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 630.394565][ T5728] quatech2 8-1:0.51: device disconnected [ 630.670912][T17515] netlink: 'syz.2.4799': attribute type 4 has an invalid length. [ 630.722460][T17516] netlink: 'syz.2.4799': attribute type 4 has an invalid length. [ 630.812171][T17515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.943846][ T42] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 632.117476][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 632.119293][ T42] usb 3-1: not running at top speed; connect to a high speed hub [ 632.120452][ T42] usb 3-1: config 9 has an invalid interface number: 158 but max is 0 [ 632.120474][ T42] usb 3-1: config 9 has an invalid descriptor of length 36, skipping remainder of the config [ 632.120492][ T42] usb 3-1: config 9 has no interface number 0 [ 632.120521][ T42] usb 3-1: config 9 interface 158 has no altsetting 0 [ 632.133105][ T42] usb 3-1: New USB device found, idVendor=0421, idProduct=0001, bcdDevice=6e.2d [ 632.133133][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.133150][ T42] usb 3-1: Product: syz [ 632.133163][ T42] usb 3-1: Manufacturer: syz [ 632.133175][ T42] usb 3-1: SerialNumber: syz [ 632.500870][ T42] rndis_host 3-1:9.158: invalid descriptor buffer length [ 632.500892][ T42] rndis_host 3-1:9.158: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 632.524042][ T42] cdc_acm 3-1:9.158: invalid descriptor buffer length [ 632.545987][ T42] usb 3-1: USB disconnect, device number 40 [ 633.524161][T17590] tipc: Started in network mode [ 633.524192][T17590] tipc: Node identity 2007ff, cluster identity 4711 [ 633.524204][T17590] tipc: Node number set to 2099199 [ 633.563494][ T1008] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 633.753692][ T1008] usb 3-1: Using ep0 maxpacket: 32 [ 633.791783][ T1008] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 633.791812][ T1008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.791830][ T1008] usb 3-1: Product: syz [ 633.791842][ T1008] usb 3-1: Manufacturer: syz [ 633.791855][ T1008] usb 3-1: SerialNumber: syz [ 633.812524][ T1008] usb 3-1: config 0 descriptor?? [ 633.841731][ T1008] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 635.263006][ T1008] gspca_topro: Sensor cx0342 [ 635.382617][T17627] fuse: fd is not a fuse device [ 635.475570][ T42] usb 3-1: USB disconnect, device number 41 [ 636.666529][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4864'. [ 637.869938][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4884'. [ 638.168529][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4888'. [ 638.509539][T17711] vxlan0: entered promiscuous mode [ 638.703998][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.711578][ T67] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.711626][ T67] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.711658][ T67] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.781760][T17722] syzkaller0: entered promiscuous mode [ 638.781784][T17722] syzkaller0: entered allmulticast mode [ 639.633422][ T5607] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 639.785244][ T5607] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 639.785271][ T5607] usb 3-1: config 0 has no interface number 0 [ 639.785313][ T5607] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.823210][ T5607] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 639.823238][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.823255][ T5607] usb 3-1: Product: syz [ 639.823267][ T5607] usb 3-1: Manufacturer: syz [ 639.823279][ T5607] usb 3-1: SerialNumber: syz [ 639.828777][ T5607] usb 3-1: config 0 descriptor?? [ 639.861711][ T5607] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 640.121202][ T5866] usb 3-1: USB disconnect, device number 42 [ 640.173465][ T5866] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 640.850543][T17785] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4919'. [ 640.878538][T17785] unsupported nlmsg_type 40 [ 642.806381][T17837] fuse: fd is not a fuse device [ 643.856431][ T36] audit: type=1326 audit(1780150390.099:289): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=17862 comm="syz.7.4957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b258ece59 code=0x0 [ 644.143189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 645.628475][T17919] netlink: 264 bytes leftover after parsing attributes in process `syz.7.4981'. [ 645.628502][T17919] netlink: 264 bytes leftover after parsing attributes in process `syz.7.4981'. [ 645.748461][T17923] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4984'. [ 645.772415][T17923] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.772530][T17923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.772781][T17923] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.772865][T17923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.787652][T17923] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4984'. [ 647.374769][ T5607] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 647.435596][T17984] binder: 17983:17984 unknown command 0 [ 647.435609][T17984] binder: 17983:17984 ioctl c0306201 200000000640 returned -22 [ 647.557122][ T5607] usb 3-1: config index 0 descriptor too short (expected 12336, got 441) [ 647.557149][ T5607] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 647.557166][ T5607] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 647.557175][ T5607] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 647.557195][ T5607] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.557205][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.672332][T17988] l2tp_ppp: sess 2/0: no socket in recv [ 648.019106][ T5607] usb 3-1: string descriptor 0 read error: -71 [ 648.037297][ T5607] usb 3-1: USB disconnect, device number 43 [ 648.376013][T18011] overlayfs: failed to clone upperpath [ 649.814125][ T5866] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 649.963256][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 649.984981][ T5866] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 649.985034][ T5866] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.985046][ T5866] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.985058][ T5866] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.985070][ T5866] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.985092][ T5866] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.985103][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.340903][ T5866] usb 8-1: GET_CAPABILITIES returned 0 [ 650.340950][ T5866] usbtmc 8-1:16.0: can't read capabilities [ 650.562132][ T5866] usb 8-1: USB disconnect, device number 10 [ 651.313330][T16008] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 651.466638][T16008] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 651.466663][T16008] usb 3-1: config 0 has no interface number 0 [ 651.466689][T16008] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 651.466724][T16008] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 651.466746][T16008] usb 3-1: config 0 interface 255 has no altsetting 0 [ 651.466775][T16008] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 651.466795][T16008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.496715][T16008] usb 3-1: config 0 descriptor?? [ 651.500567][T16008] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 651.715741][ T1008] usb 3-1: USB disconnect, device number 44 [ 652.104378][ T36] audit: type=1326 audit(1780150398.349:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18104 comm="syz.5.5067" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x0 [ 652.452589][ T1008] kernel write not supported for file /input/mice (pid: 1008 comm: kworker/0:2) [ 653.656123][T18164] fuse: fd is not a fuse device [ 655.653451][T16008] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 655.818268][T16008] usb 3-1: config 0 has no interfaces? [ 655.818304][T16008] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 655.818319][T16008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.851098][T16008] usb 3-1: config 0 descriptor?? [ 656.070256][ T42] usb 3-1: USB disconnect, device number 45 [ 656.300720][T18232] fuse: fd is not a fuse device [ 656.533731][ T42] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 656.686366][ T42] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 656.688976][ T42] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 656.689004][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.689017][ T42] usb 3-1: Product: syz [ 656.689024][ T42] usb 3-1: Manufacturer: syz [ 656.689031][ T42] usb 3-1: SerialNumber: syz [ 656.901588][ T42] usb 3-1: selecting invalid altsetting 1 [ 657.011403][T18250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.101855][ T42] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 657.102031][ T42] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 657.325195][ T5866] usb 3-1: USB disconnect, device number 46 [ 658.133376][ T5607] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 658.293278][ T5607] usb 8-1: Using ep0 maxpacket: 32 [ 658.296163][ T5607] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 658.296190][ T5607] usb 8-1: config 0 has no interface number 0 [ 658.296249][ T5607] usb 8-1: config 0 interface 12 has no altsetting 0 [ 658.298593][ T5607] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 658.298619][ T5607] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.298636][ T5607] usb 8-1: Product: syz [ 658.298648][ T5607] usb 8-1: Manufacturer: syz [ 658.298660][ T5607] usb 8-1: SerialNumber: syz [ 658.317886][ T5607] usb 8-1: config 0 descriptor?? [ 660.198689][ T5607] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 660.198866][ T5607] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 660.198913][ T5607] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 660.199011][ T5607] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 660.208342][ T5607] usb 8-1: USB disconnect, device number 11 [ 660.977895][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5182'. [ 661.821466][T18387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5194'. [ 661.837256][ T1008] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 661.995476][ T1008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.995504][ T1008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.995515][ T1008] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 661.995539][ T1008] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.995578][ T1008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.000624][ T1008] usb 3-1: config 0 descriptor?? [ 662.588564][ T1008] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 662.624371][ T1008] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 662.764224][ T5607] usb 3-1: USB disconnect, device number 47 [ 663.093639][ T1008] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 663.243532][ T1008] usb 8-1: Using ep0 maxpacket: 8 [ 663.249971][ T1008] usb 8-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.250002][ T1008] usb 8-1: config 1 interface 0 has no altsetting 0 [ 663.278315][ T1008] usb 8-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 663.278347][ T1008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.278365][ T1008] usb 8-1: Product: syz [ 663.278378][ T1008] usb 8-1: Manufacturer: syz [ 663.278391][ T1008] usb 8-1: SerialNumber: syz [ 663.937257][ T1008] usbhid 8-1:1.0: can't add hid device: -71 [ 663.937376][ T1008] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 663.979332][ T1008] usb 8-1: USB disconnect, device number 12 [ 664.001762][T18434] io-wq is not configured for unbound workers [ 665.675950][T18486] fuse: fd is not a fuse device [ 665.945807][ T36] audit: type=1800 audit(1780150412.169:291): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5238" name="bus" dev="ramfs" ino=62660 res=0 errno=0 [ 667.443640][T16935] Bluetooth: hci1: command 0x0406 tx timeout [ 668.708589][T18547] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5267'. [ 669.848498][T18571] loop2: detected capacity change from 0 to 7 [ 669.879325][T18571] Dev loop2: unable to read RDB block 7 [ 669.879378][T18571] loop2: unable to read partition table [ 669.879587][T18571] loop2: partition table beyond EOD, truncated [ 669.879622][T18571] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 671.254313][T18597] netlink: 'syz.7.5290': attribute type 2 has an invalid length. [ 671.840712][ T5609] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 677.463253][ T1008] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 677.620311][ T1008] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 677.620340][ T1008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.620352][ T1008] usb 3-1: Product: syz [ 677.620360][ T1008] usb 3-1: Manufacturer: syz [ 677.620366][ T1008] usb 3-1: SerialNumber: syz [ 677.654546][ T1008] usb 3-1: config 0 descriptor?? [ 677.879721][ T1008] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 678.023408][ T5866] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 678.173488][ T5866] usb 8-1: Using ep0 maxpacket: 16 [ 678.179289][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 678.187177][ T5866] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.187209][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.187754][ T5866] usb 8-1: Product: syz [ 678.187769][ T5866] usb 8-1: Manufacturer: syz [ 678.187779][ T5866] usb 8-1: SerialNumber: syz [ 678.205993][ T5866] usb 8-1: config 0 descriptor?? [ 678.221311][ T5866] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 678.221369][ T5866] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 678.819765][ T5866] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 679.126961][T18806] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5387'. [ 679.311282][ T5866] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 679.311516][ T5866] em28xx 8-1:0.0: board has no eeprom [ 679.312632][ T1008] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 679.315998][ T1008] usb 3-1: USB disconnect, device number 48 [ 679.593302][ T5866] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 679.593437][ T5866] em28xx 8-1:0.0: dvb set to bulk mode. [ 679.594482][ T5728] em28xx 8-1:0.0: Binding DVB extension [ 679.611645][ T5866] usb 8-1: USB disconnect, device number 13 [ 679.657807][ T5866] em28xx 8-1:0.0: Disconnecting em28xx [ 679.777691][ T5728] em28xx 8-1:0.0: Registering input extension [ 679.778072][ T5866] em28xx 8-1:0.0: Closing input extension [ 680.030994][ T5866] em28xx 8-1:0.0: Freeing device [ 680.603306][ T5726] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 680.754639][ T5726] usb 3-1: Using ep0 maxpacket: 16 [ 680.760868][ T5726] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 680.760892][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.794120][ T5726] usb 3-1: config 0 descriptor?? [ 680.802408][ T5726] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 682.645972][ T5726] gspca_sonixj: i2c_w8 err -71 [ 682.663385][ T5726] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 682.668936][ T5726] usb 3-1: USB disconnect, device number 49 [ 682.727144][ T36] audit: type=1326 audit(1780150428.969:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18893 comm="syz.5.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x0 [ 684.956482][T18956] netlink: 'syz.2.5457': attribute type 4 has an invalid length. [ 685.855798][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.855843][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.006194][T18985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5472'. [ 686.006235][T18985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5472'. [ 686.980514][T19014] binder: 19013:19014 unknown command 0 [ 686.980536][T19014] binder: 19013:19014 ioctl c0306201 2000000001c0 returned -22 [ 687.378062][T19024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 687.562106][T16935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.592855][T16935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.605325][T16935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.626935][T16935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.649605][T16935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 688.861764][T19031] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.861966][T19031] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.862147][T19031] bridge_slave_0: entered allmulticast mode [ 688.896408][T19031] bridge_slave_0: entered promiscuous mode [ 688.901023][T19031] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.901137][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.901636][T19031] bridge_slave_1: entered allmulticast mode [ 688.936144][T19031] bridge_slave_1: entered promiscuous mode [ 688.990867][T19031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.001474][T19031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.038875][T19031] team0: Port device team_slave_0 added [ 689.042198][T19031] team0: Port device team_slave_1 added [ 689.093977][T19031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.093992][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.094015][T19031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.102301][T19031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.102316][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.102340][T19031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.194181][T19031] hsr_slave_0: entered promiscuous mode [ 689.195481][T19031] hsr_slave_1: entered promiscuous mode [ 689.196409][T19031] debugfs: 'hsr0' already exists in 'hsr' [ 689.196432][T19031] Cannot create hsr debugfs directory [ 689.845956][ T5609] Bluetooth: hci0: command tx timeout [ 690.324013][T19031] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 690.424962][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.459383][T19031] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 690.531634][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.532602][T19031] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 690.578950][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.580179][T19031] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 690.627196][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.889936][T19031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.914277][T19031] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.925353][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.925482][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.047062][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.048368][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.698804][ T5609] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 691.924146][ T5609] Bluetooth: hci0: command tx timeout [ 691.973318][ T5726] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 692.284696][ T5726] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 692.284729][ T5726] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 692.284749][ T5726] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 692.284792][ T5726] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.284812][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.366600][ T5726] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.371654][T19031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.595515][T19031] veth0_vlan: entered promiscuous mode [ 693.659798][T19031] veth1_vlan: entered promiscuous mode [ 693.802301][T19031] veth0_macvtap: entered promiscuous mode [ 693.815111][T19031] veth1_macvtap: entered promiscuous mode [ 693.911432][T19031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.937248][T19031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.003462][ T5609] Bluetooth: hci0: command tx timeout [ 694.102862][ T5726] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 694.124301][ T5726] usb 8-1: USB disconnect, device number 14 [ 694.290787][ T8147] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.290835][ T8147] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.290868][ T8147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.290896][ T8147] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.554513][T13934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.554535][T13934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.979242][ T8147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.979262][ T8147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.089731][ T5609] Bluetooth: hci0: command tx timeout [ 697.720414][ T36] audit: type=1326 audit(1780150443.959:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x0 [ 697.867573][ T36] audit: type=1326 audit(1780150444.109:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 697.867636][ T36] audit: type=1326 audit(1780150444.109:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 697.867673][ T36] audit: type=1326 audit(1780150444.109:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 697.867708][ T36] audit: type=1326 audit(1780150444.109:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 697.867743][ T36] audit: type=1326 audit(1780150444.109:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 697.918184][ T36] audit: type=1326 audit(1780150444.159:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01ea2fd68e code=0x7ffc0000 [ 697.919515][ T36] audit: type=1326 audit(1780150444.159:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01ea2fd68e code=0x7ffc0000 [ 697.920950][ T36] audit: type=1326 audit(1780150444.159:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01ea2fd68e code=0x7ffc0000 [ 697.922415][ T36] audit: type=1326 audit(1780150444.159:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19241 comm="syz.8.5571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01ea2fd68e code=0x7ffc0000 [ 698.286065][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5577'. [ 698.862986][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5583'. [ 698.863009][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5583'. [ 699.223442][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 699.401781][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.401831][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.401848][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.401895][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.405828][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.405856][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.405872][ T10] usb 9-1: Product: syz [ 699.405885][ T10] usb 9-1: Manufacturer: syz [ 699.435858][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 699.435879][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 699.569569][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 699.569668][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 699.657169][ T10] usb 9-1: USB disconnect, device number 2 [ 700.213512][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 700.366688][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.366716][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.366733][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.366774][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.368517][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 700.368543][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.368559][ T10] usb 9-1: Product: syz [ 700.368571][ T10] usb 9-1: Manufacturer: syz [ 700.410510][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 700.410529][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 700.430755][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 700.430774][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 700.988415][T19312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.992680][T19312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.822010][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.822189][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.822501][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.822520][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.822748][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.822765][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.822986][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.823003][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.823260][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.823276][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.823499][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.823515][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.823748][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.823764][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.823977][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.823994][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.827138][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.827156][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.832110][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 702.832132][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 702.959807][T16008] usb 9-1: USB disconnect, device number 3 [ 702.959931][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 703.403026][T19346] kernel read not supported for file /file2 (pid: 19346 comm: syz.7.5616) [ 703.416065][ T36] kauditd_printk_skb: 306 callbacks suppressed [ 703.416159][ T36] audit: type=1800 audit(1780150449.659:609): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.5616" name="file2" dev="mqueue" ino=66011 res=0 errno=0 [ 703.935578][T19365] fuse: fd is not a fuse device [ 703.973363][ T5882] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 704.123245][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 704.126155][ T5882] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 704.126209][ T5882] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 704.126230][ T5882] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 704.126252][ T5882] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.126273][ T5882] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.126311][ T5882] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 704.126332][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.439725][ T5882] usb 8-1: usb_control_msg returned -32 [ 704.439773][ T5882] usbtmc 8-1:16.0: can't read capabilities [ 704.762162][T19361] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 704.762325][T19380] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 704.762727][ T42] usb 8-1: USB disconnect, device number 15 [ 705.817867][T19399] loop2: detected capacity change from 0 to 7 [ 705.838830][T19399] loop2: p1 [ 705.838859][T19399] loop2: partition table partially beyond EOD, truncated [ 705.841119][T19399] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 706.141035][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5646'. [ 706.350542][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5646'. [ 706.464954][ T6178] udevd[6178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 706.677381][ T6178] udevd[6178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 706.789171][T19436] fuse: fd is not a fuse device [ 711.469360][T19553] netlink: 'syz.5.5704': attribute type 1 has an invalid length. [ 711.552196][T19553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.653825][T19557] bond2: entered allmulticast mode [ 711.700995][T19553] bond2: (slave ip6gretap1): making interface the new active one [ 711.701125][T19553] ip6gretap1: entered allmulticast mode [ 711.718840][T19553] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 712.140380][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 716.291414][T19654] Invalid logical block size (8192) [ 718.298500][T19699] netlink: 'syz.5.5771': attribute type 1 has an invalid length. [ 718.405516][T19699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.548419][T19701] macvlan5: entered promiscuous mode [ 718.548454][T19701] macvlan5: entered allmulticast mode [ 718.549383][T19701] bond3: entered allmulticast mode [ 718.549490][T19701] bond3: entered promiscuous mode [ 718.556686][T19701] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 718.622871][T19701] team0: Port device macvlan5 added [ 719.020220][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5777'. [ 719.026598][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5777'. [ 719.820390][T19733] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 719.843606][T19733] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 719.847326][T19733] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 719.847876][T19733] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 719.862579][T19733] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 719.862993][T19733] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 719.865089][T19733] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 719.875259][T19733] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 719.879012][T19733] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 719.879426][T19733] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 720.345901][T19760] fuse: fd is not a fuse device [ 722.675515][T19800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.675536][T19800] IPv6: NLM_F_CREATE should be set when creating new route [ 723.183021][T19800] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.212015][T19800] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.617713][T19818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.976245][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.051756][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.751901][T19834] : entered promiscuous mode [ 726.755064][ T1508] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.769701][ T1508] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.769742][ T1508] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.769767][ T1508] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.346291][T19922] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.768624][T19948] overlayfs: upper fs does not support file handles, falling back to index=off. [ 729.904993][T19950] kvm_intel: kvm [19949]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 735.103306][T15727] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 735.255750][T15727] usb 9-1: config 0 has no interfaces? [ 735.257323][T15727] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 735.257348][T15727] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 735.257364][T15727] usb 9-1: Manufacturer: syz [ 735.257371][T15727] usb 9-1: SerialNumber: syz [ 735.260841][T15727] usb 9-1: config 0 descriptor?? [ 735.467381][T15727] usb 9-1: USB disconnect, device number 4 [ 736.623537][T20045] ALSA: mixer_oss: invalid OSS volume '' [ 739.500481][T20117] fuse: fd is not a fuse device [ 740.042750][ T36] audit: type=1326 audit(1780150486.279:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.043284][ T36] audit: type=1326 audit(1780150486.279:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.095915][ T36] audit: type=1326 audit(1780150486.339:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.096191][ T36] audit: type=1326 audit(1780150486.339:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.096525][ T36] audit: type=1326 audit(1780150486.339:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.097201][ T36] audit: type=1326 audit(1780150486.339:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.097452][ T36] audit: type=1326 audit(1780150486.339:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.097701][ T36] audit: type=1326 audit(1780150486.339:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.097901][ T36] audit: type=1326 audit(1780150486.339:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 740.098077][ T36] audit: type=1326 audit(1780150486.339:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20134 comm="syz.7.5937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 744.300454][T20204] syzkaller0: entered promiscuous mode [ 744.300479][T20204] syzkaller0: entered allmulticast mode [ 744.663940][T20219] tipc: Enabling of bearer rejected, failed to enable media [ 747.286336][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.286401][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.011214][ T5609] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 748.057271][ T5609] Bluetooth: hci0: Injecting HCI hardware error event [ 748.110059][ T5609] Bluetooth: hci0: hardware error 0x00 [ 750.645906][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 753.503373][ T5607] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 753.803982][ T5607] usb 9-1: Using ep0 maxpacket: 16 [ 754.956537][ T5607] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.956592][ T5607] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.956618][ T5607] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 754.956637][ T5607] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 754.956658][ T5607] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.958578][ T5607] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 754.958602][ T5607] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 754.958620][ T5607] usb 9-1: Manufacturer: syz [ 755.106348][ T5607] usb 9-1: config 0 descriptor?? [ 755.373304][ T5607] rc_core: IR keymap rc-hauppauge not found [ 755.373327][ T5607] Registered IR keymap rc-empty [ 755.373668][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.393272][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.415727][ T5607] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 755.419415][ T5607] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input37 [ 755.573474][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.593583][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.614199][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.643437][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.663415][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.683539][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.703419][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.723573][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.753459][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.773452][ T5607] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 755.958164][ T5607] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 755.958189][ T5607] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 755.983243][ T5607] usb 9-1: USB disconnect, device number 5 [ 757.630676][T20385] binder: BINDER_SET_CONTEXT_MGR already set [ 757.630691][T20385] binder: 20384:20385 ioctl 4018620d 200000004a80 returned -16 [ 761.285085][T20449] netlink: 'syz.5.6060': attribute type 1 has an invalid length. [ 761.381278][T20449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 761.391093][T20455] vlan3: entered allmulticast mode [ 761.391113][T20455] bond4: entered allmulticast mode [ 761.475295][T20449] bond4: (slave geneve2): making interface the new active one [ 761.475319][T20449] geneve2: entered allmulticast mode [ 762.164731][T20449] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 762.747602][T20449] syz.5.6060 (20449) used greatest stack depth: 15712 bytes left [ 762.890840][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6068'. [ 767.677226][T20503] syz_tun: entered promiscuous mode [ 767.677723][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6079'. [ 767.944685][T20503] syz_tun (unregistering): left promiscuous mode [ 772.155003][T20558] syzkaller0: refused to change device tx_queue_len [ 776.118601][T20623] sctp: [Deprecated]: syz.5.6130 (pid 20623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.118601][T20623] Use struct sctp_sack_info instead [ 776.792789][T20647] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6138'. [ 776.792905][T20647] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6138'. [ 776.792915][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6138'. [ 778.593116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.613108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.623148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.633104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.643112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.673143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.693156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 784.384900][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6166'. [ 784.508171][T20719] netlink: 'syz.5.6166': attribute type 10 has an invalid length. [ 784.508194][T20719] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6166'. [ 784.645315][T20720] bridge2: port 1(dummy0) entered blocking state [ 784.645571][T20720] bridge2: port 1(dummy0) entered disabled state [ 784.647361][T20720] dummy0: entered allmulticast mode [ 784.682817][T20720] dummy0: entered promiscuous mode [ 784.795145][T20719] bridge2: port 1(dummy0) entered blocking state [ 784.795815][T20719] bridge2: port 1(dummy0) entered forwarding state [ 784.829698][T20719] dummy0: left allmulticast mode [ 784.829979][T20719] bridge2: port 1(dummy0) entered disabled state [ 789.112457][T20783] netlink: 'syz.8.6189': attribute type 30 has an invalid length. [ 789.121830][T20783] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6189'. [ 794.035943][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6218'. [ 795.198353][T20860] syzkaller0: entered promiscuous mode [ 795.198396][T20860] syzkaller0: entered allmulticast mode [ 796.728342][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 796.728360][ T36] audit: type=1326 audit(1780150542.969:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.728404][ T36] audit: type=1326 audit(1780150542.969:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.729279][ T36] audit: type=1326 audit(1780150542.969:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.729413][ T36] audit: type=1326 audit(1780150542.969:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.729657][ T36] audit: type=1326 audit(1780150542.969:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01ea33e6c7 code=0x7ffc0000 [ 796.730352][ T36] audit: type=1326 audit(1780150542.969:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.730480][ T36] audit: type=1326 audit(1780150542.969:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.731118][ T36] audit: type=1326 audit(1780150542.969:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 796.731255][ T36] audit: type=1326 audit(1780150542.969:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01ea2fd68e code=0x7ffc0000 [ 796.731439][ T36] audit: type=1326 audit(1780150542.969:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20881 comm="syz.8.6230" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 801.474336][T20920] Bluetooth: MGMT ver 1.23 [ 805.188545][T20964] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 0. macoff=72 [ 805.891807][T20971] syzkaller0: entered promiscuous mode [ 805.891833][T20971] syzkaller0: entered allmulticast mode [ 808.738743][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.738798][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.903785][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6277'. [ 808.903827][T20999] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 811.045500][T21032] netlink: 'syz.8.6291': attribute type 83 has an invalid length. [ 814.135539][T21069] lo: entered allmulticast mode [ 814.180990][T21069] : entered promiscuous mode [ 814.181011][T21069] bond_slave_0: entered promiscuous mode [ 814.181332][T21069] bond_slave_1: entered promiscuous mode [ 825.961897][T21203] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6357'. [ 826.063798][T21203] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 826.239990][T21203] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 827.956479][T21203] bond1 (unregistering): Released all slaves [ 829.526386][T21236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6370'. [ 831.321602][ T10] bridge0: entered promiscuous mode [ 836.793505][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 836.949413][ T10] usb 8-1: config 1 interface 0 altsetting 187 bulk endpoint 0x1 has invalid maxpacket 64 [ 836.949448][ T10] usb 8-1: config 1 interface 0 altsetting 187 bulk endpoint 0x82 has invalid maxpacket 32 [ 836.949488][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 836.963882][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 836.963909][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.963927][ T10] usb 8-1: Product: syz [ 836.963939][ T10] usb 8-1: Manufacturer: syz [ 836.963949][ T10] usb 8-1: SerialNumber: syz [ 838.084276][T21281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 838.084430][T21281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 840.051547][ T10] usb 8-1: USB disconnect, device number 16 [ 850.110309][T21415] lo speed is unknown, defaulting to 1000 [ 850.110400][T21415] lo speed is unknown, defaulting to 1000 [ 850.113549][T21415] lo speed is unknown, defaulting to 1000 [ 850.115931][T21415] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 850.115951][T21415] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 850.115971][T21415] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 850.119512][T21415] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 850.129629][T21415] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 850.249190][T21415] lo speed is unknown, defaulting to 1000 [ 850.251386][T21415] lo speed is unknown, defaulting to 1000 [ 850.252827][T21415] lo speed is unknown, defaulting to 1000 [ 850.254394][T21415] lo speed is unknown, defaulting to 1000 [ 850.255817][T21415] lo speed is unknown, defaulting to 1000 [ 850.257185][T21415] lo speed is unknown, defaulting to 1000 [ 850.281096][T21416] smbdirect: ib_dev[syz2] renamed to [syz0] [ 857.687515][T21475] binder: 21473:21475 ioctl c0306201 2000000002c0 returned -14 [ 861.848520][T21489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.858751][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6489'. [ 866.858790][T21556] openvswitch: netlink: Key 18 has unexpected len 4 expected 2 [ 870.436819][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.436894][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.108549][T19880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.108584][T19880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.995043][T21627] No control pipe specified [ 875.038976][T19880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.039011][T19880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.378627][T19880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.378649][T19880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.954157][T19880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.954191][T19880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.534080][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.383528][T19880] bridge_slave_1: left allmulticast mode [ 886.383563][T19880] bridge_slave_1: left promiscuous mode [ 886.383828][T19880] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.568740][T19880] bridge_slave_0: left allmulticast mode [ 886.568779][T19880] bridge_slave_0: left promiscuous mode [ 886.569019][T19880] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.111727][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 887.111745][ T36] audit: type=1326 audit(1780150633.349:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.112083][ T36] audit: type=1326 audit(1780150633.349:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.112320][ T36] audit: type=1326 audit(1780150633.349:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.112608][ T36] audit: type=1326 audit(1780150633.349:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225180][ T36] audit: type=1326 audit(1780150633.449:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225232][ T36] audit: type=1326 audit(1780150633.449:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225268][ T36] audit: type=1326 audit(1780150633.449:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225307][ T36] audit: type=1326 audit(1780150633.449:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225347][ T36] audit: type=1326 audit(1780150633.449:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 887.225385][ T36] audit: type=1326 audit(1780150633.449:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.5.6540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228c5ce59 code=0x7ffc0000 [ 895.286687][T19880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.364175][T19880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.406910][T19880] bond0 (unregistering): Released all slaves [ 895.426909][T19880] bond1 (unregistering): Released all slaves [ 895.527676][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 895.533520][T21810] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.6575'. [ 895.694944][T19880] tipc: Disabling bearer [ 895.699951][T19880] tipc: Left network mode [ 900.763032][ C0] Adjusting tsc more than 11% (8578432 vs 8464051) [ 901.062635][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 904.473937][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 905.095847][T21919] sctp: [Deprecated]: syz.5.6597 (pid 21919) Use of int in max_burst socket option deprecated. [ 905.095847][T21919] Use struct sctp_assoc_value instead [ 907.346991][T19880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.347011][T19880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.525529][T19880] veth1_macvtap: left promiscuous mode [ 907.525592][T19880] veth0_macvtap: left promiscuous mode [ 907.525774][T19880] veth1_vlan: left promiscuous mode [ 907.525873][T19880] veth0_vlan: left promiscuous mode [ 910.127743][T19880] team0 (unregistering): Port device team_slave_1 removed [ 910.186420][T19880] team0 (unregistering): Port device team_slave_0 removed [ 910.823653][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 910.824069][T21955] tipc: Started in network mode [ 910.824093][T21955] tipc: Node identity 7f000001, cluster identity 4711 [ 910.825253][T21955] tipc: Enabling of bearer rejected, failed to enable media [ 915.486149][T19880] IPVS: stop unused estimator thread 0... [ 921.496053][T22103] lo speed is unknown, defaulting to 1000 [ 922.238618][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 922.238636][ T36] audit: type=1326 audit(1780674956.948:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22114 comm="syz.7.6662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b258ece59 code=0x0 [ 930.704059][T22230] team0: Port device vxlan0 added [ 930.704147][T19844] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.704877][T19844] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.704915][T19844] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.704948][T19844] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.162880][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.162943][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.866301][ T5866] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 943.018055][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.018081][ T5866] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 943.018117][ T5866] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 943.018137][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.023786][ T5866] usb 8-1: config 0 descriptor?? [ 945.919432][ T42] usb 8-1: USB disconnect, device number 17 [ 952.392735][T22408] overlayfs: failed to clone lowerpath [ 956.459397][T22429] fuse: Bad value for 'fd' [ 971.140967][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6798'. [ 971.174187][T22563] macvtap1: entered promiscuous mode [ 971.174768][T22563] macvtap1: entered allmulticast mode [ 971.174780][T22563] dummy0: entered allmulticast mode [ 971.211264][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6798'. [ 971.291595][T22564] dummy0: left allmulticast mode [ 971.326289][T22564] macvtap1: left promiscuous mode [ 971.326317][T22564] macvtap1: left allmulticast mode [ 976.011526][T22601] fuse: fd is not a fuse device [ 992.578973][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.579041][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.347182][T22795] binder: Bad value for 'stats' [ 1006.101112][T22799] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6880'. [ 1006.341525][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 1006.358505][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 1006.409526][T22799] ceph: No mds server is up or the cluster is laggy [ 1006.530997][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1006.597823][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 1006.598035][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 1006.631532][T22808] batadv0: entered promiscuous mode [ 1006.658932][T22808] macvtap2: entered promiscuous mode [ 1006.659126][T22808] macvtap2: entered allmulticast mode [ 1006.659138][T22808] batadv0: entered allmulticast mode [ 1006.668129][T22808] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1006.752176][T22811] batadv0: left allmulticast mode [ 1006.768070][T22811] batadv0: left promiscuous mode [ 1006.829675][T22811] macvtap2: left promiscuous mode [ 1006.829703][T22811] macvtap2: left allmulticast mode [ 1006.923550][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 1006.923739][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 1008.995287][T22827] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6889'. [ 1014.054438][T22882] overlayfs: failed to clone lowerpath [ 1018.342247][T22907] sctp: [Deprecated]: syz.8.6919 (pid 22907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1018.342247][T22907] Use struct sctp_sack_info instead [ 1022.546271][T22939] sctp: [Deprecated]: syz.7.6931 (pid 22939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.546271][T22939] Use struct sctp_sack_info instead [ 1022.546711][T22939] sctp: [Deprecated]: syz.7.6931 (pid 22939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.546711][T22939] Use struct sctp_sack_info instead [ 1022.615107][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6931'. [ 1022.636460][T22939] bridge0: port 3(vlan3) entered blocking state [ 1022.636533][T22939] bridge0: port 3(vlan3) entered disabled state [ 1022.636703][T22939] vlan3: entered allmulticast mode [ 1022.636713][T22939] vlan0: entered allmulticast mode [ 1022.636719][T22939] veth0_vlan: entered allmulticast mode [ 1022.642696][T22939] vlan3: entered promiscuous mode [ 1022.642710][T22939] vlan0: entered promiscuous mode [ 1026.916689][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6961'. [ 1029.463846][T19862] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.514618][ T1131] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.514655][ T1131] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.514674][ T1131] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1031.596290][ T5607] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1031.756251][ T5607] usb 8-1: Using ep0 maxpacket: 32 [ 1031.758665][ T5607] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.758694][ T5607] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.758729][ T5607] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1031.758751][ T5607] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.816889][ T5607] usb 8-1: config 0 descriptor?? [ 1031.828362][ T5607] hub 8-1:0.0: USB hub found [ 1032.131874][ T5607] hub 8-1:0.0: 1 port detected [ 1032.447239][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.484704][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.690425][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.693772][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.726549][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.728499][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.731444][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.732380][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.934625][ T5607] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1032.934684][ T5607] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1032.968131][ T5607] usbhid 8-1:0.0: can't add hid device: -71 [ 1032.968254][ T5607] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1033.007203][ T5607] usb 8-1: USB disconnect, device number 18 [ 1038.552476][T16008] IPVS: starting estimator thread 0... [ 1038.636298][T23119] IPVS: using max 16 ests per chain, 38400 per kthread [ 1042.110732][T23156] overlayfs: failed to clone lowerpath [ 1046.659333][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7023'. [ 1052.399760][T23245] loop3: detected capacity change from 0 to 8 [ 1054.096635][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.096678][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.436327][T23272] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7050'. [ 1061.299135][T23318] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7070'. [ 1061.477142][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1065.656138][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7087'. [ 1065.656224][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7087'. [ 1065.814177][ T5609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1065.833825][ T5609] Bluetooth: hci1: Injecting HCI hardware error event [ 1065.889981][T22647] Bluetooth: hci1: hardware error 0x00 [ 1068.340105][T23374] netlink: 608 bytes leftover after parsing attributes in process `syz.7.7085'. [ 1068.414559][T23373] input: syz0 as /devices/virtual/input/input38 [ 1068.786401][ T5607] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1070.702076][ T5607] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.702106][ T5607] usb 8-1: config 0 has no interfaces? [ 1070.728733][ T5607] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.728761][ T5607] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.728779][ T5607] usb 8-1: Product: syz [ 1070.728804][ T5607] usb 8-1: Manufacturer: syz [ 1070.728817][ T5607] usb 8-1: SerialNumber: syz [ 1070.783709][ T5607] usb 8-1: config 0 descriptor?? [ 1070.861655][ T5607] usb 8-1: can't set config #0, error -71 [ 1070.882497][ T5607] usb 8-1: USB disconnect, device number 19 [ 1070.991048][T22647] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1076.922944][T23440] pimreg: entered allmulticast mode [ 1076.987997][T23443] 9p: Bad value for 'rfdno' [ 1076.995155][T23443] pimreg: left allmulticast mode [ 1081.523292][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7120'. [ 1088.265796][T23549] lo speed is unknown, defaulting to 1000 [ 1094.794706][T23594] overlayfs: failed to clone lowerpath [ 1095.819040][T23607] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1097.835411][T23621] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15382] was attempted by ""[23621] [ 1102.299228][T23650] sctp: [Deprecated]: syz.7.7185 (pid 23650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1102.299228][T23650] Use struct sctp_sack_info instead [ 1102.299391][T23650] sctp: [Deprecated]: syz.7.7185 (pid 23650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1102.299391][T23650] Use struct sctp_sack_info instead [ 1104.507252][T23685] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1104.507288][T23685] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1104.507323][T23685] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1104.521780][T23685] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1106.117803][T23697] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1106.117821][T23697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1106.117966][T23697] vhci_hcd vhci_hcd.0: Device attached [ 1107.272608][ T5710] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1107.278330][ T5866] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1107.539878][ T5710] usb 8-1: Using ep0 maxpacket: 32 [ 1107.543817][ T5710] usb 8-1: config 0 has no interfaces? [ 1107.546278][ T5710] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.546298][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.546307][ T5710] usb 8-1: Product: syz [ 1107.546315][ T5710] usb 8-1: Manufacturer: syz [ 1107.546321][ T5710] usb 8-1: SerialNumber: syz [ 1107.549908][ T5710] usb 8-1: config 0 descriptor?? [ 1107.856815][T23703] vhci_hcd: connection closed [ 1108.750829][ T1131] vhci_hcd vhci_hcd.7: stop threads [ 1108.750854][ T1131] vhci_hcd vhci_hcd.7: release socket [ 1108.766953][ T5590] usb 8-1: USB disconnect, device number 20 [ 1108.836472][ T1131] vhci_hcd vhci_hcd.7: disconnect device [ 1108.864859][ T5866] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1111.433094][T23757] gfs2: error -5 reading superblock [ 1112.234697][T23767] sctp: [Deprecated]: syz.7.7227 (pid 23767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1112.234697][T23767] Use struct sctp_sack_info instead [ 1112.234838][T23767] sctp: [Deprecated]: syz.7.7227 (pid 23767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1112.234838][T23767] Use struct sctp_sack_info instead [ 1118.200190][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.200259][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.061588][T23843] sctp: [Deprecated]: syz.5.7253 (pid 23843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.061588][T23843] Use struct sctp_sack_info instead [ 1122.061723][T23843] sctp: [Deprecated]: syz.5.7253 (pid 23843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.061723][T23843] Use struct sctp_sack_info instead [ 1124.841441][T23873] sctp: [Deprecated]: syz.5.7268 (pid 23873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1124.841441][T23873] Use struct sctp_sack_info instead [ 1124.841646][T23873] sctp: [Deprecated]: syz.5.7268 (pid 23873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1124.841646][T23873] Use struct sctp_sack_info instead [ 1127.161630][T23890] ceph: No mds server is up or the cluster is laggy [ 1127.188704][T16008] libceph: connect (1)[c::]:6789 error -101 [ 1127.188836][T16008] libceph: mon0 (1)[c::]:6789 connect error [ 1132.248698][T23926] IPVS: set_ctl: invalid protocol: 255 172.20.20.60:20001 [ 1132.273871][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7284'. [ 1132.368059][T23931] kAFS: unable to lookup cell '' [ 1135.265209][T23954] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7291'. [ 1145.516222][T24025] 9pnet_virtio: no channels available for device syz [ 1146.662605][T24024] smbdirect: ib_dev[syz0] removed [ 1150.429975][T24063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7332'. [ 1152.389237][ T5866] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1152.549483][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1154.762528][T24106] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.7347'. [ 1154.794221][T24106] overlayfs: missing 'lowerdir' [ 1156.183089][ T5866] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1156.184059][ T5866] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1156.184092][ T5866] usb 8-1: can't read configurations, error -71 [ 1171.620899][T24233] fuse: fd is not a fuse device [ 1171.639508][T24233] 9p: Bad value for 'rfdno' [ 1184.037828][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.151192][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.583236][T24322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.509153][T24368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7435'. [ 1189.528125][T24368] fuse: fd is not a fuse device [ 1190.019842][T24373] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1190.408521][T24386] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7442'. [ 1194.159339][T24437] overlayfs: missing 'lowerdir' [ 1195.672483][T24434] process 'newroot/258/file1/file0' started with executable stack [ 1198.538154][T24488] sctp: [Deprecated]: syz.5.7482 (pid 24488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1198.538154][T24488] Use struct sctp_sack_info instead [ 1198.538282][T24488] sctp: [Deprecated]: syz.5.7482 (pid 24488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1198.538282][T24488] Use struct sctp_sack_info instead [ 1198.575595][T24488] bridge0: left allmulticast mode [ 1198.638380][ T42] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1198.825406][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1198.825452][ T42] usb 8-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.07 [ 1198.825473][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.862987][ T42] usb 8-1: config 0 descriptor?? [ 1198.870477][ T42] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1201.237636][ T5710] usb 8-1: USB disconnect, device number 24 [ 1202.998333][ T5866] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1204.181690][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1204.227089][ T5866] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1204.227117][ T5866] usb 8-1: config 0 has no interface number 0 [ 1204.267090][ T5866] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1204.267120][ T5866] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1204.267142][ T5866] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1204.296718][ T5866] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1204.296745][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.296762][ T5866] usb 8-1: Product: syz [ 1204.296775][ T5866] usb 8-1: Manufacturer: syz [ 1204.296788][ T5866] usb 8-1: SerialNumber: syz [ 1204.337725][ T5866] usb 8-1: config 0 descriptor?? [ 1204.349951][ T5866] f81534 8-1:0.12: unsupported endpoint max packet size [ 1204.577649][ T42] usb 8-1: USB disconnect, device number 25 [ 1207.164050][T24615] FAT-fs (nullb0): bogus number of reserved sectors [ 1207.164065][T24615] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1207.551258][T24623] fuse: fd is not a fuse device [ 1209.976386][ T5710] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1210.140870][ T5710] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1210.141443][ T5710] usb 8-1: not running at top speed; connect to a high speed hub [ 1210.142536][ T5710] usb 8-1: config 64 has an invalid interface number: 204 but max is 0 [ 1210.142560][ T5710] usb 8-1: config 64 has no interface number 0 [ 1210.142582][ T5710] usb 8-1: config 64 interface 204 has no altsetting 0 [ 1210.144686][ T5710] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1210.144711][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.144724][ T5710] usb 8-1: Product: syz [ 1210.144731][ T5710] usb 8-1: Manufacturer: syz [ 1210.144738][ T5710] usb 8-1: SerialNumber: syz [ 1210.401034][ T5710] go7007 8-1:64.204: probe with driver go7007 failed with error -12 [ 1210.412857][ T5710] usb 8-1: USB disconnect, device number 26 [ 1211.429751][ T5710] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1211.589858][ T5710] usb 8-1: Using ep0 maxpacket: 32 [ 1211.591902][ T5710] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1211.591919][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.596207][ T5710] usb 8-1: config 0 descriptor?? [ 1211.605127][ T5710] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1211.670324][T24699] sctp: [Deprecated]: syz.5.7580 (pid 24699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1211.670324][T24699] Use struct sctp_sack_info instead [ 1211.859536][ T5710] gspca_sq930x: reg_r 001f failed -71 [ 1211.859645][ T5710] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 1211.863628][ T5710] usb 8-1: USB disconnect, device number 27 [ 1212.544524][T24728] sctp: [Deprecated]: syz.8.7594 (pid 24728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1212.544524][T24728] Use struct sctp_sack_info instead [ 1216.422212][T24774] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7614'. [ 1216.505540][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 1219.091502][ T5866] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1219.171649][T24810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7629'. [ 1219.251742][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 1219.258221][ T5866] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1219.259533][ T5866] usb 8-1: config 11 has an invalid interface number: 244 but max is 0 [ 1219.259556][ T5866] usb 8-1: config 11 has no interface number 0 [ 1219.259594][ T5866] usb 8-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1219.259607][ T5866] usb 8-1: config 11 interface 244 altsetting 5 endpoint 0x8 has invalid maxpacket 24966, setting to 64 [ 1219.259619][ T5866] usb 8-1: config 11 interface 244 has no altsetting 0 [ 1219.261725][ T5866] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1219.261750][ T5866] usb 8-1: New USB device strings: Mfr=33, Product=20, SerialNumber=3 [ 1219.261761][ T5866] usb 8-1: Product: syz [ 1219.261767][ T5866] usb 8-1: Manufacturer: syz [ 1219.261774][ T5866] usb 8-1: SerialNumber: syz [ 1219.552626][ T5866] usb 8-1: USB disconnect, device number 28 [ 1219.810215][T24824] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7637'. [ 1221.467530][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7642'. [ 1222.768890][T24873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7659'. [ 1223.506520][T24903] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1223.579767][ T5710] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1223.741589][ T5710] usb 8-1: config 12 has an invalid interface number: 248 but max is 1 [ 1223.741617][ T5710] usb 8-1: config 12 has an invalid interface number: 39 but max is 1 [ 1223.741635][ T5710] usb 8-1: config 12 has no interface number 0 [ 1223.741649][ T5710] usb 8-1: config 12 has no interface number 1 [ 1223.741684][ T5710] usb 8-1: config 12 interface 248 has no altsetting 0 [ 1223.741693][ T5710] usb 8-1: config 12 interface 39 has no altsetting 0 [ 1223.743825][ T5710] usb 8-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 1223.743852][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.743870][ T5710] usb 8-1: Product: syz [ 1223.743881][ T5710] usb 8-1: Manufacturer: syz [ 1223.743891][ T5710] usb 8-1: SerialNumber: syz [ 1224.051894][ T5710] usb 8-1: USB disconnect, device number 29 [ 1224.129041][T24918] openvswitch: netlink: Flow key attribute not present in set flow. [ 1224.411852][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 1224.964325][T24949] sctp: [Deprecated]: syz.8.7695 (pid 24949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1224.964325][T24949] Use struct sctp_sack_info instead [ 1224.964449][T24949] sctp: [Deprecated]: syz.8.7695 (pid 24949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1224.964449][T24949] Use struct sctp_sack_info instead [ 1227.090379][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7701'. [ 1228.866089][T24990] tmpfs: Bad value for 'mpol' [ 1232.096528][ T5590] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1232.261260][ T5590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.261389][ T5590] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1232.261402][ T5590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.266837][ T5590] usb 8-1: config 0 descriptor?? [ 1232.486973][ T5590] ath6kl: Failed to submit usb control message: -71 [ 1232.487025][ T5590] ath6kl: unable to send the bmi data to the device: -71 [ 1232.487039][ T5590] ath6kl: Unable to send get target info: -71 [ 1232.547681][ T5590] ath6kl: Failed to init ath6kl core: -71 [ 1232.616736][ T5590] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1232.634015][ T5590] usb 8-1: USB disconnect, device number 30 [ 1232.938719][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7746'. [ 1234.724626][T25086] netlink: 'syz.7.7755': attribute type 44 has an invalid length. [ 1235.184227][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7758'. [ 1237.928751][T25131] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 1237.928751][T25131] SȘȞZ6' [ 1240.294544][T25188] tmpfs: Bad value for 'mpol' [ 1240.873013][T25199] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1241.006826][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7807'. [ 1243.685134][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7836'. [ 1243.844795][T25266] netlink: 'syz.5.7840': attribute type 21 has an invalid length. [ 1243.854813][T25258] veth5: entered allmulticast mode [ 1244.422321][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7850'. [ 1245.867663][T25311] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7859'. [ 1245.913700][ T42] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1246.084885][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 1247.055291][T25342] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1247.055308][T25342] CIFS mount error: No usable UNC path provided in device string! [ 1247.055308][T25342] [ 1247.055690][T25342] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1247.938691][ T42] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1247.940472][ T42] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1247.940517][ T42] usb 8-1: can't read configurations, error -71 [ 1249.273650][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1249.653548][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.653607][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.351695][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1254.699634][T25496] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0 [ 1254.908447][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7943'. [ 1255.682283][T25532] comedi comedi4: commands at RT priority not supported in this driver [ 1256.202119][T25552] tmpfs: Bad value for 'mpol' [ 1256.905732][T25575] netlink: 'syz.7.7976': attribute type 13 has an invalid length. [ 1261.970036][ T36] audit: type=1326 audit(1250.299:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.970490][ T36] audit: type=1326 audit(1250.299:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.973152][ T36] audit: type=1326 audit(1250.299:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.973285][ T36] audit: type=1326 audit(1250.299:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.973481][ T36] audit: type=1326 audit(1250.299:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.973584][ T36] audit: type=1326 audit(1250.299:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.973714][ T36] audit: type=1326 audit(1250.299:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.974007][ T36] audit: type=1326 audit(1250.299:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1261.974143][ T36] audit: type=1326 audit(1250.299:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25672 comm="syz.8.8023" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01ea33ce59 code=0x7ffc0000 [ 1264.716547][T25703] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8037'. [ 1264.716608][T25703] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8037'. [ 1266.607571][T25772] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8065'. [ 1267.096978][T25784] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8071'. [ 1270.242207][T25854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8104'. [ 1270.655556][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8112'. [ 1277.875494][ T42] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1278.046466][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 1278.052784][ T42] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1278.053954][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.053978][ T42] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1278.054024][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.056130][ T42] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.056156][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.056166][ T42] usb 8-1: Product: syz [ 1278.056173][ T42] usb 8-1: Manufacturer: syz [ 1278.056179][ T42] usb 8-1: SerialNumber: syz [ 1278.319377][ T42] cdc_ncm 8-1:1.0: skipping garbage [ 1278.319390][ T42] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1278.319415][ T42] cdc_ncm 8-1:1.0: bind() failure [ 1278.359579][ T42] usb 8-1: USB disconnect, device number 33 [ 1281.807935][ T5710] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1281.974579][ T5710] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1281.974607][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1281.974620][ T5710] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1281.974643][ T5710] usb 8-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1281.974654][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.978160][ T5710] usb 8-1: config 0 descriptor?? [ 1281.979826][T26092] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1282.422126][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422150][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422166][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422180][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422194][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422208][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422222][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422236][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422250][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.422272][ T5710] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 1282.516600][ T5710] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.7-1/input0 [ 1282.642239][ T5710] usb 8-1: USB disconnect, device number 34 [ 1282.897134][T26133] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8236'. [ 1283.825678][T26167] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8253'. [ 1285.270301][ T5710] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1285.430436][ T5710] usb 8-1: Using ep0 maxpacket: 16 [ 1285.455478][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.455508][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.455519][ T5710] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1285.455542][ T5710] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1285.455554][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.459118][ T5710] usb 8-1: config 0 descriptor?? [ 1285.931822][ T5710] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 1285.933465][ T5710] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 1285.936270][ T5710] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 1285.947844][ T5710] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1285.947948][ T5710] microsoft 0003:045E:07DA.0016: no inputs found [ 1285.947974][ T5710] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 1286.141437][ T5710] usb 8-1: USB disconnect, device number 35 [ 1287.491048][T26287] fuse: Invalid rootmode [ 1290.778803][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8359'. [ 1291.553212][T26399] tipc: Enabling of bearer rejected, failed to enable media [ 1296.470767][T26496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8400'. [ 1298.284082][T26531] netlink: 'syz.7.8419': attribute type 32 has an invalid length. [ 1298.284105][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8419'. [ 1298.366678][T26531] bond0: option coupled_control: invalid value (7) [ 1298.399458][T26531] bond0 (unregistering): Released all slaves [ 1299.482658][ T42] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1299.653607][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 1299.657601][ T42] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1299.657620][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.657631][ T42] usb 8-1: Product: syz [ 1299.657638][ T42] usb 8-1: Manufacturer: syz [ 1299.657645][ T42] usb 8-1: SerialNumber: syz [ 1299.662382][ T42] usb 8-1: config 0 descriptor?? [ 1299.690994][ T42] gspca_main: se401-2.14.0 probing 047d:5003 [ 1300.159644][ T42] gspca_se401: ExtraFeatures: 48 [ 1300.159665][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159678][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159689][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159700][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159711][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159722][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159733][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159744][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159755][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.159765][ T42] gspca_se401: Frame size: 0x0 1/16th janggu [ 1300.381702][ T42] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input39 [ 1300.408811][ T42] usb 8-1: USB disconnect, device number 36 [ 1301.143244][T26612] macvlan2: entered promiscuous mode [ 1301.205735][T26614] binder: 26613:26614 ioctl c0306201 200000000640 returned -22 [ 1302.390863][T26647] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8473'. [ 1304.159124][T26683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.684748][T26697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8497'. [ 1308.336457][T26751] netlink: 'syz.7.8522': attribute type 1 has an invalid length. [ 1308.336493][T26751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.162277][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.162344][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.376813][T26864] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8571'. [ 1316.623499][ T5710] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1316.783348][ T5710] usb 8-1: Using ep0 maxpacket: 8 [ 1316.788222][ T5710] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1316.788248][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.788258][ T5710] usb 8-1: Product: syz [ 1316.788265][ T5710] usb 8-1: Manufacturer: syz [ 1316.788272][ T5710] usb 8-1: SerialNumber: syz [ 1316.799583][ T5710] usb 8-1: config 0 descriptor?? [ 1316.840658][ T5710] gspca_main: se401-2.14.0 probing 047d:5003 [ 1317.295958][ T5710] gspca_se401: ExtraFeatures: 101 [ 1317.295973][ T5710] gspca_se401: Too many frame sizes [ 1317.516663][ T5590] usb 8-1: USB disconnect, device number 37 [ 1318.856222][T26926] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8598'. [ 1320.405937][ T5866] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1320.566237][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 1320.568295][ T5866] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1320.568317][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.568335][ T5866] usb 8-1: config 0 has no interface number 0 [ 1320.568363][ T5866] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1320.568396][ T5866] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1320.568431][ T5866] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1320.570919][ T5866] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1320.570944][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.570955][ T5866] usb 8-1: Product: syz [ 1320.570962][ T5866] usb 8-1: Manufacturer: syz [ 1320.570969][ T5866] usb 8-1: SerialNumber: syz [ 1320.574732][ T5866] usb 8-1: config 0 descriptor?? [ 1320.687737][ T5866] streamzap 8-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1321.118838][T26963] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8609'. [ 1322.342586][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8623'. [ 1322.343533][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8623'. [ 1322.530444][T26984] dvmrp1: entered allmulticast mode [ 1323.563297][ T5590] usb 8-1: USB disconnect, device number 38 [ 1324.580002][T27032] sctp: [Deprecated]: syz.8.8648 (pid 27032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.580002][T27032] Use struct sctp_sack_info instead [ 1324.618766][T27032] bridge0: port 3(vlan3) entered blocking state [ 1324.618988][T27032] bridge0: port 3(vlan3) entered disabled state [ 1324.619183][T27032] vlan3: entered allmulticast mode [ 1324.619197][T27032] vlan0: entered allmulticast mode [ 1324.619208][T27032] veth0_vlan: entered allmulticast mode [ 1324.622202][T27032] vlan3: entered promiscuous mode [ 1324.622219][T27032] vlan0: entered promiscuous mode [ 1325.193440][ T5590] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1325.353567][ T5590] usb 8-1: Using ep0 maxpacket: 8 [ 1325.358618][ T5590] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1325.358650][ T5590] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.358668][ T5590] usb 8-1: config 0 has no interface number 0 [ 1325.358696][ T5590] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1325.358730][ T5590] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1325.358756][ T5590] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1325.361184][ T5590] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1325.361210][ T5590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.361228][ T5590] usb 8-1: Product: syz [ 1325.361240][ T5590] usb 8-1: Manufacturer: syz [ 1325.361253][ T5590] usb 8-1: SerialNumber: syz [ 1325.377679][ T5590] usb 8-1: config 0 descriptor?? [ 1325.419660][ T5590] streamzap 8-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1325.998919][T27056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8649'. [ 1328.133246][ T5710] usb 8-1: USB disconnect, device number 39 [ 1328.473426][T27107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8683'. [ 1329.411478][T27132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8691'. [ 1331.621232][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8709'. [ 1332.798395][T27176] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1332.808724][ T5590] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1333.309508][T27196] sctp: [Deprecated]: syz.5.8724 (pid 27196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1333.309508][T27196] Use struct sctp_sack_info instead [ 1334.347901][T27231] netlink: 'syz.7.8739': attribute type 2 has an invalid length. [ 1334.594267][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8741'. [ 1335.235389][T27254] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8750'. [ 1337.674679][ T5882] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1337.857632][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 1337.860062][ T5882] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1337.860089][ T5882] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.860107][ T5882] usb 8-1: config 179 has no interface number 0 [ 1337.860145][ T5882] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1337.860158][ T5882] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1337.860181][ T5882] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1337.860193][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.163666][T27310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.164269][T27310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.185688][ T5710] usb 8-1: USB disconnect, device number 40 [ 1338.574516][T27329] sctp: [Deprecated]: syz.5.8783 (pid 27329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1338.574516][T27329] Use struct sctp_sack_info instead [ 1341.893550][T27432] overlayfs: failed to clone lowerpath [ 1342.711402][T27459] netlink: 'syz.7.8845': attribute type 1 has an invalid length. [ 1344.194402][T27482] netlink: 'syz.7.8855': attribute type 1 has an invalid length. [ 1345.472313][T27519] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8871'. [ 1348.447622][ T5866] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1348.617109][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 1348.619635][ T5866] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1348.619660][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.619676][ T5866] usb 8-1: config 0 has no interface number 0 [ 1348.619693][ T5866] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1348.619712][ T5866] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1348.619725][ T5866] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1348.622264][ T5866] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1348.622293][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.622305][ T5866] usb 8-1: Product: syz [ 1348.622311][ T5866] usb 8-1: Manufacturer: syz [ 1348.622318][ T5866] usb 8-1: SerialNumber: syz [ 1348.626043][ T5866] usb 8-1: config 0 descriptor?? [ 1348.729124][ T5866] streamzap 8-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1349.204817][T27574] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8887'. [ 1350.706922][T27598] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8908'. [ 1351.402790][ T5710] usb 8-1: USB disconnect, device number 41 [ 1353.960239][T27642] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8927'. [ 1355.046974][T27656] loop8: detected capacity change from 0 to 7 [ 1355.057504][T27656] Dev loop8: unable to read RDB block 7 [ 1355.057543][T27656] loop8: unable to read partition table [ 1355.057740][T27656] loop8: partition table beyond EOD, truncated [ 1355.059230][T27656] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 1358.179921][T27726] fuse: fd is not a fuse device [ 1358.384166][ T5882] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1358.544629][ T5882] usb 8-1: Using ep0 maxpacket: 16 [ 1358.550001][ T5882] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1358.550446][ T5882] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 1358.550467][ T5882] usb 8-1: config 0 has no interface number 0 [ 1358.553233][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1358.553261][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.553272][ T5882] usb 8-1: Product: syz [ 1358.553279][ T5882] usb 8-1: Manufacturer: syz [ 1358.553286][ T5882] usb 8-1: SerialNumber: syz [ 1358.615389][ T5882] usb 8-1: config 0 descriptor?? [ 1358.628327][ T5882] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1358.628403][ T5882] uvcvideo 8-1:0.105: No valid video chain found. [ 1358.886390][ T5866] usb 8-1: USB disconnect, device number 42 [ 1359.348088][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8980'. [ 1360.591031][T27786] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1361.628907][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9005'. [ 1362.276511][T27838] overlayfs: statfs failed on './file0' [ 1364.072372][T27905] lo: Caught tx_queue_len zero misconfig [ 1364.416154][ T1040] kworker/u8:8 (1040) used greatest stack depth: 14912 bytes left [ 1364.986279][T27934] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9062'. [ 1368.416003][T27945] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1369.125370][T27973] fuse: Bad value for 'fd' [ 1370.477897][T28005] sctp: [Deprecated]: syz.5.9094 (pid 28005) Use of int in max_burst socket option. [ 1370.477897][T28005] Use struct sctp_assoc_value instead [ 1370.893528][T28025] lo: entered allmulticast mode [ 1370.915788][T28025] dvmrp8: entered allmulticast mode [ 1370.924521][T28024] lo: left allmulticast mode [ 1373.364334][ T36] audit: type=1326 audit(1354.538:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28064 comm="syz.7.9119" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7fc00000 [ 1376.016314][T16008] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1376.189004][T16008] usb 8-1: Using ep0 maxpacket: 32 [ 1376.191064][T16008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.191089][T16008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.191111][T16008] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1376.191122][T16008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.210220][T16008] usb 8-1: config 0 descriptor?? [ 1376.787111][T16008] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1377.003188][T16008] usb 8-1: USB disconnect, device number 43 [ 1377.744825][T28196] infiniband syz2: set active [ 1377.744841][T28196] infiniband syz2: added ipvlan0 [ 1377.825753][T28196] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1377.825790][T28196] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1377.825825][T28196] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1377.890347][T28196] RDS/IB: syz2: added [ 1377.891367][T28196] smc: adding ib device syz2 with port count 1 [ 1377.891807][T28196] smc: ib device syz2 port 1 has no pnetid [ 1379.443231][T28215] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9193'. [ 1379.617482][T16008] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1379.790332][T16008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.790376][T16008] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1379.790388][T16008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.795116][T16008] usb 8-1: config 0 descriptor?? [ 1380.020627][T16008] usbhid 8-1:0.0: can't add hid device: -71 [ 1380.020747][T16008] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1380.028615][T16008] usb 8-1: USB disconnect, device number 44 [ 1380.493893][ T5710] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1380.654311][ T5710] usb 8-1: Using ep0 maxpacket: 8 [ 1380.662038][ T5710] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 1380.662064][ T5710] usb 8-1: config 0 has no interface number 0 [ 1380.662092][ T5710] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.662105][ T5710] usb 8-1: config 0 interface 52 has no altsetting 0 [ 1380.662125][ T5710] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1380.662137][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.727053][ T5710] usb 8-1: config 0 descriptor?? [ 1380.816683][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.816752][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.949161][ T5710] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input40 [ 1381.356504][ T5710] usb 8-1: USB disconnect, device number 45 [ 1381.356701][ C1] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1383.817027][ T5882] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1383.992489][ T5882] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1383.992516][ T5882] usb 8-1: config 0 has no interface number 0 [ 1383.992544][ T5882] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1383.995415][ T5882] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1383.995433][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.995443][ T5882] usb 8-1: Product: syz [ 1383.995450][ T5882] usb 8-1: Manufacturer: syz [ 1383.995457][ T5882] usb 8-1: SerialNumber: syz [ 1384.000345][ T5882] usb 8-1: config 0 descriptor?? [ 1384.903643][ T5882] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1385.122962][ T5882] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1385.122990][ T5882] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1385.123241][ T5882] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1385.173049][ T5882] usb 8-1: USB disconnect, device number 46 [ 1386.325841][T28375] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9270'. [ 1387.274994][T28014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1387.351608][T28014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1387.353664][T28014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1387.376635][T28014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1387.399818][T28014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1388.359902][ T36] audit: type=1326 audit(1368.575:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.359951][ T36] audit: type=1326 audit(1368.575:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.377757][ T36] audit: type=1326 audit(1368.584:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.377868][ T36] audit: type=1326 audit(1368.584:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.387960][ T36] audit: type=1326 audit(1368.584:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.388012][ T36] audit: type=1326 audit(1368.593:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.388051][ T36] audit: type=1326 audit(1368.593:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.388089][ T36] audit: type=1326 audit(1368.593:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.388127][ T36] audit: type=1326 audit(1368.593:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.388165][ T36] audit: type=1326 audit(1368.593:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28430 comm="syz.7.9292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b258ece59 code=0x7ffc0000 [ 1388.873578][T28438] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9295'. [ 1389.875951][T22647] Bluetooth: hci5: command tx timeout [ 1389.971239][T28399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.971457][T28399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.971675][T28399] bridge_slave_0: entered allmulticast mode [ 1389.974678][T28399] bridge_slave_0: entered promiscuous mode [ 1389.977995][T28399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.978202][T28399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.978394][T28399] bridge_slave_1: entered allmulticast mode [ 1389.980832][T28399] bridge_slave_1: entered promiscuous mode [ 1390.060826][T28399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.094943][T28399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.233130][T28399] team0: Port device team_slave_0 added [ 1390.235900][T28399] team0: Port device team_slave_1 added [ 1390.285193][T28399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.285204][T28399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.285219][T28399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.290999][T28399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.291010][T28399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.291023][T28399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.445685][T28399] hsr_slave_0: entered promiscuous mode [ 1390.447827][T28399] hsr_slave_1: entered promiscuous mode [ 1390.448406][T28399] debugfs: 'hsr0' already exists in 'hsr' [ 1390.448426][T28399] Cannot create hsr debugfs directory [ 1390.586377][T28480] netlink: 'syz.8.9309': attribute type 3 has an invalid length. [ 1390.927117][T28480] netlink: 'syz.8.9309': attribute type 3 has an invalid length. [ 1391.838650][T28399] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1391.887909][T28399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1391.889123][T28399] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1392.099400][T22647] Bluetooth: hci5: command tx timeout [ 1392.100153][T28399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1392.150125][T28399] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1392.368559][T28399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1392.373395][T28399] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1392.519396][T28399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.400660][T28399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.519611][T28399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.565769][T19881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.567281][T19881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.640211][T19881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.640342][T19881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.929468][T28539] netlink: 'syz.7.9334': attribute type 4 has an invalid length. [ 1393.929489][T28539] netlink: 'syz.7.9334': attribute type 7 has an invalid length. [ 1393.929500][T28539] netlink: 'syz.7.9334': attribute type 8 has an invalid length. [ 1393.929511][T28539] netlink: 'syz.7.9334': attribute type 7 has an invalid length. [ 1393.929521][T28539] netlink: 208720 bytes leftover after parsing attributes in process `syz.7.9334'. [ 1394.321457][T22647] Bluetooth: hci5: command tx timeout [ 1394.719542][T28399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.160769][T28399] veth0_vlan: entered promiscuous mode [ 1395.213550][T28399] veth1_vlan: entered promiscuous mode [ 1395.339852][T28399] veth0_macvtap: entered promiscuous mode [ 1395.343685][T28399] veth1_macvtap: entered promiscuous mode [ 1395.387175][T28399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.408646][T28399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.436895][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9349'. [ 1395.463830][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.464101][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.464137][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.464166][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.484136][T19871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.484157][T19871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.548277][T22647] Bluetooth: hci5: command tx timeout [ 1396.835056][T19857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.835075][T19857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.705649][ T5710] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1398.921343][ T5710] usb 8-1: Using ep0 maxpacket: 8 [ 1398.923464][ T5710] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1398.923498][ T5710] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1398.923532][ T5710] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1398.923552][ T5710] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1398.923590][ T5710] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1398.923608][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.281846][ T5710] usb 8-1: GET_CAPABILITIES returned 0 [ 1399.281892][ T5710] usbtmc 8-1:16.0: can't read capabilities [ 1399.530458][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1399.585336][ T5726] usb 8-1: USB disconnect, device number 47 [ 1400.068526][T28650] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9372'. [ 1403.231616][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9393'. [ 1403.349905][T22647] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1403.989802][T28727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1404.035250][ T5726] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1404.216602][ T5726] usb 10-1: Using ep0 maxpacket: 8 [ 1404.279478][ T5726] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1404.279505][ T5726] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.279523][ T5726] usb 10-1: config 0 has no interface number 0 [ 1404.279552][ T5726] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1404.279586][ T5726] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1404.279611][ T5726] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1404.285670][ T5726] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1404.285699][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.285716][ T5726] usb 10-1: Product: syz [ 1404.285729][ T5726] usb 10-1: Manufacturer: syz [ 1404.285741][ T5726] usb 10-1: SerialNumber: syz [ 1404.391232][ T5726] usb 10-1: config 0 descriptor?? [ 1404.411056][ T5726] streamzap 10-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1404.880752][ T5710] usb 10-1: USB disconnect, device number 2 [ 1407.469075][T28801] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9441'. [ 1408.253509][ T5728] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1408.427172][ T5728] usb 10-1: Using ep0 maxpacket: 16 [ 1408.443579][ T5728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.443598][ T5728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.443609][ T5728] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1408.443635][ T5728] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1408.443649][ T5728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.451570][ T5728] usb 10-1: config 0 descriptor?? [ 1408.931132][ T5728] hid_parser_main: 30 callbacks suppressed [ 1408.931233][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.931269][ T5728] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 1408.934974][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935007][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935030][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935053][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935077][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935100][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935121][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935144][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.935167][ T5728] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1408.936587][ T5728] microsoft 0003:045E:07DA.0018: implement() called with n (123) > 32! (kworker/0:5) [ 1409.140124][ T5728] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1409.140156][ T5728] microsoft 0003:045E:07DA.0018: no inputs found [ 1409.140168][ T5728] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 1409.369143][ T5728] usb 10-1: USB disconnect, device number 3 [ 1410.036535][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1410.036555][ T36] audit: type=1326 audit(1388.853:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28858 comm="syz.8.9469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01ea33ce59 code=0x0 [ 1412.904398][ T1008] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1413.084053][ T1008] usb 10-1: Using ep0 maxpacket: 8 [ 1413.093591][ T1008] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1413.093618][ T1008] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.093635][ T1008] usb 10-1: config 0 has no interface number 0 [ 1413.093660][ T1008] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1413.093695][ T1008] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1413.093718][ T1008] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1413.108318][ T1008] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1413.108347][ T1008] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.108365][ T1008] usb 10-1: Product: syz [ 1413.108377][ T1008] usb 10-1: Manufacturer: syz [ 1413.108389][ T1008] usb 10-1: SerialNumber: syz [ 1413.125537][ T1008] usb 10-1: config 0 descriptor?? [ 1413.141877][ T1008] streamzap 10-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1413.573216][ T5590] usb 10-1: USB disconnect, device number 4 [ 1414.123506][ T5726] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1414.315018][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 1414.317930][ T5726] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1414.317964][ T5726] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1414.317998][ T5726] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1414.318011][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.323591][ T5726] usb 8-1: config 0 descriptor?? [ 1414.592265][T22647] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 1414.592283][T22647] #PF: supervisor read access in kernel mode [ 1414.592291][T22647] #PF: error_code(0x0000) - not-present page [ 1414.592299][T22647] PGD 8000000055a76067 P4D 8000000055a76067 PUD 0 [ 1414.592329][T22647] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1414.592519][T22647] CPU: 0 UID: 0 PID: 22647 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1414.592545][T22647] Tainted: [L]=SOFTLOCKUP [ 1414.592550][T22647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.592561][T22647] Workqueue: hci5 hci_rx_work [ 1414.592689][T22647] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1414.592744][T22647] Code: 8a 8d 4c 8b b8 08 34 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 e0 55 02 8e 4d 8b 3f 49 81 ff e0 55 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 81 63 e7 02 84 c0 74 0e 49 8b 07 49 [ 1414.592763][T22647] RSP: 0018:ffffc90005a2fa10 EFLAGS: 00010203 [ 1414.592805][T22647] RAX: 0000000000000000 RBX: ffff888041b9dc40 RCX: 0000000000000000 [ 1414.592828][T22647] RDX: 0000000023f31d00 RSI: 0000000000000001 RDI: ffffffff8ba75900 [ 1414.592838][T22647] RBP: 0000000000100000 R08: ffffffff8b1dbac0 R09: ffffffff8dfc8080 [ 1414.592849][T22647] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: 0000000000000002 [ 1414.592860][T22647] R13: 0000000000000001 R14: ffff888063713800 R15: 0000000000000000 [ 1414.592871][T22647] FS: 0000000000000000(0000) GS:ffff888126186000(0000) knlGS:0000000000000000 [ 1414.592887][T22647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.592899][T22647] CR2: 0000000000000010 CR3: 0000000040180000 CR4: 00000000003526f0 [ 1414.592913][T22647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1414.592922][T22647] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1414.592933][T22647] Call Trace: [ 1414.592974][T22647] [ 1414.593035][T22647] hci_rx_work+0x10f/0x1040 [ 1414.593097][T22647] ? process_scheduled_works+0xa70/0x1860 [ 1414.593134][T22647] process_scheduled_works+0xb5d/0x1860 [ 1414.593163][T22647] ? __pfx_process_scheduled_works+0x10/0x10 [ 1414.593183][T22647] ? assign_work+0x3d5/0x5e0 [ 1414.593199][T22647] worker_thread+0xa53/0xfc0 [ 1414.593226][T22647] kthread+0x388/0x470 [ 1414.593247][T22647] ? __pfx_worker_thread+0x10/0x10 [ 1414.593262][T22647] ? __pfx_kthread+0x10/0x10 [ 1414.593283][T22647] ret_from_fork+0x514/0xb70 [ 1414.593325][T22647] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.593340][T22647] ? __switch_to+0xc79/0x1410 [ 1414.593363][T22647] ? __pfx_kthread+0x10/0x10 [ 1414.593383][T22647] ret_from_fork_asm+0x1a/0x30 [ 1414.593419][T22647] [ 1414.593429][T22647] Modules linked in: [ 1414.593441][T22647] CR2: 0000000000000010 [ 1414.593456][T22647] ---[ end trace 0000000000000000 ]--- [ 1414.593473][T22647] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1414.593492][T22647] Code: 8a 8d 4c 8b b8 08 34 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 e0 55 02 8e 4d 8b 3f 49 81 ff e0 55 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 81 63 e7 02 84 c0 74 0e 49 8b 07 49 [ 1414.593506][T22647] RSP: 0018:ffffc90005a2fa10 EFLAGS: 00010203 [ 1414.593520][T22647] RAX: 0000000000000000 RBX: ffff888041b9dc40 RCX: 0000000000000000 [ 1414.593530][T22647] RDX: 0000000023f31d00 RSI: 0000000000000001 RDI: ffffffff8ba75900 [ 1414.593540][T22647] RBP: 0000000000100000 R08: ffffffff8b1dbac0 R09: ffffffff8dfc8080 [ 1414.593552][T22647] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: 0000000000000002 [ 1414.593563][T22647] R13: 0000000000000001 R14: ffff888063713800 R15: 0000000000000000 [ 1414.593573][T22647] FS: 0000000000000000(0000) GS:ffff888126186000(0000) knlGS:0000000000000000 [ 1414.593587][T22647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.593597][T22647] CR2: 0000000000000010 CR3: 0000000040180000 CR4: 00000000003526f0 [ 1414.593613][T22647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1414.593623][T22647] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1414.593680][T22647] Kernel panic - not syncing: Fatal exception [ 1414.594243][T22647] Kernel Offset: disabled