last executing test programs:

7m33.172230926s ago: executing program 3 (id=998):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffffff, 0x0, 0x381844, 0x80) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]})
pipe2$watch_queue(0x0, 0x80)
shutdown(0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r8, 0x0, &(0x7f00002dd000/0x3000)=nil, 0x3000, 0xfffffffffffffff8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x3, 0x116227, 0x15fa7d}) (async)
preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000d70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x8000a7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044000, 0x0, 0x0)

7m30.944832201s ago: executing program 3 (id=1008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000020000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)

7m30.7214954s ago: executing program 3 (id=1010):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
fstat(r2, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
sendmmsg$unix(r2, &(0x7f0000007040)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000004c0)="6c3db82b750d4217400329fe19183435173f2577c6e3ef30cd77cf1a1383fb5804e5487497d448e3e5cfcc71926d13a56c95cb21756f09e7cd8b5a49e634e33b7f96c55b7f78dd066a1f0a9ed8687301a3fc8f861e01697162d5bc26d31b0030016bc50c091a1c85095be345ce466f315c1eb5e5b776bfc01c72d66ef07f", 0x7e}, {&(0x7f0000000540)}, {&(0x7f0000000580)="36e8c9fb04172eb2576b31de6f114303f71de1efb82dbe317d4335c76e876ea98923995b5cc538a07ce9c3d98d5b907269d3725bd37dfbc5d2a5ae7df8ad987ce91174641708259d0fc8f482a646a95754c3c37fafe036268e3cc8fb44728c5330e8e622247eb7ba97c1fc2820aa39a8ec294cb9dbe4264c21bbe52f759a8d4a8bbcc37c423899bbdb06eb1b4ec5f4a1a7b4326796d9", 0x96}, {&(0x7f0000000680)="df53cd1298d16c2b771b7d36a4", 0xd}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000007c0)="a30a3c50ae04550eae91c925b6778a400016308a949f426ee617af6d0f791d96827c1d95876a4355ec76d409c2125af2316ab2ce3e3407e1fabadeb787f7c5d4b892220b00c23c3d7a11a9a20525d36d8215b15966e4079608edb33dc3b8c9f8b7e7ec52622b56e3de9e71ea76d4", 0x6e}], 0x6, &(0x7f0000003800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2]}}], 0xa8, 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000038c0)="89ad52979431faa2f6a2f373c65b255d4c40409873c67b1551009f818b1acac12dda608dc2d6e95069301f307fba3b1882b9d787334d71b273e90499d04841544a1df5", 0x43}, {&(0x7f0000003940)="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", 0xfd}], 0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)='\f', 0x1}], 0x1, &(0x7f0000003d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000202300000000000001000000fdafba7c", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xe8, 0x20000041}}, {{&(0x7f0000003e40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003ec0)="1fc934205781595e50139e036af3f44c12217f476196855e213fc456b39718bf85de1e254f7e0e0c83b2f5d06a36be8f50e366ce5c31b7332f2ac3de6e66019e90fb85b2845629a64b18b59c82f94548fa3d7dda4e390b526f8e0ef1ce752f310990edcc04e9d22def2d78051aaa1726d0ba589eaab678f1753c2034991d7961e217f2f9a92680d23177021be32baf907321bfd88bb78774e0e5b5cd2b8f9c3a51b64ca7d8d8281ea6d577d554790a5802b5138eea30e9d59321693ad2f7636421cc8c86cd0ba747dc82b54a44e6eb0657e51d4b8c87156168", 0xd9}, {&(0x7f0000003fc0)="776c4688e0fb972c031aa6fd229af4d4d89693f356976423afa0861afc7e6a", 0x1f}, {&(0x7f0000004000)="37dadfac6a911df941b4a84f086009c9e8d227a6244baa2b99f7f9b7b42f7bc18333d4d8f3fe532e04dd750c8f13f1a40b3e819db3ed46523833ad701ffebf8d94eab41b508a89869791d88ad9a581eb01fcf096eb5aa3672b93576ce5d8e11d2a8ac53e647907d0a7efc38ed88496f1cd043254a756884cd85e084b2db31b603a75198cae5b9a9549c9355ade5c7a2c96a7a5c034b160dba8b6caa27cb5b7b9b36200fc027515", 0xa7}], 0x3, &(0x7f0000006600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r2]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r0, r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x178, 0x4}}, {{&(0x7f0000006780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006980)=[{&(0x7f0000006800)="251de52fb47530db638ddf31845fcee28a71b1c7faf0ea000f109a2cba66b8b150114cbf1f236b74f93ba2ad41d532e698dd007f26b03e5700d55d37d376379b2b2ec190038a607e45e84e8ebb41d726e6ce76ee10c4eb714d56a80d1ddfbcfc8b7e1454f610a48e795150cebae5ad49cb1c57e3b84e00c73e7fb00f45e4daecd03497319b020fe250cb1f4a0a994645ad67542cfc6a90d915c8", 0x9a}, {&(0x7f00000068c0)="c91c72a9af8a4a97d97cc2b0fd3d5e4f6e0dcefc4f13c5bf22976938921b27db4f808a20ca25744401a39b1166f3ad0e52cd9040e9f7a4d064e66fb239eb52a5e86392cefb099be7f9a18a5166fcc6652ba59c90c904abc34cc3b7c0df8009b9be772d3f9f238c33f92db45f4f2fae6be4fc49aec11edb64a0195f429437c7c3d65aa1a1724f24a673b2b3594ffe2e6ff73caef7692cde56c1", 0x99}], 0x2, &(0x7f0000006f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xe0, 0x4000080}}], 0x5, 0x8094) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) (rerun: 64)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80000)
splice(r6, 0x0, r8, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r9=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r10, 0x0, 0x6, 0xc)
vmsplice(r8, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) (async, rerun: 32)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4044004) (async)
sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r4}, 0x18) (async)
sendfile(r4, r5, &(0x7f0000000380)=0x2, 0x7fff) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="04002dbd7000ffdbdf25140000060800110004000000080013000900000008001400080000000800060004000040"], 0x34}, 0x1, 0x0, 0x0, 0x40094}, 0x4048144) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'macvlan1\x00', 0x1}) (rerun: 64)

7m29.221331301s ago: executing program 3 (id=1017):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000020000000000000000000c40000000004000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)

7m28.959175771s ago: executing program 3 (id=1019):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc850}, 0x50)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000001f80)={0x16, 0x98, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000001f80)={0x16, 0x98, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r4, 0x891e, &(0x7f0000000040)='veth0:')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0xffffffffffffffa0, 0x0, 0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x50) (async)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x50)
r5 = dup3(r2, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x4}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x9, 0x4}}, './file0\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2a020400)
writev(0xffffffffffffffff, &(0x7f0000002c00)=[{&(0x7f0000000080)="8eab6ef09e417b16e06e5317a26a72656e630b580b38d3eb9d15c9e16a7ac69e1703638773a9927b2b6fccc9ad3214fc0498b46881e630aad4437f6d1115b718c2486357faa1ca9e94241f3e7f4aa555c7157ac83df0303cba535a04cab397af925368d1fb92a23ce8251ae18ba042e838", 0x71}, {&(0x7f0000001900)="b6b833b95d69fcae095f26137b7213f1ce58e67fd00c75adac522be435745006a71b8fb0bba35a8e7d4d050b46ab82cb48b11166749a4cb0b4b064292143e04c70164ff28c7a0475ac1589888cb81ac3c449ada6027a23463a247ddadf8fbf46e1dbd7090587e86b9c0da36b37a349f80479678d64168a31d28e2c2859ea69d8fddeca17c09af1ba23a8a251b7a881386903f298f2edd9bfb28e6dd7d1bad64d7e60d3d949260c376ee7c2f309952a51ac946f93bebcd792e7ff9dd6dbc18a7c690c44362ef5e3c40c37e22ce7a301c9faa2919a", 0xd4}, {&(0x7f0000000580)="06418b92b929e932779763b93bc8a42e37cd", 0x12}, {&(0x7f0000000180)="4aef4922759c1cf0c0ffa34358c6caef7542a8b5c4bd8d8e2d6ee76aeda6e11cf63d68e23aeb2436a3d3", 0x2a}], 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000340))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
vmsplice(r7, &(0x7f00000009c0)=[{&(0x7f00000002c0)="bd11fc93029b09ba41bb40f70187df1a7242c2999fbdf9c3ab48c89c28d36f365b41b4dcee60b425904850cb15fdfe6efa5ff16a5acbce", 0x37}, {&(0x7f0000000380)="b7e0caae3d6736d0108635580a91f096f14dad4ea4cfd50fb0177ec3f56c0b5774b1cdd6df438281a28546cd7cb45d59cbecf739d2de1c9e25798e4b76bc3535", 0x40}, {&(0x7f00000003c0)="034a72b90d81d34703a7a273f4e8a3b115febbd2834016033e96a9d4549d1f3f616839c436134dd0200d92ac65c4b60adf5d640136059fb00fbc8b7ab69e755740513ffd9d4fafeaeb68011d0503cea13f3f391bee798382eea8d43d492c7626de84", 0x62}, {&(0x7f0000000440)="58b0d6bc2a99ea9274f8a83d8e370d0447d2c3485b6b25aa1734124f2bef06e12c804b3195a9e9aa5f633d174a2abb3a49ba6d62f7e02abf5a303ec0ceeea9652f223883c336c5ba2917fbc2b9ccfbb209e8e93e9f25da7f50", 0x59}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="82986adfb8010798c3aac2e3a17bdd93647c8bdc7510d307c014d0abae3fb0683747af015abeb5b74f065389b54d2c3acdb8c553b378a336613117a93ffab238b9f91135be963eff17b9228551c56b08089946e78e0b7faeacf8dda4ccd5af92cd603e3b175208fde710111a74dad9c6b339642a225d4cca9e6c16", 0x7b}, {&(0x7f00000007c0)="1353003f0db06840e3e8241b452190dd1739cd167d2f9f2ab19cb35c02107770656a71971a5ad45ae6bf4a8e341635b4a94033d28e34796b281675382a14e18d179bad028577073b4c9c5700a5003a77c732c33ed9875a57c54edae4991ce573ec241355f08cc2a234f56127670dce9ffdb8848ce11fe4c537bfb1cd39445a25d7f4dbe5879fc1f4c5ddc1cdf2d2ac087b818986e03da3015c72be6ec2f6f6f1a6cc9a45a80c28a7a57df16a7334e8c68adb247191696ebcb596e10e6183c7761b1be433e7e88c373cdafb1b5b2fa401b37f336b02fa1efc3664da970930fc5097308215", 0xe4}, {&(0x7f00000008c0)="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", 0xfc}], 0x8, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101ff0230000905010960"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
mmap(&(0x7f00006f0000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, r0, 0x823f3000) (async)
mmap(&(0x7f00006f0000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, r0, 0x823f3000)
r9 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x0, 0x6, 0x8, 0x3247504d, [0x2, 0x8], [0x5, 0xa], 0x1}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0})

7m25.626028901s ago: executing program 3 (id=1032):
r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf258900000008000300", @ANYRES32=r1, @ANYBLOB="10001d800400008d0400008004008080"], 0x2c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4004000) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbc6f7583400000000060008021100000100000600fd00010000001400550095000000000000000000000000000000050020011b0000000a0034009de8f5960a9300001400550097eb3d122b0fb88d622c088c0cfc68c408001f01fbffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x74b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044050}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (rerun: 32)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896) (async, rerun: 32)
sendto$packet(r6, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14) (async, rerun: 32)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x2000) (async)
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})

7m10.540082291s ago: executing program 32 (id=1032):
r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf258900000008000300", @ANYRES32=r1, @ANYBLOB="10001d800400008d0400008004008080"], 0x2c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4004000) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbc6f7583400000000060008021100000100000600fd00010000001400550095000000000000000000000000000000050020011b0000000a0034009de8f5960a9300001400550097eb3d122b0fb88d622c088c0cfc68c408001f01fbffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x74b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044050}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (rerun: 32)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896) (async, rerun: 32)
sendto$packet(r6, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14) (async, rerun: 32)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x2000) (async)
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})

13.198835555s ago: executing program 1 (id=2434):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
syz_open_dev$sndmidi(&(0x7f00000001c0), 0x4, 0x418080)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000240)={r5, r4, 0xb5d})
fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
r6 = fsopen(&(0x7f0000000180)='jfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000004500)={0xe91, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r8, 0x0, 0x40814)

10.144958879s ago: executing program 5 (id=2436):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084001b000800000020010000000000000000000000000000200000000000000084000000"], 0x58, 0xc855}, 0x24000052)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x3d, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0b0}, 0x20000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x88)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}}, 0x8044)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004800)=ANY=[], 0x25f0}, 0x1, 0x0, 0x0, 0x4010}, 0x8800)
socket$inet(0xa, 0x801, 0x200)
listen(r4, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000011)
socket(0x22, 0x2, 0x0)
unshare(0x64000600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x15, 0x5, 0x0)

7.251965587s ago: executing program 1 (id=2438):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f00000001c0)=0xfffffd64)

7.247871641s ago: executing program 4 (id=2439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000080)=""/22, &(0x7f00000000c0)=0x16)
inotify_init()
fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8000005, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0xeda8, 0x4, 0x4, 0x9, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000300)=0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x9, @local, 0x6}}, 0x0, 0x0, 0x2f, 0x0, "03c2769bf71d7836323485466b1ab4062438333b0365838e9d56324587db0009466206f9bd19e028710cd7a9a0524637e9cc8f9dc099fc3aecf50f4d209cb4733d2af1e022a74f0d66fba11caeef38f8"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x8, @private1, 0x9}}, 0x0, 0x0, 0x4c, 0x0, "7b799f1d4745079190b73f3b45e35de32b51923bb935276866e9632dc8ab2bc3a26e79b2b2fd684c355dbfd019ce7156473c7c7f406b7608759f7535f4bf4a4ee839ab668eaae363999075d28b685dd4"}, 0xd8)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="0022891424ae", @ANYRES64=r7], 0xb2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40})
r8 = socket$inet(0x2, 0x4000000805, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x30000)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000002c0))
sendmmsg$inet_sctp(r8, &(0x7f00000038c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4800}], 0x1, 0x40c4)

7.027169735s ago: executing program 1 (id=2442):
openat$panthor(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x15)
r1 = socket(0x10, 0x803, 0x0)
io_destroy(0x0)
io_setup(0x5, &(0x7f0000000100))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
set_mempolicy(0x2, &(0x7f0000000000)=0x7, 0x400000203)
unshare(0x6a040000)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))

6.252427115s ago: executing program 2 (id=2443):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x9, 0x3401, {}, {0xee00}, 0x9, 0x100})
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x400) (async)
getresgid(&(0x7f00000005c0), &(0x7f0000000680), &(0x7f00000006c0))
r4 = socket$pppoe(0x18, 0x1, 0x0) (async)
r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x40000, @remote}, 0xfffffe5a) (async)
sendmmsg$unix(r2, &(0x7f000000b640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}], 0x38, 0x24040040}}], 0x1, 0x4004840) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @ptr={0xe}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x3, 0xffffffff}, {0x9, 0x9}, {0xa, 0x349}]}]}}, 0x0, 0x62, 0x0, 0x1, 0x4}, 0x28)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
splice(r0, &(0x7f00000001c0)=0xffff, r1, &(0x7f0000000200)=0x7f, 0x2, 0x9) (async)
close(r8) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0}) (async)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r13}, 0x38)
r14 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r14, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r12, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)

6.01706892s ago: executing program 5 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x88)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local, @multicast1}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = timerfd_create(0x0, 0x0)
read(r3, &(0x7f0000002180)=""/262, 0x106)
timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r4 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2c800, 0x0, 0x0, 0x0, 0x0)
mkdirat(r4, &(0x7f0000001040)='./file0\x00', 0x129)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
landlock_restrict_self(r5, 0x6)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x5)
landlock_restrict_self(r5, 0x19)
landlock_restrict_self(r5, 0x5)
r7 = landlock_create_ruleset(&(0x7f00000001c0)={0x210c, 0x4, 0x0, 0x14151, 0x2}, 0xfffffffffffffc76, 0x0)
landlock_restrict_self(r7, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4400000010000304000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080001000000000000008009000100626f6e64000000001400028006001900070000000500010005000000a6de6439e39a55e4c30b61dc9c40cc1b41de155ecfd8e88752fa1c026b2589cda93b73e4"], 0x44}, 0x1, 0xba01}, 0x0)

5.820385519s ago: executing program 4 (id=2445):
write$apparmor_current(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff)

5.717570428s ago: executing program 4 (id=2446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000415000/0x3000)=nil, 0x3000, 0x1000009, 0x4010, 0xffffffffffffffff, 0x95832000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_DIRENT(r2, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r3, @ANYBLOB="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"], 0x198)
r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x1, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747})
memfd_create(0x0, 0x0)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002200)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000002500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x2, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e9b, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x151d, 0x8200, 0x2, 0x24}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r12, &(0x7f0000004900)={0x2020}, 0x2020)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0)
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r12, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'})
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000002700010028bd7000ffdbdf25070000003b8c6a12e450e408568856ee569b4516cbc4adb2dcf665702768ee3eb3f9337aacd983b7765f0b12fadf451977c101fdf932f8ed74a866581740"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000002240)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.408149385s ago: executing program 2 (id=2447):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) (rerun: 64)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1) (async)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
syz_ublk_setup_queues(r2, r7, &(0x7f0000000580)={0x0, 0x9e80, 0x820, 0x3, 0x27a, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfafb, 0x8, 0x3, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a, 0x0, 0x1, 0xd0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd920, 0x4, 0x401, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6583, 0x80058, 0x0, 0x205, 0x0, r2}}], 0x4, &(0x7f0000001d00)={0x2e, 0x0, 0x0, r2, 0x1201, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x1, 0x455, 0x0, 0x0}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async, rerun: 64)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) (async, rerun: 64)
io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async, rerun: 64)
r9 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
bind$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 64)
r11 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
bind$vsock_stream(r11, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async, rerun: 64)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) (rerun: 64)
timer_create(0x7, 0x0, &(0x7f0000000300)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

5.352592169s ago: executing program 5 (id=2448):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000017c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x86dd, {[], @ipv6=@generic={0xe, 0x6, "326fc8", 0x0, 0x0, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) (async)
r5 = syz_open_dev$vcsa(0x0, 0x5b95b610, 0x701c83)
ioctl$MEMREAD(r5, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4.756535606s ago: executing program 4 (id=2449):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x182, 0x1, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780})
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xff, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0xfc, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x4, 0xeeee0000, 0x8, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x8000000, 0xf, 0x3, 0x16, 0x1, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0xffffffff, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x8, 0x81, 0x7f, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x0, 0x9, 0xd, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.754762177s ago: executing program 5 (id=2450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x0, 0x0, [{0xbd9, 0x0, 0x80000001}, {0x3a8, 0x0, 0x5}, {0xad7, 0x0, 0x100000000009}, {0x333, 0x0, 0xa}]}) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x0, 0x0, [{0xbd9, 0x0, 0x80000001}, {0x3a8, 0x0, 0x5}, {0xad7, 0x0, 0x100000000009}, {0x333, 0x0, 0xa}]})
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000004, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) (async)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) (async)
sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r9, 0x0, 0x0) (async)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
rseq(&(0x7f0000000040), 0xffffffffffffff02, 0x0, 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r9, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)

4.60094279s ago: executing program 1 (id=2451):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x2fb})
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r4, 0x1)
r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r6, 0x1)
flock(r5, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1f000000000000000000004bc0d5af00000008"], 0x50)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x1, &(0x7f0000006680))
execve(0x0, 0x0, 0x0)
statfs(&(0x7f00000013c0)='./cgroup.net/devices.allow\x00', &(0x7f0000001700)=""/4083)
preadv(r8, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "d307f44eb8a504f95996"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1036}}, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2})

4.436250965s ago: executing program 4 (id=2453):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000680)={0x38, 0x2, 0x10, "fdf200006075bf8c380002ffdfff220000f4de2100", 0x50323234})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000a00)='6', 0x1}], 0x1)
close(0x3)
syz_ublk_setup_io_uring(0x9df, &(0x7f0000000080)={0x0, 0xd8df, 0x8000, 0x3, 0x395}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), &(0x7f00000001c0))
syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1})
syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x5, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffff9, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x41000, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x86}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe, 0x9}, {0xf000, 0x0, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0x8, 0x9e, 0xb1, 0xc, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xc, 0x5, 0x7, 0x5, 0x7, 0x8, 0x3, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x99}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_io_uring_submit(r2, r4, r8, &(0x7f0000000240)=@IORING_OP_PIPE={0x3e, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xfff, 0xfffffffc], 0x0, 0x1000, 0x1, {0x0, 0x0, 0x5}})

4.370883658s ago: executing program 0 (id=2454):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x388, 0x2b8, 0x388, 0x1b8, 0x1b8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0xffff}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0x0, 0xff], [0x0, 0xffffffff], 'ip6erspan0\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fa7000/0x2000)=nil, 0x80000, &(0x7f00000000c0)=[{0x10800000000, 0x699, 0x2}, {0x0, 0x0, 0x6}], 0x2, 0xbff, 0x38, 0x0, 0x0, 0x40})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000370429bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c040000000000400012800b0001006970366772650000300002800400120014000600fc01000000000000000000000000000014000700fc"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

4.268858715s ago: executing program 2 (id=2455):
socket$inet6(0xa, 0x800000000000002, 0x0)
shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffe3b}, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r2, 0x0, 0x0, 0x102, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
time(0x0)
time(0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xbffb96054b74698b}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5209acc1450637e5}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x7fffffff, 0xa, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x487b87506372e8d3}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.971100378s ago: executing program 0 (id=2456):
syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @multicast, @void, {@canfd={0xd, {{0x2}, 0x38, 0x2, 0x0, 0x0, "6ec6028955916873bb6dab49e3c77503724c318c9714a008817c7cfb9d66237c5cb8a32d8df7b237e263ca06175a9d5245e5c70f6a9269fd7e2c11e6abe84093"}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = eventfd(0x0)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000280)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.350335183s ago: executing program 0 (id=2457):
add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000000463656c6c00000001000000440000000600000000000000000000ffb9000000000000000000000000000000000000000000000000000000000000000000000000000000040102030400a3ff0405060708", 0x58, 0xffffffffffffffff)

2.175480723s ago: executing program 0 (id=2458):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2)
r0 = syz_ublk_setup_io_uring(0x132e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x159}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1000000, 0xc4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62cf, 0x2000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x1, 0xffffffff, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff8, 0x1, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$igmp6(0xa, 0x3, 0x2)
io_setup(0x4, &(0x7f0000000540)=<r9=>0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}}, 0x48010)
io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r8, 0x0}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2) (async)
syz_ublk_setup_io_uring(0x132e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x159}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup(r6) (async)
syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1000000, 0xc4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62cf, 0x2000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x1, 0xffffffff, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff8, 0x1, 0x0, 0x0}}, 0x0) (async)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
io_setup(0x4, &(0x7f0000000540)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}}, 0x48010) (async)
io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r8, 0x0}]) (async)

1.940040377s ago: executing program 2 (id=2459):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
fsync(r2)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')
dup2(r2, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_init1(0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080))
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r7, 0x5)

1.920559126s ago: executing program 1 (id=2460):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000103c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000640)="f831fee16ecae7a8eb18d2afab17148ca01e27347041f615f8968a0fff402a8f28149846a1613ca1127940ebacc912300f853d9e2fd75d22dfb65d718e5fb2f183af01669f58896c58e4bedda9312cb097bb44e3a2f60848996917b0d34190d30375e67f2ab1ead12d6c964918d48013e5135ea6c34a993e10ee267c62295b98fe53dcb5ee628f48410d7edacce47896e8a7d6b45b95a1f1c55523c16cac81d82f87012c04a5fdd1dfb31cf5f303e663292c228664bc190ff6436efa2d76989e46e5258a7a70137dafc443df8fc110dcb84dd6d6b9abcb86b5cc1a0e708df204fbdc7c3de10bd87596a7ded2ba7f42f508ef7ef0fefa1ce9dd3f1be311c7cf454759d497905b31c8c3d709c0c6030fd98bee267d0f534b0940813c8d0f81be1e5a238604d157901a6df22a11ac6db72c365b71c68f709ddad703fcf418c2c0b51a08b3f8d22e0df9cc9699cccc6dd3a17115c453f7c4a6e80ea1a459ae82fab5115906ec821452dea9541d94229979cc0116c6f08a167a64365824152e1cc792db33f42956d50f8a7662a8ca44b74a61c8af984d35785989702a119e433688107419d2905e710c6a5dd322e02f7b12d5ee8975d69a42d5f3cb1cfe597cdeaeaecbfbe32e1d7a6b50bd83d18d06dfb81afc4f3c6268d1a65844568045d70ed1bcbeade37ff9757f5d93f3ed8dd1323edfebf87d753c080c88a877fb461b756d5961286d58e27797835ceb5a409ac1abe470b7c411453e4cc0c236d91ff8052653998f698226456b44582ec8449e16752501778f231c8a43266d59dcd863e25f792ed37a0a72696498475a5dda9ffc39c50c558082d2bc640db3aa4e2fca694bcbd36ff6321dde6c9100e1514f70c30f9ad4398e762d782a4b7433631dd44c28a2e09a5c6752c6b88ddd7744d0de414dd61718d22301b3f8ef40d3d43729f6a8ce11ca1538a6bee5b26d2f08bbd070e620ccb9fd748766baa5d47483f622bf4f164ad508a088841303606166172efcf294c129a1a778b6b87c3fe40034b76277b66dd9042ac5f71ae765c2304c294fa4ba6495613e159a6744b3b6b45a39520b6d66ed24811b39daec3bc56dee4a01d9968683aed115fc868dc7cae587b63260f1c996413e8159bbfc85061669e109e1dfa07065222ef2cb2010733d38d1901a70017eb4702ff400dace4b2c9757a6d76869adc379058f5342d8623e6ea16f42801fe1ec11de048528e4bd6b1532d942d7baf9ed058569e8ad123d6f61d12fe16abe5a3e5fcebe92983e9e440f8b8c785ffd5160ecd7efa19091d96c5d939ff668decb11a4520fadc485daa0a1a4fd9819e3d61d0dfc4ca7f3531288b73dca25f87ad3a57f89d94463f9f108a58f9c8b502d10c593b702e94a5c84769434f58fcec8b553f87c88402edfe7ae44eb01c3406506273aa31f808a1277617482b26018d43726bfb02105c418d697e3d54c27f9f7dcc3bec4f02da509391ee9cdf8afa49269b1cc4c814d44119857ec676f4d5c4006f8a90f28b10052054bee77b3c5a08c84f05f98ad4f5e13fe010e6b106f06687ff3f1793c7da952c991470dc5003891d606a6f09c13af2d32a3d8304d53b338e3f2314f2ac4475fbedc641a592ddc66247b144af0ad41dcdb810d774654e3e14d7e5aea12e400f21a77a8f2ea05a732775cd3553c87e9eaeeb40b5acc6403bd5f4de361b61c606fd4096a0af0c96b89d9083aec69dda8d5a562f97a4d64f931084ad3f8b325b9975d0eddf2b83e6ceb8a78185a6f90c7c2a05555d581cca7e69ad954ab74778102b41ed83a94cfd50a7b3ecdf888d1eeb91a3232e469d22cd1d1abad266ac7d9389cccb9a3246372cf007c4c43d8f38d076f514de5c08c71ce33112a8304fd8c2811cd0e4ede25bb364530bea1290f16c38252743d1b6e2a36eec205f9fff20315c7583b60767dd6f38d000e2b5328b86ebfb8dc49e65c86bc40a81ba2762ada7913b95a0a903e1c497922748a0b264a4d7627bd6dfc39ce4ccb47aa061611beb41913539e92b7566196bdad4febecb34b1eb1cf4ec9536e54f6f16162a97e5f4b295c567a9c4d84e4a9702be7e6de011edbe93c444dc7846476df8ea4d517f0e5440634295cb72253706818918b4c6358db6d9a696b173bbd4b765007fbff21a12efee8f4cce9aa72f83f2b635939fd5ba355c3d5d2aeb3ab27893b1aa07b250142d16ffc09614d00775035876bcec1cb40415c562f7590839593334f2d2250127e048542748e5526212c8db2c333dd74d756b810121e8ac15d7fd3dd22b4218d25f7d5279e3342615cae7327ffc30adaacab2d88887075b3b74bc5ff58f932f28da885d4f98beef06e0cf49cf0bb3b73d1ff21c958ed7f234223319c3c0b785098649e70339cc6523c2bdf57567524bcb6277e630e981fd5558736e9cc943e7cdd65be944e02e4455b9de1fe7558ac91ee018da3cd508567d6dbc055ac2d3dc0fa40039672292da9e08b297f5116f3cb66527d7a7e3f9970d2ca522a768b3e7dcf845f846f124ab31a1fcc8c8fe4ea0f553a58b559cfa70abfdca0e180b9a9d1640e5fb39f3e378cb46276a5f84851ca643c4cbc610393554a4a49e8ac24651eda1e3414949b601afcadeda3dff4e5f168d3da070e1b74ef0076d8012a45369193af904de0e82806002b785baf116e3cbf57db3efacb05130d09d5ddefd9fca7a7664f52ebfb3f7530038f9df3e600a143da8e46616a592201998ff99a7ce34d40e04effee1323c55400c55bac52cffba20da2b9de5dd2b5154224df4a5a8aec15f188f5e1e58badd663b38a128403fe35baafa5f0d5be24ed763f582850d1c04b480c1de1ea99ff894b66cb7cf77bb3e8b8adffcf4076f9f08b9140910fcb0cdfbaf11031d4a02f2d7f193e1629d75c2f9fd229d8dd6741a47b81750bef30136cabb4f502deb4507aeac487c082d784bba152ad7a23a3ae6c43064bbce92d95d19865a874845703be62dcd4340f7c418c74879f2cd059ac914cb5e9a2019513ef51c8a6f1b98e6d2f2cda313a27a0d9e6568563fb9393508f3b4518d7d512b10e2f53e5a047cb7d64429140abb0a53de804bc7ec87b7fd4086453bcc043f97ea5c91d03d4b6917b4e8f4c532d78f1baa3f9f0601e79d4804528dee710cee0f4f2773440ed21bf2e63886924a25534379743791165569843f99b630b83457690a6bb8ea830dfc52c31e213301364c3a3bf6c12640a610edc23bbe7a2d7f54714188629e19c9692b324d0e2e7b5b6cc81345e1effa851aaf5b76469e5d255a5b5c2ee33212bbd23c2de867af7ceb7801f14f94e824688468a2b3b4071b5fe42d2c5bf37c5d6a8cc843996c25861afb494e84e12e4e70df429ce108d525f738d4cc5ecf9f6b1778473cc5dd844ce8d11eb4e4806227698c44e49d00e5beae4f905e7460924a2332048b305e03d60299f77ed5becb5e8349d15c8ad2b3d6510cf7f5b1c18511a29967b81f60733b1a534615280d12c1f49a691f1269076986309846a3446d048467fd4abbe848df97f0aa04cceb62e0bf334cc38396558fe9efcdc9de795640ca5ccc847883956f284e6ba6b3501ef128901c7c6c0dbaeacf7b103830e6c00772e2762dde81793f4a6f1e921ba40083e6f4ba8f549af2c413fa2e172bd53ffe434fe80596aee7c6ad653db6f719324f6eae211391edea3479f78cc682117306de088d0d59106bd6830b22a8a72bf07054da2bd0fcad653682cbc944ed95f44b8883d22a8e74ea37b36d0bdeb9815d2d419b829ef4dd3e333ffa07e96033e09002ae93f380d57ceddc268b4a63af3844845e18c8bba519c268ebf700f530360393f385b78a4825f4de1525bf4e3bc452273d627c737dfaa3447b923b21a26c2e6adb6d5bdcb57cb9e393defdaef984163dc970f10f1d65c620c3019cfa0b35775d771990fca791109a3dce4e05a655de08b79d42d9a45f999eb038c848838d5a6a3044f56121409269eb154fd736f8a794caf6c8abbd02761d59be46156fb2e29fe9eae305f6e528176763a25ecceb9567d78f71cbc7672c1e067fa96fd1ac303bc1713f34c4ef1070b4238397a8522927bbcab8bbd33deb3af44cab1b4535b9d9800c78df1b28b0a34aef0f26cd90795637ef58612cd21f921eb92ac1fb9408ff7db97af6945a19bb41eb578e586849246b5147a797e0ccd20952e74deffca2d14c91b224e12b24cdb22a7bf2237eb6e2d68066b05f6e1d3db2e1747eed96dbda7e6a285a07bae374632076cb93d9d5baafbffa5cb2642af983e2536e4143a7583244a15f12f378502831e74bc559c8c13ed39473a07df22d8233701f9ac7f877707fbcb34cdf79fce4d550d55b5581e4c35f676e788ac6d2f221c894343b7d1f9205b2a0e49c9a66c75e7b2188507225ecbd6e796b86cf17d521421bb50da5e2246bf80561369f7a89bd23097ed2c4d0583ddd4cffbfbe8b90fc546a57bfd50b9de9994a3512884a4996685f2bc92cae840f6113d1ef3cbac1620ae466cbd3c94e4d860758f37f84cfc5a043f43af2b710815b58d0c8c41138187d68f15f3641a178ba68137e73d7f4a20a033e60517d0d2d8e6f9a27adf087070811e66f074ab4f11eebaa97218a39819af5dc0ae8776d0d5ef5983afadd8c4c90aaac23dc744e9340dfd9a0405184ce56029695c7f5710b004668e56c544739271781d8edcc46e65dec99a55c07434171abd3ecef25d9ece32aadf023e59f2007033189b05d522f3c1cdb327e6aa1ffd0b2185a7946808314c016aacd5d7854587666ffbde93f7daa061a8c20fcd62326f87193166d8f77359c550ad55fa351f5b686d93d05255daefe8d821999a0e0c39b530f4490026685564cbb3fd2088fabc8021e591689771567f8fa06942e73b0c7c00c33bb48c0095d6e850185f4793581f03476b4284fc62047e1498844cbb025cb2a76f20c5a348da5fea96814afcd4f48f839e18975fca9885acaf8df962dd5a26fc54f2a0d624bcdca29304364438689e4fa6630d7f3f35fb1f64cc8e3cae902e55847c5863ae8c0a67249a46c1c360f39671497233fe1718da31e8ec33b5a9638cbb44cada6bd5ab6d30ee8c7c06f42bfc76d9ff246eae59174870605eb9add1734501d4c8bee81062bf24d055e1205bfa2bb9b31d227c39efaf59f5fa02dc02fb0ecbcd3f15a840ca9a3304642b1b06a0a86dd4c2a827bdef7ba250427511c08ce00648cbc177954551bcb6974f7d6d01ee6a5b50779f2e722073073b12418743435c3f7f080fec811ebc5709f65d565ee581730c57a840dff9b432772a464b514def1f59cb5dff67cda74a92617d5a02614dba59469a03e38f2fe8cfee90875a6cdf0fa89ce98c5059c5aea7a94a17639138ca004cb3f4d4ef8f5f3b847c18c9c0af78c30c4bc23c33e55365ccc384926f9b08ffe4e67347e66fbae7f4a9650b664322592ca192f8e3a2586d521c9ad8370b56b9941547c311c9083cd9c6a2b27246aeef7ef25e06ef0c396b097ceb98b72f36e2c559ec157b0c09307f4b7cdb523b69b883b0d2fe3423ec67721f6bdec07c31ab08b0fe013fce4b1f216aeaf9fd473c066d8729fb486ea3c0768dacc66102f90a99759f7bf071b9c2b8d524016af69ba852e14c0449a5b88fa1823c65d63b37e0e1b0d1fc4e80eec6900f8fbd37ddf5cdd2a75595da2ed48ee098d91ca4a2c90e42a47f9802dcb383479172a40387b610be114d0004182aa44f107618c2045065282c89f6934001bb24a90d53171d3960d735040d343623b75a88c4830b45ab", 0x1000}, {&(0x7f0000001640)="605ac17fa156c27e6bf4b3343f51d944d00ac9306b8edc832d0423fea3ecf2b14d4186dd0536c77819efcad8e27b7571b7dac7470e40a57715481680c5ed247912c2d27e49e8fc37d170151093e46ecfc011b0c2cdcd9073e1ee24c46f68d09c8b04e62056a111d6ab26238a569d80b31e2ff0cb4a51134d6660d2fc6caab5c69f716ca9cc5d6d4700f2c8", 0x8b}, {&(0x7f0000001800)="f3aad75ea0c0c69be314d050ba1e14bd248bd1fc5d3fa0ba6ca47e4a31a47a4d89217a6b2f53e519e297af382a0b9f9df48f96d1372a70499fa124ba22ec6e8b86d8ead154b9730301b593600e5ed82db0ec836d740b533de6d653b9750283597415ada8b2ea49f7197b08f3d48b2990081714fdc166ae4dfda6da11732a9f7738c6f32e010b1202d31c81cd426e8d85ebdc286039b1005a1f63dd9ae332a740d67f02a6073585ae81dfdbaa2795d92e2e6946a76a268293", 0xb8}, {&(0x7f00000018c0)="d6f78e43d239e6b646a826e315ab81ca400c1d0f78cae217a7806aa9c177f67e4831461e9b0962956ea63f8ea8bdacaee3327a44ebb2c7772ff9f8072417b500", 0x40}, {&(0x7f0000001900)="ebea9d13cc8f7ea615d5d959e0b821fe189011e0bf536aa9f145e65fef228c24d6986ef68a061f49a612dad7833ec7634f83fd8723b93a7a720783cd90ac8066120d251e8adf3fdbeae7d74b6885bc1cf707012554da420e7c2cd826b6fd57aa072a0ffcf0cd132d9bf5bf233c2af5ade365094611fc29a0b1d907a9383fd0c958", 0x81}], 0x5, &(0x7f0000006580)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100, 0x80}}, {{&(0x7f000000a3c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000b8c0)=[{&(0x7f000000a440)="a3fe4f5391b14f28bdd62dfeb42d368d64f6dfecff5899d75f2658175e3b5253b2e813f672081b57141d2f198e7ece9c242997916d97c6119eaa4fcd45a980a4e83b94e0ebf800bfdfb12f7bb0274a4b86dc4dd2ed8114ff4c3dcc01977164c9cfd1f9df6fcc5d5fc7d47370a60126c98bbaac40200e109293ffcee8cea127f9e1e2c72ed00c1d0c7a0a6b8428c4d39134805e56170dddb2ca6bf17a35f67a785b2cc47e3841d26b09949ba1a48854711d3da4b5743a4b76b1624ea0159ac5d06f1efca1f2e65d0b3e5c4098440c59015d504f1c30c888fac7c76a7b5dcb7dad121a7b347c4bb3cd", 0xe8}, {&(0x7f000000a540)="718cfaf399d497bf4b136ccf6f8bf61de89960c66d177b65ae0b5b2b8248b999721df05f9a3236f86f5882ae4231d8c108f932d8fc3f9d998bec0fa0c6d357aa0b0fb9f8e16a6068f44696420032dec8f9f9c344d6c1dc109a3bad1ddb8cb87f84f32cc76ad71a55c3b5a32b781ec167d641c19a6f43939b1d6cff20995799fb84cff83465cc863f05f4d1c5103a1a7fb3dee4cbbbd62cff5db6ca9c18cbf5333c2e8b047f019a705cdbd9b1304d1fa8de0dfe8e2ba01fbf5b790eae6f6f5aa5b691b09647535a38e7f139e315df3928a4bfd1463ba3ac1cbd97a71ed12d635d0f2195c53ef76dd9420f", 0xea}, {&(0x7f000000a640)="30b2c00c38755cdadbc625f0c84c54bad2960d5dd4ca12180bd008afdb5ae2d0811c44f863c649e5b32bc7fe91f0b5522feff412daba154b3a4409d7e276165fa54c520c5694a30460ea39b3be79ece5c56ca06f87285349ee359d8257ebd369f802805a1d0735f1cee242db9dc2611e589f0e57b907316de464a929736e8522ca8b5bfa4eb1156b68266ee67405cce94f4bbf1b04784ffe6523809b7605", 0x9e}, {&(0x7f000000a700)="afb059c0214be64de07cb10e1028da2d6a330e31ac80f0e56dbe6cf57cdc3ac31ac279e5af30edbb957b5b55dc9891e17d9b5806584a1508eef1acdc8e0dfaad3c5c3d28f67a66184c3aa7b44e98abe952a9cea6e69ad1f550ec3ccba839b1d1fb4b2cb0488ea720bf9ba94f2db794a89c36e9d00b07905a3a1c3dfda5ff1e26c31043534e436e44cf4e41f0adc6eb651dbee980b837662358e03c38dc6767b57e9009ac9f8a846a36e5fbbe408155bce5e49718b0960055af06697c4674b4ac", 0xc0}, {&(0x7f000000a7c0)="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", 0xfd}, {&(0x7f000000a8c0)="0c748a72c77b9fcfb6d000464aba8dbcc84d1ce0356c194574b0db394692dbd8d39ef75435508cbf46fdbf61dc09886262ccccaf8df222f52b9bfe96192f70540d8eb2ab31db14543f55080c6a627fdbe1a02663c4398106587e7fc5ae57c5d8c749a9d29789917185a96f68fac64d1d3303e267a5751e7c689f3522f44e3ded67ba19822e75f7cd36cc6aa30312645854699f2cb12a3f8164847de8144402804d8142a9266909613ea1538d3df8773734326287debc61a21ee3a384206a7e1d29e8a28325beec70531b913f824fa8819c31743f96a1c6722458a6c3aad609a3976e4fade302246b8f137fadf7ce5c67645597e92aff7be1201d088090163f3dfa2d19fe408decc8235e6d864e3e66c2281305e5ace3b89c75b5ef260a5afde00a0cbc60b084ad0af33b9c4056057c5c900a051aac158dc59cae6575df6c123401ec5136e673ede035adf0bb7cfec68904a48e075a3844919bb309b53d5260bbdfb6068acd2e534f1110a8cda822641aea67533260c5dfd9deb79684de836f059ea84ccbb1b82aa31b5a6c1186f1c7289bb201bbe3c43b60f07ec92cb358cbb136c9f83b2c6097ea98302f5454cf0315385037895ffb2c51b24ffc0c83a12548acb7742f7ce7b57bb5764d96c7bf2024cb42efa9947eefecf1a7d3e388d62cc32264bf1ee3a1ff73704cbd3a6c6b013ffff2b53c0536319de5eee64416fd560ed906c695ded8a18349e123b086c790f7f2c2bd5c8f5b046fc8816422d6ca824d225ebbb5ff427a03478a2469f285fbf2c9a0a384dd68c427deb7e0c1ce1783372284e51859c28d711c4b4330886d1eb1a6df6d43795f6994b9145ff7386f1bd3fe8f165683fa07fb619bfa536fca0e2909fc973cf6e674c800ec4aef5f84fa37b8e1bc8883ec8425d79e18728d67e5d1d26a58dabdd4ad563f1af18640f746d5b64e5d3396f8197bb5f98b348f3333ad525d2cbc75ad66f06918f6deac1aa8cb5fe223ce12f16cb2fb21b8f7d3d0be584c8f1e19a59b631e1aeb9941e405ad87dee4c51d1f8b4c25b85c4bd7f5ec2f812cc2907048232363f7ed34d17e6eec4ec1429cdca50f97703e397b243d8d348b413c8da4513f7bc067ed66441a05e5bae09546e21a7bcc578a59c0e6717f4b1f7e969e5256c6b59e5cee4ece3ffc289261194e868701d3533b5d64d8902a7fe78cba6d1017d5a4ae8f25cbd346c8ab19dfc0ddadd065278cf3279aae369e3243e70375c3393b967db151c205ae6daa1935c55c48c0a3f067039c2da0f4dbe08b42bdfb699d11b121d43d13f8dfa09be7bd23a13e4dabb4e3032fd56d8407804b794556b86bdb89b42fbfaec886efef136458e7faeac8fc770111e59e0010349232b2158394f1cb4b6a91a5967a42d65c01985bd0d2cf3f7f7887fc2033ac2e4839e0a0a8e25aeb3ca48289fe2fc19e654a24febdd0e00ebb94274289a08284259ff8ccfbd7d26049c03b45fec562d6e142b66b098b07bb3137b4832e043a29b0fccf3eda610968bdff5e3d49bd9e426e833db581f4563a25ea1928ba3a413c2885165653bdb99fb94222a27ad5e73859ed524f4be8b958ee90b3d5519bd7c09edc9c1c6c09d4d5ef0d57497178b9eb54a2a3b87506b43fde07d5bbb58ba96074b9d84a3ab185cbcf1ee35efbb87712031027d6552b2b82cd6c186d9b65fe5242c62b661a9db6406df763270edd9fdb7eda909bd9b273d6eb5029131e929518f80ffc95dde15e91fd644b004423fb48ed73ef3a98701917a3e9830433fd5f13a8c7597319a47f257e9a6a0d3c177981e597971436a0fbd6a0362fb61832636ef0c377e0746a37d077d48a05eea3494de307c3c6dfed44855c6b783218cf84bb237160cf10a5ef26d61cd1f56833b1c10895c2ed5d65ad2f201a4a353336ec1f6f3114aefda518ba31131feba6282690fd6a21f3fc63542addf2bd46e0080a727a957bf7a18b647abfdbf6f7ef578091a033227f37e8d52c6049ce3ebaf0c4d86aeb40f60f3cbb529bcc55a4fbb2b33cc18e075fd23c85d9062c83bbee25385f9fbd7e37ed2acfda12f238ebb46311173103a4d93680c442339592125dac0fe2c2825053d51449f0873d132fc18c3cae4ebd6c445681d2c6949992ecf51f04878aab6f58d8aa223aece0fc7be4d49946d1cb6897c0c4596329ad70d8914397c4fa2bed4f801129b00560e5f73d082177d249aa72cb3d67afd189b92906ffd7db80951d475bd0b88fefee100eac5aa5e1bdbccc31a2e0e46f9f5d18f1281462fafbe9356acfb851ead3a3a34965f5d4526a9430d17fddb3d44f5955a88c28ad4b30f5361dcacfc49eea1937bc0b43dfecb430008482a94796b2745e24fb2a80308e7071fde04051932cbe8717fb5833335ca8a0c2ea6676e13cb5f50fde3cefdcc2d7e45b1d8bdb3e1c28cffd91d55e914df10cc920a783bd6ac5c88a868b24aff3cd2011e20b55b4508bde048a16976385663ac55a895427f85cf8c9ba6becb0682707a7f6db4ca1e578f78da46d320798b281c483042df0a7044d98e1e226dc0dfc3283357705c75b8cd47eb5311e169f8ac6c602f3e815002f73038ad2201986cede885329ce64141d89fd4c0247c44f6fd0b6b774e85c7972f2440c0c6d4ea8172fe5d521066209096b5509a295479192fd6b0bcb8ff220035abb7cc864c515e174a43cb6ae2aa8da5f444bd5759053f3bc150b0f542009624b508b90fe025d1500112a72cf1db28369c657adeb89c5505dcf638e7072ae76f3ba4ee878a26470569d670221a8f55ca19b3804ccec46e4cae1be71b5b930d96faf069c47d927c8e8ae558521439960bdb8e1071dc4e2164c57fab837b5fe1ec999f44fef024ec55c4a0115dcf0f44e01f37b6ea7ad3f7086d9e37bb553ce6834e6b3dcccd1c416ea6fef53de3fe3dfef02fcf2f957dfb1d56803f9ba395cee9e322bc414e198efde9cdb4be46f52135e348fc6816fd7f313340925f063fea6097f1d508ad26fbec7a860d9aed43c76eed718a6533f1a11aeefaa2e852f107ae1fc99a16690727ee27d7d357b945205fa97c39e3f360ec05340e1a3657fb36103664323b0f526703a18e6c39f430e1a71f7aa3171bcbe2a46a2f10ee16e7bcb7592dbbaa8e772fbbb2d88b479441551c058b0223ae2369442d57b1ad670014b042dc4e550fce27d0295b08210a0d268967af3e589fc0a284d6b579c1bd4b7f784b8e26137ac3454142d984b4c63748536c5f128824baaef8747b178f719a6e95edf2f6a4a6a8523cca365bfb9d17c9e66c6bc126e19c3d1df0a1672114805ab69768d20a1ed24ffc3b87459ae0ac43af22948c3289948d3b538262f73ddcc4add199f7c77ea96df9a091056c7d5dbf634adec50582285f1834bac8dca55d98a0ecfb93e82603b4c94e467b0f5e0bce5f9972eb8b7061b3945e471654a7bc4c5098569e4b8c605ec48a769af08799c3d5f50688be70064f726f28ccf1f18b5015e7e03188019d3ed101cc4f770eb78e6207e35700239796f66c6f817a69a476f0d3c2114e750c3ab387e8b29457e4b618f4f023976a4f09f920da404a319021eb8220bf1e7e6110a3977de26b9cd5721bedc66ceeafdfd922377bc08bdfada684084ad6acae6bc008dee49d220ec75478596e4fc57914e50048b151b78eaabeb4d6c6203eb95e1ab7f359038b6aaa8c2634a7dabe484047157bd71ac0fac298ed3e77837c5775ea51eb74e0220672ccd3e5988472ab65a1db87e84c5aa953d0fdce78ab8211c386f60729f8bcdad35c98c0ac2b395621211b598dd21e952ce5b17245b429a50f6f9d6203056d59c8f22fa994beb548fba192152cd5913061fa5bc7da1f25d57be2c9f87cc3aa45c8ea3d9772456579a2b82ddba4b4a27806659e3ba1f9c0074b85bede3fc73acf9a04207d1da614bf61017eb1a22f1a9f8e04ec7d272b32f9d152ab779d14347b233731563547caea51157ad2b85c0953599cdb499960eb55df8b8bfac2c354cd24b9bc1f0a7e84c017bfed60809204322387974497c34f93a0e50e5b40e25bb4b5342664051eb00f5be2e17d6d1ab0c6ea22d7b46acb55719d8189fef08bd0f83326053c50ffb836f66e6eccf2f461bc6518aad6ec3d2b1afda27c01e3d3e972733a4d698f9f9d1e4ed187a77e5b0d3d2589e3f1a2a64a1ba61d5ca29f18b2cae8cc1845fe784dce223ab32fc50a333a2e76d3c9915c3d5ea6e542331a9942feefc5353a9cdf915e34842774c1496907de69d7392b5a7b793e7bf66446b412ae3655ff01172d7a21baefe405e4946ef70bea9c771b6922750e358bf55ca2b6b46363f9f305e5ab394943c1c4348f05cfdb492f2197bd495819321747222f6ab0d1bba4ce90a98482ecc5f7fb7c4d2cf944259d7e2048f3810adb47d62324e9f8e83c7c97782f3d9e9d9a15e8ab9b13fbd690b64713239d21100f7a6f6fd8b796490600ae21497b254abfb8f5bf8c5b7eaeb72e5012fdae23f70f3d535a25033910dd621916b1b640000dfb2d639b62943128110399ce58fb3906d4d0aaf9b5b7c95bce9bdc50fe8a52cb9923bd50038563c5fa8fd97acfb3b87426381ff700a607026c6c4e1407a300727d3a8f7532a6dfed93bdd61ef154d52a9b416d7e143c54673a836464b09c9a59c5744665493f93e7d834c540c279815841e70b41ee37f93b943135c0a22e26a04ab8cafdd328bebf3bd4023bcb272c034c3e97eec4deba18d091670d36ec00370dcbfbc49771167fe746c850a0d018ab9437b2b70cc6fd6492ab2444f85492898cfa053db477fdd4a9a3c2ab291ee14911a2fce006372317f6fb8ede0dee369ae222bb693c0123244faa1f0c9f4ab0d6aa8bb9145980385ad638ce97bdb5d3d46fcde56e5726b0a821f9ec664557251e593c0fcf4027c8578c261249cdb4de2a8441fb6bc0afdaa100295721d28c0bdcba89af8e5846ab69025b7f91a1c6221731193c81b365cea1d94899793ef5557c84511e68f7a5e11d47135d733d30365cd2099c7abb49b64868dd39ae7066b9f6fc649cf93021fbbc3dd6ad030ef4b4448816e13e8c0cbeccf5359d631f590378d365421decb2fdf3f9c8a39389ffbb43781d87f0f6a3389151fbfbe276755806ab54700e72ddd705810e6432826bcffca188cc21ae18b199dbbe0456ca069a2e7ed99cbbf227dbf7c7bf897de46262a31d463202bfe17052398eb8d83627205dd20452261a0dccc7e2e043a39f8c00a8c226c8e60d9db5c5d8f671c228c8912bba82f2df574f533d4f9a292a04e2f14af704c713bb16c88e9eaf59af7addb44889e41aa2f219a5eb4f3162c2571d4bc4d27a160b0d070dc9b915591db598c55f7a9b4e3fbac44320cafffa5fb94ef34099f7ec710d28de0210d0e1a66e76470b3d7d035222749584d4353e2838d332432aa9c4a07e93f7f63c17417cc6b768da7c980df1e4830f1b29434995162fcb80a362ea84c4cca081a1dfe794f86f1a4694e58b9c2d5b0a7314b660bc7f10cf2d8ae1c9b93e16c5af4a464f36bc03c411d3bccaaa59974445cb017eb674e0b6e4d749d76fd4a0e717cbc9eb44951075aed1a534f6d169fa40f3a09befb4466e3e19ddc8f997308db40ebb40f473a827a4e084ddd5ad0b0258710d3b7a26cb421e15bfc0b75745140cd112454238e62c02ede3e4dd5aee3ebf7a2d8d679db178967b354d46b4154df5955e3df20d17e3f6509b9e7f8b3561d3f287bd06d3997d252d6ff9a5566b7c651aa7663fa6ee5d5c7ca9b72ca8c5706a38332aaf5b3c90c", 0x1000}], 0x6, &(0x7f000000b940)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}], 0x148, 0x4000}}, {{0x0, 0x0, &(0x7f000000bc00)=[{&(0x7f000000bac0)="f9cfbf4aaa8ddf1e107e74e2292377f9803ba3acfb4ae171eaadcdee7c40d4cf924146d1cbac6c274fc2fbcac8fd32f7fca084d65b1be614f0e66461b6cb5b", 0x3f}, {&(0x7f000000bb00)="786e63c97699b8880f180fdac8d300aa012a0e41733afb5a04c3593ef1a31f9cd4b83f2f154173dde182b447f3c140d016c668c5bb2ef8", 0x37}, {&(0x7f000000bb40)="7b09a502a31e9543b245c2e90120153d7b32062eb1c68c3895b93dc7adc2073a4749a02e6cc00a58dcf75910fd1d05ca42e98d49f0cf252e960ee15a099513359adee6d394db95c429f5f20b0be64fde44564ba857bee0b3c1da6f7ad8d9db8a3f815fd1de4cf7c5e12dd5df5b50799f0f85c396c03c6331ff64063ab64a34f8b7e9405b68302825df5c1824aaae3bbc642558fa90d43b9e7baedd", 0x9b}], 0x3, &(0x7f000000bd00)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70, 0x50}}, {{&(0x7f000000bdc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000c140)=[{&(0x7f000000be40)="4d7ce834947d97f55e6afd62794ac06bebbac842563cb7b6f32e665042d8e23e42d6c8f5103c335ae02b5ce971f219d77a982ebbee03649f72db15db6a2e45c40db0251cf9107640ffb4bc0cc110156b", 0x50}, {&(0x7f000000bec0)="c944aa29980a341a78a9c1db1148a2ff65846fe22ad20861b7334e82bb94e1ff4fd75ac8f0fd96693e316a21b3f041b8e429529ce06847344bd6d7b102a355ad22fc0ce25dd1436b", 0x48}, {&(0x7f0000000240)="2c80fc7310f801cb05d3050d112e2c6280521221b781060400f0ff000434d19a0000003a181b517a16d713ba40b1a07550da1ac1f5c5db61cac96cbf645d5ffac9cf71fa4b4a9974143e9882905d9d7a34a874e69879a3b436ac5a1b641ffe91c942478df49438ddde215e4dab8f4a5896c5bc3e6e3d5b9935013f91141e29c6992dba4b24ee36fef40e09b626f670971fef830c163ebabab3175c4f7406040d273e05a79ae2537d488d40ca47bb4b90f08d594ea04b2cc4a6185c0b7df0f7c078892168e9edcbbb2956b0ea09fc035b905e9137983d6b0abc1a518de4d6d61318b5e4175f96eb69534dabdcafd77e68487aa7", 0xf3}, {&(0x7f000000bf80)="43a43aa4f67c1e2677adea966eaaf5bdb83bc8e6b58e9f5ba701338178f19f6fcffb640a918386b19463782d165aba4e5bed209df62be0d32ba1c3a01c5b5c9919bbe26fd9bafc150693b057d55f86e5d4deecc8bc133ff4ccefe0b20c094299676daaa060a9dbfd2e2ba59a12190d98e5fe8e7a1f347df4ca87fec235fcb1206bcec99bbd9823fc7183229ab56945f60204432ef9e280ee90c3721ca92b514c3ce63988df49c199f7182ef47f854e7579add8ab08e85a48222dcbb30fba2f4c3a511cfc068782753d51d421f8b70d58c33e0425d7a189af76819b1e25db9d68a3c8c921eade354272cab6bd86ad3070a584", 0xf2}, {&(0x7f000000c080)="dd2acf88863dfb17c381a9ddae005debd475209bdd068fca0d73ba0d8eb826c33352b8bc24aa0f55b3a022d4f55c961b63db29b93207", 0x36}, {&(0x7f000000c0c0)="2aa598195e0e66ff555e89dc72c89cf474d520662326726486238a07694542dee7e5802094bbce5085aa97d5482845cfefac0eec8f2d90a47821e857383e450f713cce0dd2328601e70c87a452ed10923c1fc4a87694e8e73b4570d2873e60f1d39dfa05f1546b78", 0x68}], 0x6, 0x0, 0x0, 0x4000080}}, {{&(0x7f000000c1c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000c640)=[{&(0x7f000000c240)="198e9323f13fd37828ea3af01133c15c166b8ae90b06e914b732931fe48a89525d072854809b79639850a88019e606673374bc4f7b66d75645bb3792b089f7f2e531e773f2b9f4124fba1c8c92cfcf4f2fd529f3206608e68b87bbd5bfb6aba480f9b508c94de96bdf5fcd472743bb4e2c9e36e155062b7b870392fc5b11f8094d44d0023ff3eda746a438543400d6dc3b9e9971fcbd04085843c6e9e595ce15e859857598dedf1f8b031b5573f8d2d12b8abac48a38ed77fc57816bb7d33a8da7e8d6d245bb2fff1f231cd9b02fe47e4138331763b50cb37b70ffd16947cbe1980de4466d", 0xe5}, {&(0x7f000000c340)="67e63472a499bc8bed59dc74ca0f688ee9f85848ef4b71e8ba0d175f3eed634c196e31bd1b3cca2e4c863934849a1ad0a65390d4032a405a4215f904083f83dedf3e305555e03ca9be2cd1c41219bf76d51c734236832cfc6937b7eb485de6c5e7092e543cdcdb442fcb6a70533c7b8e0a67e8100b181d45c8dcaed5fb09c15108b8526ee47ae6f8dfd115b10e51d05ea83033ee40de5013126ba35cb9f790dbf1089fb12137ae60ac160df1ec1d292f19115bf6dbe1304682bf", 0xba}, {&(0x7f000000c400)="d9e8d490df80c201a81677f2975ae2616c5300ba6909ab1f816c8ddfba42e087bd8aa533210290c16a735c619d446deea89758b9522a9c31195a8a175a97417d630b6b3c57e2c86d5dbca001ff300bb8d245ec456e5079b58280a20b0eed98431b941225bf41818dbe3b1df7a69c44efe365843471a670022aad07fd5a596bba868227574ba67de59667601eea8b8dedef7ac84eb1c66fb647b4daa3c31e26308bfc241ec6355f2d", 0xa8}, {&(0x7f000000c4c0)="2700ba910fa0aa6517f21760dcd0c1f4d2c2ef5caf26b4a4784458fa44cd7434b052c6b9dbe51d78839bd837f96ecd44000826964c88b468ae50b14dd446468388ceba1ec2904dd697289b4f3b192a9392938a00abe03079e936", 0x5a}, {&(0x7f000000c540)="aa31601cacb3fd3db0bf735b4cb44078ac4c9770a79f24304ad7335f87b131eedbcf992b169b97e7b33812a8c61d5ea2ba73c1a1319f8361db4fdefdf2a65e9c07f69529b0cb93fe826c64ae0341c85d3b73a5f98774c9e998f1d1f061c3c3718854ac2cc6d277d03092916aa72bf855c84be205ce79e2001fe385a7514a579fe7a9ef3f3071bc21c739fe97571c10c5b077ff6e0331f94db6aae2af82236a0872d2a2338038e9359819e61d770f24ab9e2224673e60f87f73edc3d348af339da6ff0e7b0b", 0xc5}], 0x5, &(0x7f000000e780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8, 0x1}}, {{0x0, 0x0, &(0x7f000000edc0)=[{&(0x7f000000e880)}, {&(0x7f000000e8c0)="8e0d6e6d7e8dcf", 0x7}, {&(0x7f000000e900)="d78ac5df1fce9c42da76768f7e308a8368909b71156a70718c90e07997437dc6e12749007368f983bc64925114c36d60423542a48499eaac975b16e6d1574d652ec8c1e744e6836fc06b9f737fd158990739ed2dd9919879337889a6c3af4bae698c5349d3ce84fa6856d694d1e92b1a476f443c88792d95dd934d935fdf2c5e425fc2a8106e503d91eae2b6d52ac3ffa8fb863b13c3517efb4dc3ef9995f10fa0325f49a3d17d", 0xa7}, {&(0x7f000000e9c0)="2f3a5533fdeb2015157600c8cdb134b3ed7a63fdb14b7c077eb66bc368df3b11", 0x20}, {&(0x7f000000ea00)}, {&(0x7f000000ea40)="b41943aab83fecf7db0ee5c7e6394e8f1b6b6b36a8b70bc227f4876104922b9e94e975ab668aed9bca8ed48ba9de3c39adf67c0fbc5796069c9888c6050d602ac2f7627502ab70274d4467cf78007058d1e1e5a2f889d757c889d4103fdab4f27a47649d6a4a9e361c679f8c5ef7074b76769bb24bdece45825e0d831ebebb1689dc490b22ac701ce85d437160fb42530cc883c49fc9b1c5aba9ce04c64d1dceffe28bf258bd99179d59a6d690a9d6b53026206556047ef6411c3aab8cfcc212195c2ac62c604b3635", 0xc9}, {&(0x7f000000eb40)="6e87880daca5635ab2c5bdcb704af3627598877ef5e6d43480e78ff1e36acead5efca8cafcdc65a46efd8c7be15103a8fb231eeca6e6b8f48736688feda93826112736b1d4e43592046c43ddc2c28e1f9471b1c9a6bbb76fbb054c", 0x5b}, {&(0x7f000000ebc0)="588c47b999b4423a1d04c80cc11704225fea6bf41793fc24a73bfcf23d7355c2eb3f5eb865200e6fabc424d218422c42e3f517252ce2863d07eea6bcae03b17bd2cd807ec971fe9e544016056baca7149a8cb858b61cc3b7c09ebad9ec3db301ebdc4ef86592a14fbb69d9bfef4b925eecc1a1eb7eaae3a83a982e0f3b3e568c2365474414fef549e3ff5a5140557b2faaba99fd0a19ea72caa4fe40b1155258030b03da61f1dbda436facaf", 0xac}, {&(0x7f000000ec80)="d4269e2cc72190479ad23dec4b3ef043faf1b711c146f00a482fa80204e2f847bafe9f968917f0394118ed1d9b93690f2ee562872882614b688fc862d874f979cf5f0e51d427dfac5a1f485555ea3f2a86b128b5858151fc05045b4039c1a45069e7aebf44a4bac957b01ecd96bdf6caf29dc3e71d40949a7adb13ff65d1798485adbace22811939521a630410c9f451110aca2f65b5474df273afa6b17fd5f838", 0xa1}, {&(0x7f000000ed40)="ab1c5e5b7349bbcb03a0353a7c9f446bf59263133fc67df651e089d63cc8f1eaaf22288a03c4be1449e73d8ff92e65c21243508cc84a3322056604c72a9c6240fb368e455ae74e49f8885dbc1bbc08b2a049808f86251683cd8634745fdb21", 0x5f}], 0xa, &(0x7f000000f040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000000}}, {{&(0x7f000000f0c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a40)=[{&(0x7f000000f140)="d4f19fd5232e865b645cb61eebcaf24ed30662b81d2fb1b38e089056f910274ba7eb4bd683924a447b6c80338175413cd15d7a573988fc159bccf65aad34497082df57a0dc021ccefc3e418e56d584181dbe2d7b7272aa6c", 0x58}, {&(0x7f000000f1c0)="a539cc54876e8b842b3ca93734564e710fae41728948f6f4300e5c43a97bc7724f85cc087d54bd2e797cc428abf474325c978ce8f6d53aacd29a97077b67845e4fcc847ff4ee9dccfd7c62f3306e0d192674a5ae341acbc1870a82", 0x5b}, {&(0x7f000000f240)="0c96b05901e42458bee3818287b485405e5ddf945f5c83962393bc112c138826751aaadfe50395fb4c65228e14a5f98e59f22c23a73ab2d2571d1d876917cc1513a08eb9b806505bd796c614b9000b60c0b768c565109bb9f906a5d7f09a9904224f3041d216", 0x66}, {&(0x7f000000f2c0)="42405028b6d82729302280bf5b7e87ffe7d95a18591d47054c573fb95bdc78ddc44c35e5fc0c7ced24ff0c815de77b1dea9f489d7fa58eec8d3aa5efd224f85667bc1c498accf57ace98ce0b6ed3fef7a10ed79d7ff88db019a63c962374e764736c2300f6e98562", 0x68}, {&(0x7f000000f340)="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", 0x1000}], 0x5, 0x0, 0x0, 0x80}}], 0x7, 0x4000001) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000480)=@x25, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000001bc0)=""/227, 0xe3}], 0x2}, 0x1}], 0x1, 0x40002002, 0x0) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0)
shmdt(0x0) (async, rerun: 64)
r3 = socket(0x1e, 0x4, 0x0) (async, rerun: 64)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0}) (async)
r7 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmdt(r7) (async)
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) (async)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x20000, {0x1, 0x1, 0xa8fe8ad4eea2351f}, 0x2}, 0xffffffffffffff77)
sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x3062a650, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = dup3(r4, r2, 0x80000)
recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000180)}, 0x3315}, {{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/94, 0x5e}], 0x5, &(0x7f0000001740)=""/158, 0x9e}, 0x8}], 0x2, 0x40010000, 0x0)
read$FUSE(r8, 0x0, 0x0) (async, rerun: 64)
unshare(0x4031b00) (async, rerun: 64)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) (async, rerun: 64)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 64)

1.369689623s ago: executing program 5 (id=2461):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x65}}}, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x2, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0x0, 0x140}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0xffffffff, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2000, 0x10002, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)

1.274028394s ago: executing program 4 (id=2462):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0)
r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
gettid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$urandom(0xffffffffffffff9c, 0x0, 0x10840, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000140)={0x0, 0x401, 0x0, 0x3a, 0xfffffffb, 0x10000000})
setpriority(0x1, 0x0, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x7, 0x12, 0x3, 0x4, 0x4, 0x8, 0x4, 0x7, 0x85, 0x7fffffffffffffff}, {0x7ff, 0x80ff, 0x9, 0x8, 0x30, 0x81, 0x4, 0xa, 0x5, 0x8, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xfb, 0x84, 0x9, 0x6, 0xe, 0x0, 0x9, 0xe, 0x6}], 0x40})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x4d)
lseek(r1, 0x5, 0x3)
write$P9_RVERSION(r0, 0x0, 0xfffffcd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

1.221226381s ago: executing program 5 (id=2463):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000001020100600040000000001090224000100002000090400050203000100092100004001221800090581030000097f00"], 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149042, 0x40)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x12000000)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)

1.207199655s ago: executing program 2 (id=2464):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r2=>0x0, 0x0, 0xff, 0x8, 0xfffffffc, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x3, 0x5}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x33c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1ac, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1748b3b21d5941d3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}]}, 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x40020) (async)
r5 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_INFO(r5, 0x3, &(0x7f00000006c0)=""/86)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x4012) (async)
sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_deladdrlabel={0x40, 0x49, 0x8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x40}}, 0x81) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000940)={0xfff, 0x0, {0xffffffffffffffff, 0x1, 0xe920, 0x3, 0x2}, 0x100}) (async)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x90) (async)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ac0), 0x20880, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000b00)=""/174) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r3)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x12c, r7, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e00), 0x140, 0x0) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
r8 = syz_usb_connect$uac1(0x6, 0xf6, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x7, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3c}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x2, "76ecc40a6784"}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0xfa, "e8e9bab4"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0xb, "22551ba2"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x4, 0x3f, 0x64d, 0x2, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x3, 0xf, "011d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x101, 0x9, 0x0, "38ecea3f3ce0"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x9, 0x8d, {0x7, 0x25, 0x1, 0x0, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x200, 0x9, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x39, 0x0, "dd68b0"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x1, 0xf4, 0xef, "04233ed7fc7cc3"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xf8, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, "7985"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x85, 0x0, {0x7, 0x25, 0x1, 0xc, 0x8, 0x10}}}}}}}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x250, 0xc, 0x7f, 0x2, 0x40, 0xf7}, 0x30, &(0x7f0000001080)={0x5, 0xf, 0x30, 0x2, [@ptm_cap={0x3}, @generic={0x28, 0x10, 0x1, "3f880419ccc57c0a8431bcb4ca38914e38741d4655aec75d82718247e99d9785771e8708a7"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x41d}}, {0x6b, &(0x7f0000001140)=@string={0x6b, 0x3, "ef31b8c88409dd64051d652384fb133dc36a3c8be5bcacd0f41ea492621fe2e0b0cba98d8b2a02e72511806b46df124926f0c19169e1c92a6f570b7f5b8049323c1e6e6a8d735c952f5284359670d98221edd5e1767ede73175de4afffbf5e323c82af45bfc8f85d25"}}, {0x14, &(0x7f00000011c0)=@string={0x14, 0x3, "2d14e4eb15dd1eef89a1683660d9fda560ad"}}]})
syz_usb_control_io(r8, &(0x7f0000001480)={0x2c, &(0x7f0000001280)={0x40, 0x1, 0xa8, {0xa8, 0x5, "dfcbbc5a5012251fb77d39357a1d3e44022d36dc7044bb35c49e726010af625439ddfae17a124a3bb4ad640d883cf683461a86a9557d74b8b191ae05262ca055e3b772d640fea5cf1fee6e70806e09f47753bda870bacd206b47381cb3c5b3baa93851ae848e62a5798f1f350cc3ae31cfd5fb305b017198db2beff81e2c8d073b50f0b46f4919440bfec1ca8bfcc52f89b1594028d4fbdc38cb9a583275b8687f571173e9d6"}}, &(0x7f0000001340)={0x0, 0x3, 0x46, @string={0x46, 0x3, "9109f0659af1f03da4396eafa76d58174e31c7b50e6a6bb92b916b31b10f7cfcbfd336e3fca2c98af408a0b19c7d44482536ca5135d484e1da8093a490fc6a52fff8667e"}}, &(0x7f00000013c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0xaf, 0x29}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x3, 0x88f, 0x1, [0xf, 0x30, 0x3f, 0xff0000, 0xc000, 0xff000f]}]}}, &(0x7f0000001400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x5, 0xc, "c7a75253", "18fd7d0a"}}, &(0x7f0000001440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0xc, 0x8, 0x0, 0x49, 0x1}}}, &(0x7f0000001980)={0x84, &(0x7f00000014c0)={0x20, 0x16, 0xf6, "b8b61068b13212428c6f6b3a232909246b7dbbb992a495b5067c693e2357f5763204cffa9fa6a678ae1cfa929da4ed7498d808d13ed663b8c0a411c99af2abfc39fd683a6d1f97fb3acc299424c3e591eaef617e211ef1b4a08a8402130a5b101c5f6e539233079ba8099706048ea045256e4a9a8f06c0044fbf608b173d148bf877ca4ce021e68549581a8b1612d37f22465921c03c6a448743acd5095b5707f9e13e0becb7fc24006dc7f30ef5b1142e47084d93beb8d89940de683ca745cafe0a7ca6a3b7d42933739f818b5e1058d638e3e6dc5e16c74368eef8ad6584c9d308b69c995a915320f237b7e75f0c213a7c4dd7fd8c"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0xe0, 0x2}}, &(0x7f00000016c0)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001700)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001740)={0x40, 0xb, 0x2, "e823"}, &(0x7f0000001780)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000017c0)={0x40, 0x13, 0x6}, &(0x7f0000001800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000001840)={0x40, 0x19, 0x2, "161c"}, &(0x7f0000001880)={0x40, 0x1a, 0x2, 0x1408}, &(0x7f00000018c0)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x1}}) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001ac0)={0x0, 0x54, &(0x7f0000001a40)=[@in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x11d7}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x77}, @in6={0xa, 0x4e23, 0x8e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000001b00)=0x10) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001b40), 0x400, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001b80)={0x0, r10, 0x800, 0x1000, 0x401, 0x1})
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001bc0), 0x2, 0x0)

984.016452ms ago: executing program 1 (id=2465):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
socket$inet6(0xa, 0x3, 0x4) (async)
r1 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) (async)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x40c, 0x0, 0xfffd, 0x0, 0xa0, 0x80, 0x2b}, {0x0, 0x0, 0x0, 0x40000000000006cc, 0xffffffffffffffa2, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x6}, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x400000, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESDEC=0x0], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f00000005c0)={0x0, &(0x7f0000000580)=[&(0x7f0000000340)="b5576329279babab4d290acb550663034b6920ba8df6882d7e487d27fccdd30365f749467d0e6d7fd22ec48fa14aa1b803e12267d2b76d33ea3f1bd54eaf425fff5c92ec01fc8d4da2564ad08d17f89c4020ddbeeab36adca4f689a4f13452614fbddd7188fa052897f90e126dbd9a7e764a049469fa7918e8a2c4518adc358ee665e4b2bf9a30fbc690f62f8967093241310367d1bc7c23c50efe79ad61f257b64c1ddfa9da13f5d5ed14c655f47b0331b861", &(0x7f0000000400)="9e22051d5289f7b38a796587e6c5b3849076773ecc0b9914a3f70e141e96d07f9c9dd4124f915d647158126453c4e27e8b01ae5d24e8858ea4dcd1b062a22942528a2a353bb064c3d9bd1a1a8fc651ccbf3ebad593cc2a0823fa91b916c5a1c25951", &(0x7f0000000480)="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"], 0x5}) (async)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f00000005c0)={0x0, &(0x7f0000000580)=[&(0x7f0000000340)="b5576329279babab4d290acb550663034b6920ba8df6882d7e487d27fccdd30365f749467d0e6d7fd22ec48fa14aa1b803e12267d2b76d33ea3f1bd54eaf425fff5c92ec01fc8d4da2564ad08d17f89c4020ddbeeab36adca4f689a4f13452614fbddd7188fa052897f90e126dbd9a7e764a049469fa7918e8a2c4518adc358ee665e4b2bf9a30fbc690f62f8967093241310367d1bc7c23c50efe79ad61f257b64c1ddfa9da13f5d5ed14c655f47b0331b861", &(0x7f0000000400)="9e22051d5289f7b38a796587e6c5b3849076773ecc0b9914a3f70e141e96d07f9c9dd4124f915d647158126453c4e27e8b01ae5d24e8858ea4dcd1b062a22942528a2a353bb064c3d9bd1a1a8fc651ccbf3ebad593cc2a0823fa91b916c5a1c25951", &(0x7f0000000480)="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"], 0x5})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xfdc8565f2c9dc94c)
syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="009a2200000000c8000000000000000068e7439dc9576d1958b05655246296ed03c8ecdb86e633aec27f709b262a5e63f27671cda734b094fd1eccf4efc30ee9276397f9a857f9af18be6d9673d5376d427ff29c0a75f8d7f06826efa080450eee6657e0c925b4ebc0ed49ffcce781d52dbec2"], 0x0, 0x0, 0x0}, 0x0)

7.600153ms ago: executing program 0 (id=2466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000060010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)

735.658µs ago: executing program 0 (id=2467):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="020000000400000008008230c33b3fc600a8190200000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
fadvise64(r2, 0x18, 0x29, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020)
memfd_create(0x0, 0x0)
fsopen(0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0)
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3ad3, 0x0, 0x2, 0x31d}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4375, 0x8, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x20, 0x2, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x40000363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
r13 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r13, &(0x7f0000004900)={0x2020}, 0x2081)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2a, 0x2, 0x1)

0s ago: executing program 2 (id=2468):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x7fff, 0x32315241, 0x1, @discrete={0x5, 0x5}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000040), 0x44)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0xd000, 0x18000})
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0xa}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}})
io_uring_enter(0xffffffffffffffff, 0x11b5, 0x3933, 0x61, &(0x7f0000000140)={[0x29]}, 0x8)

kernel console output (not intermixed with test programs):

acklog
[  667.441950][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.522445][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'.
[  667.651958][ T5707] go7007 5-1:200.97: probe with driver go7007 failed with error -12
[  667.657312][ T5707] usb 5-1: USB disconnect, device number 28
[  667.686719][T11411] udevd[11411]: setting mode of /dev/bus/usb/005/028 to 020664 failed: No such file or directory
[  667.686859][T11411] udevd[11411]: setting owner of /dev/bus/usb/005/028 to uid=0, gid=0 failed: No such file or directory
[  667.726011][T14494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2434950861 (77918427552 ns) > initial count (24961539296 ns). Using initial count to start timer.
[  667.810530][   T31] audit: type=1326 audit(1790997438.773:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.810789][   T31] audit: type=1326 audit(1790997438.773:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.811092][   T31] audit: type=1326 audit(1790997438.773:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.811318][   T31] audit: type=1326 audit(1790997438.773:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.845472][   T31] audit: type=1326 audit(1790997438.773:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.845525][   T31] audit: type=1326 audit(1790997438.783:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1f15e98e code=0x7ffc0000
[  667.845565][   T31] audit: type=1326 audit(1790997438.783:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1f15e98e code=0x7ffc0000
[  667.845608][   T31] audit: type=1326 audit(1790997438.783:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  667.845644][   T31] audit: type=1326 audit(1790997438.783:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.2111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x7ffc0000
[  668.079760][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  668.221585][    T9] usb 2-1: Using ep0 maxpacket: 32
[  668.222332][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  668.227415][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.227444][    T9] usb 2-1: Product: syz
[  668.227460][    T9] usb 2-1: Manufacturer: syz
[  668.227476][    T9] usb 2-1: SerialNumber: syz
[  668.304573][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  668.523874][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.606612][    T9] usb 2-1: USB disconnect, device number 22
[  668.705121][T11580] udevd[11580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  668.836432][T14513] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2119'.
[  668.839439][T14513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  668.914307][T14516] loop4: detected capacity change from 0 to 7
[  668.917911][T14516] Dev loop4: unable to read RDB block 7
[  668.917962][T14516]  loop4: unable to read partition table
[  668.918214][T14516] loop4: partition table beyond EOD, truncated
[  668.918269][T14516] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  669.074159][T14521] ipt_ah: unknown flags FF
[  669.321928][  T191] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  669.492065][    T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  669.496116][  T191] usb 5-1: unable to get BOS descriptor or descriptor too short
[  669.496210][  T191] usb 5-1: New USB device found, idVendor=8086, idProduct=0a52, bcdDevice= 0.00
[  669.499553][  T191] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config
[  669.499595][  T191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  669.499644][  T191] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  669.588472][  T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  669.588511][  T191] usb 5-1: Product: syz
[  669.588523][  T191] usb 5-1: Manufacturer: syz
[  669.619390][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.652701][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  669.654109][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  669.654130][    T9] usb 2-1: config 0 has no interface number 0
[  669.654169][    T9] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  669.654189][    T9] usb 2-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  669.656837][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.656858][    T9] usb 2-1: Product: syz
[  669.656869][    T9] usb 2-1: Manufacturer: syz
[  669.656880][    T9] usb 2-1: SerialNumber: syz
[  669.688644][    T9] usb 2-1: config 0 descriptor??
[  669.752557][T14528] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  669.754443][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  669.758352][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[  669.881334][ T5618] usb 5-1: USB disconnect, device number 29
[  670.482070][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.642429][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.740700][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2128'.
[  670.943241][ T5618] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  671.614508][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.617700][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.683972][   T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  671.726105][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.832023][   T25] usb 5-1: Using ep0 maxpacket: 8
[  671.833827][   T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  671.842224][   T25] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  671.842278][   T25] usb 5-1: config 0 has no interface number 0
[  671.842472][   T25] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  671.842600][   T25] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  671.842694][   T25] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  671.842775][   T25] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  671.842859][   T25] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  671.960106][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.960139][   T25] usb 5-1: Product: syz
[  671.960156][   T25] usb 5-1: Manufacturer: syz
[  671.960173][   T25] usb 5-1: SerialNumber: syz
[  671.991852][   T25] usb 5-1: config 0 descriptor??
[  672.219315][   T25] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  672.493244][T14579] trusted_key: encrypted_key: insufficient parameters specified
[  672.510811][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'.
[  672.809161][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.834172][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.840791][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.030900][T14592] netlink: 'syz.5.2137': attribute type 4 has an invalid length.
[  673.400456][T14589] kvm [14587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x2400
[  673.400568][T14589] kvm [14587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x2400
[  673.449157][T14589] kvm [14587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x2400
[  673.481999][T14589] kvm [14587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x2400
[  673.482143][T14589] kvm [14587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x2400
[  673.523263][  T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.627120][ T5691] usb 5-1: USB disconnect, device number 30
[  673.842794][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.370240][T14602] ALSA: mixer_oss: invalid OSS volume '
c0�'
[  674.402457][T12774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.403225][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.403772][  T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.892164][T12774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.892897][  T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.898780][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.169152][T14610] tunl0: entered promiscuous mode
[  675.206450][T14610] netlink: 'syz.2.2141': attribute type 4 has an invalid length.
[  675.206469][T14610] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2141'.
[  675.995080][T14625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2143'.
[  676.711973][    T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  676.866615][    T9] usb 6-1: Using ep0 maxpacket: 8
[  676.870564][    T9] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  676.899186][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.899207][    T9] usb 6-1: Product: syz
[  676.899218][    T9] usb 6-1: Manufacturer: syz
[  676.899230][    T9] usb 6-1: SerialNumber: syz
[  676.934648][    T9] usb 6-1: config 0 descriptor??
[  676.952666][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[  676.993229][ T5618] net_ratelimit: 4 callbacks suppressed
[  676.993253][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.150577][T14635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2147'.
[  677.680863][    T9] gspca_sq930x: ucbus_write failed -110
[  678.023747][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.551599][    T9] gspca_sq930x: Unknown sensor
[  678.551699][    T9] sq930x 6-1:0.0: probe with driver sq930x failed with error -22
[  678.882936][ T5691] usb 6-1: USB disconnect, device number 55
[  679.071336][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.248088][T14650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  679.249951][T14650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  679.603231][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.082122][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.167352][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.168106][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.168725][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.171797][ T5716] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  680.311988][ T5716] usb 5-1: device descriptor read/64, error -71
[  680.561952][ T5716] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  680.693407][ T5716] usb 5-1: device descriptor read/64, error -71
[  680.802344][ T5716] usb usb5-port1: attempt power cycle
[  681.023618][    T9] usb 2-1: USB disconnect, device number 23
[  681.101765][ T5618] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  681.161844][ T5716] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  681.187120][ T5716] usb 5-1: device descriptor read/8, error -71
[  681.201993][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.261731][ T5618] usb 6-1: Using ep0 maxpacket: 16
[  681.263881][ T5618] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  681.265662][ T5618] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  681.265696][ T5618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  681.269718][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.269749][ T5618] usb 6-1: Product: syz
[  681.269766][ T5618] usb 6-1: Manufacturer: syz
[  681.269783][ T5618] usb 6-1: SerialNumber: syz
[  681.392764][ T5618] usb 6-1: config 0 descriptor??
[  681.410747][ T5618] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  681.410786][ T5618] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  681.441881][ T5716] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  681.464412][ T5716] usb 5-1: device descriptor read/8, error -71
[  681.544387][    T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  681.573822][ T5716] usb usb5-port1: unable to enumerate USB device
[  681.696774][    T9] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  681.736708][    T9] usb 2-1: config 127 has an invalid interface number: 1 but max is 0
[  681.736733][    T9] usb 2-1: config 127 has no interface number 0
[  681.736792][    T9] usb 2-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  681.773230][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.773261][    T9] usb 2-1: Product: syz
[  681.773279][    T9] usb 2-1: Manufacturer: syz
[  681.773295][    T9] usb 2-1: SerialNumber: syz
[  681.808880][T14689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  682.007562][ T5618] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  682.009402][ T5618] em28xx 6-1:0.0: Config register raw data: 0x3f
[  682.009428][ T5618] em28xx 6-1:0.0: I2S Audio (3 sample rate(s))
[  682.009445][ T5618] em28xx 6-1:0.0: No AC97 audio processor
[  682.086817][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.092115][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.095906][T14689] vivid-002: disconnect
[  682.116317][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.243255][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.384567][T14689] program syz.1.2159 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  682.433758][    T9] asix 2-1:127.1: probe with driver asix failed with error -71
[  682.435084][T14688] vivid-002: reconnect
[  682.480139][    T9] usb 2-1: USB disconnect, device number 24
[  682.626865][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.640275][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.673419][ T5618] usb 6-1: USB disconnect, device number 56
[  683.281795][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.391696][ T5618] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  683.458888][ T6911] tipc: Subscription rejected, illegal request
[  683.462793][T14693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.464179][T14693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.539561][T14698] IPv6: NLM_F_CREATE should be specified when creating new route
[  683.563165][ T5618] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  683.564242][ T5618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.564299][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  683.564322][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  683.564341][ T5618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  683.600837][ T5618] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  683.600914][ T5618] usb 5-1: Manufacturer: syz
[  683.656094][ T5618] usb 5-1: config 0 descriptor??
[  683.696576][T14693] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772161 (167772161 ns) > initial count (20 ns). Using initial count to start timer.
[  684.002795][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.137231][ T5618] rc_core: IR keymap rc-hauppauge not found
[  684.137253][ T5618] Registered IR keymap rc-empty
[  684.137977][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.168377][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.208524][ T5618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  684.233344][ T5618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71
[  684.264735][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.269552][T14711] random: crng reseeded on system resumption
[  684.301849][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.322453][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.324195][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.341987][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.368534][ T5691] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  684.369057][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.392701][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.424205][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.442914][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.463068][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.483726][ T5618] mceusb 5-1:0.0: Error: mce write urb status = -71
[  684.506712][ T5618] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  684.506733][ T5618] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  684.531630][ T5691] usb 6-1: Using ep0 maxpacket: 16
[  684.540240][ T5691] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  684.554991][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  684.580557][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.580579][ T5691] usb 6-1: Product: syz
[  684.580611][ T5691] usb 6-1: Manufacturer: syz
[  684.580623][ T5691] usb 6-1: SerialNumber: syz
[  684.626719][ T5691] usb 6-1: config 0 descriptor??
[  684.645014][ T5691] hub 6-1:0.0: bad descriptor, ignoring hub
[  684.645053][ T5691] hub 6-1:0.0: probe with driver hub failed with error -5
[  684.684642][ T5691] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  685.002070][ T5618] usb 5-1: USB disconnect, device number 35
[  685.072074][ T5691] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[  685.134870][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.292361][   T25] usb 6-1: USB disconnect, device number 57
[  685.345300][T11580] udevd[11580]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  685.375033][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.762930][T14736] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.913419][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  685.931396][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  685.931442][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  686.062797][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  686.063818][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.063871][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  686.063919][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.119655][    T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  686.232066][ T5707] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  686.384021][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  686.385605][ T5707] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.385649][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  686.389892][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.389929][ T5707] usb 6-1: Product: syz
[  686.389946][ T5707] usb 6-1: Manufacturer: syz
[  686.389963][ T5707] usb 6-1: SerialNumber: syz
[  686.412984][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.441891][   T25] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  686.472720][T14740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  686.556995][ T5716] usb 5-1: USB disconnect, device number 36
[  686.618093][   T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  686.626103][   T25] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  686.626214][   T25] usb 1-1: config 0 interface 0 has no altsetting 0
[  686.686937][ T5707] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  686.705544][   T25] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  686.705576][   T25] usb 1-1: Product: syz
[  686.705593][   T25] usb 1-1: Manufacturer: syz
[  686.705610][   T25] usb 1-1: SerialNumber: syz
[  686.707683][ T5707] usb 6-1: USB disconnect, device number 58
[  686.758003][   T25] usb 1-1: config 0 descriptor??
[  686.812592][   T25] usb 1-1: selecting invalid altsetting 0
[  686.879329][ T2361] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  686.879353][ T2361] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  687.162082][    T9] usb 1-1: USB disconnect, device number 49
[  687.202006][ T5707] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  687.205488][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.206245][  T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.207004][  T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.344047][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  687.370320][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.388546][ T5707] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  687.388610][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  687.417908][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.417930][ T5707] usb 6-1: Product: syz
[  687.417941][ T5707] usb 6-1: Manufacturer: syz
[  687.417953][ T5707] usb 6-1: SerialNumber: syz
[  687.454700][T14739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  687.455388][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.739254][ T5707] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  687.764104][ T5707] usb 6-1: USB disconnect, device number 59
[  688.466267][T14762] misc userio: The device must be registered before sending interrupts
[  688.482174][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.499541][T14761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2177'.
[  688.527460][T14764] sg_write: data in/out 278492/136 bytes for SCSI command 0x0-- guessing data in;
[  688.527460][T14764]    program syz.5.2178 not setting count and/or reply_len properly
[  688.751704][   T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  688.904587][   T25] usb 1-1: Using ep0 maxpacket: 16
[  688.906788][   T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  688.907676][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  688.907694][   T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  688.909422][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.909440][   T25] usb 1-1: Product: syz
[  688.909452][   T25] usb 1-1: Manufacturer: syz
[  688.909464][   T25] usb 1-1: SerialNumber: syz
[  688.972195][   T25] usb 1-1: config 0 descriptor??
[  689.152352][T14769] geneve1: entered promiscuous mode
[  689.225682][T14761] Invalid logical block size (55998)
[  689.228739][   T25] usb 1-1: USB disconnect, device number 50
[  689.482961][T14774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.485436][T14774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.522863][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.581654][ T5707] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  689.711973][ T5707] usb 6-1: device descriptor read/64, error -71
[  689.821652][ T5618] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  689.951981][ T5707] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  689.952605][ T5618] usb 2-1: device descriptor read/64, error -71
[  690.091707][ T5707] usb 6-1: device descriptor read/64, error -71
[  690.191756][ T5618] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  690.214880][ T5707] usb usb6-port1: attempt power cycle
[  690.242040][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.322913][ T5618] usb 2-1: device descriptor read/64, error -71
[  690.393377][T14784] kAFS: unable to lookup cell '(G'
[  690.408135][T14787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.408616][T14787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.432951][ T5618] usb usb2-port1: attempt power cycle
[  690.436062][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'.
[  690.461142][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'.
[  690.552062][ T5707] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  690.582025][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.582089][T14755] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  690.582792][ T5707] usb 6-1: device descriptor read/8, error -71
[  690.586498][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.586996][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.742843][T14755] usb 1-1: Using ep0 maxpacket: 32
[  690.743641][T14755] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  690.744915][T14755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.749303][T14755] usb 1-1: config 0 descriptor??
[  690.772570][ T5618] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  690.796534][T14755] as10x_usb: device has been detected
[  690.797124][ T5618] usb 2-1: device descriptor read/8, error -71
[  690.797368][T14755] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  690.822600][ T5707] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  690.839063][T14755] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  690.854580][ T5707] usb 6-1: device descriptor read/8, error -71
[  690.901014][T14755] as10x_usb: error during firmware upload part1
[  690.911181][T14755] Registered device nBox DVB-T Dongle
[  690.962286][ T5707] usb usb6-port1: unable to enumerate USB device
[  690.971332][ T5707] usb 1-1: USB disconnect, device number 51
[  691.017011][ T5707] Unregistered device nBox DVB-T Dongle
[  691.037285][ T5618] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  691.040958][ T5707] as10x_usb: device has been disconnected
[  691.042272][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.070892][ T5618] usb 2-1: device descriptor read/8, error -71
[  691.171897][ T5618] usb usb2-port1: unable to enumerate USB device
[  691.601855][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.831229][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  692.482755][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2193'.
[  692.510998][T14818] netlink: 'syz.5.2194': attribute type 12 has an invalid length.
[  692.641963][ T5618] net_ratelimit: 1 callbacks suppressed
[  692.641989][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.835835][T14827] overlay: Unknown parameter '.��`:u\'
[  693.328334][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.410979][T14755] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  693.576321][T14755] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  693.578345][T14755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.583773][T14755] usb 2-1: config 0 descriptor??
[  693.620837][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.687535][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.737304][T14843] tunl0: entered promiscuous mode
[  693.737528][T14843] netlink: 'syz.5.2201': attribute type 4 has an invalid length.
[  693.737549][T14843] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2201'.
[  693.843160][T14755] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  693.848458][T14844] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  694.154315][T14755] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  694.154358][T14755] [drm] Initialized udl on minor 1
[  694.722018][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.138582][   T31] kauditd_printk_skb: 1033 callbacks suppressed
[  695.138604][   T31] audit: type=1326 audit(1790997466.103:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14845 comm="syz.5.2202" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1f19e159 code=0x0
[  695.762756][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.862792][T14856] ALSA: mixer_oss: invalid OSS volume '
c0�'
[  696.402539][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.812495][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.333964][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'.
[  697.842127][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.976725][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.977215][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.007430][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.007949][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.032441][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.032889][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.037192][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.037625][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.050909][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.095393][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.104761][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.120022][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.412233][    T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  698.561943][    T9] usb 6-1: Using ep0 maxpacket: 8
[  698.564573][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  698.566861][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  698.566920][    T9] usb 6-1: config 0 has no interface number 0
[  698.566966][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  698.567012][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.571212][    T9] usb 6-1: config 0 descriptor??
[  698.618073][    T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  698.882735][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.002296][T14892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2212'.
[  699.002949][T14892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2212'.
[  699.204957][T14755] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  699.205578][T14755] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  699.250546][T14755] usb 2-1: USB disconnect, device number 29
[  699.279308][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  699.279945][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  699.379400][T14900] syzkaller1: entered promiscuous mode
[  699.379427][T14900] syzkaller1: entered allmulticast mode
[  699.449239][T14900] netlink: 'syz.4.2215': attribute type 1 has an invalid length.
[  699.467374][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.565021][T14821] Set syz0 is full, maxelem 65536 reached
[  699.618433][T14900] bond4: option mode: invalid value (7)
[  699.640757][T14900] bond4 (unregistering): Released all slaves
[  699.727304][T14913] netlink: 'syz.4.2215': attribute type 10 has an invalid length.
[  699.727332][T14913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2215'.
[  699.835439][T14907] tipc: Resetting bearer <eth:syzkaller0>
[  699.851044][T14755] usb 6-1: USB disconnect, device number 64
[  699.892036][T14906] team0: Port device dummy0 removed
[  699.921946][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.929213][T14913] dummy0: entered promiscuous mode
[  700.015291][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056898000: rx timeout, send abort
[  700.186103][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  700.331892][    T9] usb 2-1: device descriptor read/64, error -71
[  700.515351][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056898000: abort rx timeout. Force session deactivation
[  700.517837][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888025f03400: rx timeout, send abort
[  700.572507][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  700.702409][    T9] usb 2-1: device descriptor read/64, error -71
[  700.801286][T14931] ALSA: mixer_oss: invalid OSS volume 'bridg'
[  700.813419][    T9] usb usb2-port1: attempt power cycle
[  700.962873][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.017897][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888025f03400: abort rx timeout. Force session deactivation
[  701.151685][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  701.172677][    T9] usb 2-1: device descriptor read/8, error -71
[  701.240493][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.253056][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.413681][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  701.433551][    T9] usb 2-1: device descriptor read/8, error -71
[  701.551344][    T9] usb usb2-port1: unable to enumerate USB device
[  702.002771][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.492903][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.713340][    T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  702.770797][T14970] netlink: 'syz.4.2232': attribute type 1 has an invalid length.
[  702.770840][T14970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  702.826346][T14971] can: request_module (can-proto-0) failed.
[  702.830131][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.830700][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.861762][   T25] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  702.864746][    T9] usb 1-1: Using ep0 maxpacket: 32
[  702.867371][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  702.867412][    T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=c2.5a
[  702.868541][    T9] usb 1-1: config 137 has an invalid interface number: 5 but max is 0
[  702.868563][    T9] usb 1-1: config 137 has no interface number 0
[  702.868584][    T9] usb 1-1: config 137 interface 5 has no altsetting 0
[  702.870401][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.870421][    T9] usb 1-1: Product: syz
[  702.870432][    T9] usb 1-1: Manufacturer: syz
[  702.870443][    T9] usb 1-1: SerialNumber: syz
[  702.991837][T14755] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  703.032536][   T25] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  703.033973][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.034036][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.036993][   T25] usb 6-1: config 0 descriptor??
[  703.076491][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.147048][T14755] usb 2-1: Using ep0 maxpacket: 16
[  703.147993][T14755] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  703.154857][T14755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.155038][T14755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.155112][T14755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  703.155314][T14755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.218028][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.220416][T14755] usb 2-1: config 0 descriptor??
[  703.263201][   T25] usbhid 6-1:0.0: can't add hid device: -71
[  703.263319][   T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  703.294109][   T25] usb 6-1: USB disconnect, device number 65
[  703.428592][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.431401][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.455905][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.456791][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.480672][T14975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.500704][T14975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.762929][ T5707] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  703.923317][ T5707] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  703.924631][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.924718][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.929890][ T5707] usb 6-1: config 0 descriptor??
[  704.082603][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.204683][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.206641][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.774162][ T5707] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  704.778425][ T5707] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input72
[  704.829384][ T5707] usb 6-1: USB disconnect, device number 66
[  704.829495][    C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  705.036127][T14989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2237'.
[  705.127230][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.417397][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.418104][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.466929][    T9] usb_ehset_test 1-1:137.5: probe with driver usb_ehset_test failed with error -32
[  705.495893][    T9] usb 1-1: USB disconnect, device number 52
[  705.497140][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.497709][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.529270][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.876204][T14755] usbhid 2-1:0.0: can't add hid device: -71
[  705.876370][T14755] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  705.920188][T14755] usb 2-1: USB disconnect, device number 34
[  706.172161][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.284968][T15016] 8021q: adding VLAN 0 to HW filter on device team0
[  706.292171][T14755] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  706.314468][T15016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.397378][T15016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.400966][T15016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.430334][T15016] veth1_vlan: left promiscuous mode
[  706.439768][T15016] veth0_vlan: left promiscuous mode
[  706.450921][T15016] veth0_vlan: entered promiscuous mode
[  706.460072][T14755] usb 2-1: Using ep0 maxpacket: 8
[  706.467124][T14755] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  706.469053][T14755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  706.469098][T14755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.503801][T14755] usb 2-1: config 0 descriptor??
[  706.518356][T15016] veth1_vlan: entered promiscuous mode
[  706.547651][T15016] veth1_macvtap: left promiscuous mode
[  706.551398][T15016] veth0_macvtap: left promiscuous mode
[  706.565282][T15016] veth0_macvtap: entered promiscuous mode
[  706.568971][T15016] veth1_macvtap: entered promiscuous mode
[  706.605046][T15016] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  706.608207][T15016] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  706.611425][T15016] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  706.611870][   T25] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  706.646462][T15016] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  706.647128][T15016] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  706.684184][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.684296][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.690371][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.690491][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  706.740925][T14755] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  706.762119][   T25] usb 1-1: Using ep0 maxpacket: 8
[  706.763684][   T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  706.765329][   T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  706.765354][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  706.765373][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  706.765391][   T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  706.765421][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.027501][ T6911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.042558][ T6911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.043463][ T6911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.048277][ T6911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.141246][   T25] usb 1-1: GET_CAPABILITIES returned 0
[  707.141326][   T25] usbtmc 1-1:16.0: can't read capabilities
[  707.201973][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.327876][T15023] CUSE: unknown device info "n��|�zQC*�"
[  707.327936][T15023] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  707.327948][T15023] CUSE: unknown device info "����"
[  707.327956][T15023] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  707.327966][T15023] CUSE: DEVNAME unspecified
[  707.329877][T15023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2247'.
[  707.487890][T15023] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  707.497764][T15023] bond7 (unregistering): Released all slaves
[  707.554885][ T5706] usb 1-1: USB disconnect, device number 53
[  708.208127][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'.
[  708.242344][ T5706] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  708.242355][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.325077][T15039] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2249'.
[  708.345159][T15039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  708.392229][ T5706] usb 6-1: Using ep0 maxpacket: 32
[  708.396720][ T5706] usb 6-1: unable to get BOS descriptor or descriptor too short
[  708.396775][ T5706] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=9b.14
[  708.400453][ T5706] usb 6-1: config 1 has an invalid interface number: 76 but max is 0
[  708.400483][ T5706] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.400504][ T5706] usb 6-1: config 1 has no interface number 0
[  708.456120][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.456151][ T5706] usb 6-1: Product: syz
[  708.456168][ T5706] usb 6-1: Manufacturer: syz
[  708.456184][ T5706] usb 6-1: SerialNumber: syz
[  708.515780][T15055] fuse: Bad value for 'fd'
[  708.528685][T15055] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2252'.
[  708.561882][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.752524][ T5706] usb-storage 6-1:1.76: USB Mass Storage device detected
[  708.755465][T15059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2253'.
[  708.787476][ T5706] usb-storage 6-1:1.76: Quirks match for vid 07c4 pid a4a5: 420
[  708.868455][T15049] kvm: vcpu 0: requested 18432 ns lapic timer period limited to 200000 ns
[  708.868485][T15049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=117440522 (15032386816 ns) > initial count (200000 ns). Using initial count to start timer.
[  708.905075][ T5706] usb 6-1: USB disconnect, device number 67
[  709.060718][T14755] usb 2-1: USB disconnect, device number 35
[  709.165836][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.166196][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.288191][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.579688][T15077] loop8: detected capacity change from 0 to 16384
[  709.821858][   T25] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[  709.841905][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.842227][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.842532][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.956818][   T25] usb 6-1: device descriptor read/64, error -71
[  709.958471][T15078] loop8: detected capacity change from 16384 to 16383
[  710.036211][T15080] xt_CT: No such helper "snmp_trap"
[  710.202033][   T25] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[  710.323146][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.331774][   T25] usb 6-1: device descriptor read/64, error -71
[  710.469726][   T25] usb usb6-port1: attempt power cycle
[  710.831705][   T25] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[  710.852390][   T25] usb 6-1: device descriptor read/8, error -71
[  711.091675][   T25] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[  711.112378][   T25] usb 6-1: device descriptor read/8, error -71
[  711.221974][   T25] usb usb6-port1: unable to enumerate USB device
[  713.442987][ T5618] net_ratelimit: 4 callbacks suppressed
[  713.443005][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.482006][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.642708][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.522313][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.562186][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.601979][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.681982][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.643125][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.682170][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.722156][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.722613][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.762430][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  721.770596][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.406304][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.802160][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.763082][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.842275][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.881957][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.924266][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.811915][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.962960][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.002582][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.042311][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.843517][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.081877][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.123503][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.004640][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.161866][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.883257][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.202593][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.241934][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.283145][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.921983][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.321943][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.362673][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.408650][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.962599][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.441989][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.482399][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.521906][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.602517][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.001983][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.562888][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.602309][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.641833][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.042568][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.682418][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.722201][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.365096][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  747.365151][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  747.388884][ T2361] pvrusb2: request_firmware fatal error with code=-110
[  747.388930][ T2361] pvrusb2: Failure uploading firmware1
[  747.388939][ T2361] pvrusb2: Device initialization was not successful.
[  747.388947][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  747.388957][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  747.394276][ T5716] pvrusb2: Device being rendered inoperable
[  747.762415][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.083743][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.806383][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.842198][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.882952][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.122195][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.202622][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.921944][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.963621][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.002088][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.162272][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.043269][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.082206][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.122142][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.202687][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.162794][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.443271][T15093] netlink: 'syz.0.2260': attribute type 30 has an invalid length.
[  758.555724][T15103] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2262'.
[  758.555765][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'.
[  758.721637][ T5691] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  758.815454][T15110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.816360][T15110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.886711][ T5691] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  758.887690][ T5691] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  758.887729][ T5691] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  758.887747][ T5691] usb 2-1: config 0 interface 0 has no altsetting 0
[  758.889863][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  758.889883][ T5691] usb 2-1: Product: syz
[  758.889894][ T5691] usb 2-1: Manufacturer: syz
[  758.889906][ T5691] usb 2-1: SerialNumber: syz
[  758.899408][ T5691] usb 2-1: config 0 descriptor??
[  758.920232][ T5716] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  758.930304][ T5691] hub 2-1:0.0: bad descriptor, ignoring hub
[  758.930388][ T5691] hub 2-1:0.0: probe with driver hub failed with error -5
[  758.986380][ T5691] usb 2-1: selecting invalid altsetting 0
[  759.133543][ T5716] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  759.134766][ T5716] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  759.134804][ T5716] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  759.134831][ T5716] usb 1-1: config 0 interface 0 has no altsetting 0
[  759.137820][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  759.137850][ T5716] usb 1-1: Product: syz
[  759.137868][ T5716] usb 1-1: Manufacturer: syz
[  759.137885][ T5716] usb 1-1: SerialNumber: syz
[  759.210029][ T5716] usb 1-1: config 0 descriptor??
[  759.213273][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.231688][T14755] usb 2-1: USB disconnect, device number 36
[  759.264708][ T5716] usb 1-1: selecting invalid altsetting 0
[  759.634901][T15126] netlink: 'syz.2.2270': attribute type 1 has an invalid length.
[  759.657727][T15126] nft_compat: unsupported protocol 5
[  759.731813][   T25] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  759.894987][   T25] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  759.896130][   T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  759.896167][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  759.896197][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  759.900846][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.900880][   T25] usb 6-1: Product: syz
[  759.900898][   T25] usb 6-1: Manufacturer: syz
[  759.900915][   T25] usb 6-1: SerialNumber: syz
[  759.975668][   T25] usb 6-1: config 0 descriptor??
[  759.994498][   T25] iguanair 6-1:0.0: probe with driver iguanair failed with error -12
[  760.064107][T14755] usb 1-1: USB disconnect, device number 54
[  760.073233][ T5716] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  760.204148][ T5707] usb 6-1: USB disconnect, device number 72
[  760.242243][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  760.243237][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.245436][ T5716] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa
[  760.247889][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.248366][ T5716] usb 5-1: config 245 has an invalid interface number: 214 but max is 0
[  760.248386][ T5716] usb 5-1: config 245 has no interface number 0
[  760.248408][ T5716] usb 5-1: config 245 interface 214 has no altsetting 0
[  760.295231][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.295264][ T5716] usb 5-1: Product: syz
[  760.295281][ T5716] usb 5-1: Manufacturer: syz
[  760.295298][ T5716] usb 5-1: SerialNumber: syz
[  760.371349][T15144] xt_LOG: level 9 >= 8
[  760.395343][T15135] bond7: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms
[  760.403135][T15135] 8021q: adding VLAN 0 to HW filter on device bond7
[  760.705021][T15152] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  760.705054][T15152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  760.707038][T15152] vhci_hcd vhci_hcd.0: Device attached
[  760.708838][T15153] vhci_hcd: connection closed
[  760.709040][   T12] vhci_hcd vhci_hcd.1: stop threads
[  760.709070][   T12] vhci_hcd vhci_hcd.1: release socket
[  760.709092][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  760.803308][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.833945][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.845298][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.863284][T15163] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2280'.
[  760.891086][T15150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.910906][T15150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.931400][T15150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.945172][T15150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.945190][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.945674][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.131941][ T5618] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  761.144857][ T5691] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  761.284028][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.305211][ T5691] usb 6-1: Using ep0 maxpacket: 16
[  761.307270][ T5618] usb 1-1: Using ep0 maxpacket: 16
[  761.310201][ T5691] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  761.312767][ T5618] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  761.333792][ T5691] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  761.333884][ T5691] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  761.356706][ T5618] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config
[  761.356847][ T5618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  761.409396][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.409430][ T5691] usb 6-1: Product: syz
[  761.409473][ T5691] usb 6-1: Manufacturer: syz
[  761.409490][ T5691] usb 6-1: SerialNumber: syz
[  761.438198][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.438229][ T5618] usb 1-1: Product: syz
[  761.438245][ T5618] usb 1-1: Manufacturer: syz
[  761.438262][ T5618] usb 1-1: SerialNumber: syz
[  761.473618][ T5691] usb 6-1: config 0 descriptor??
[  761.476897][T15172] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0103 with DS=0x91
[  761.527021][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.527464][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.585855][ T5618] usb 1-1: 0:2 : does not exist
[  761.587275][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.587693][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.631336][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.632045][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.658150][T15173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.666760][T15173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.728539][T15163] Invalid logical block size (1454112767)
[  761.743446][   T25] usb 6-1: USB disconnect, device number 73
[  761.774446][ T5618] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  762.094057][ T5618] usb 1-1: USB disconnect, device number 55
[  762.248904][T15101] udevd[15101]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  762.285873][T15180] ALSA: mixer_oss: invalid OSS volume 'syz_t'
[  762.332498][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.109132][ T5618] usb 5-1: USB disconnect, device number 37
[  763.110225][ T5618] f81534a_ctrl 5-1:245.214: failed to enable ports: -19
[  763.303407][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.351929][T14755] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  763.368002][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.410268][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.410753][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.503215][T14755] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  763.504558][T14755] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5
[  763.504586][T14755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 244, setting to 64
[  763.504629][T14755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.573086][T14755] usb 1-1: config 0 descriptor??
[  763.659293][T15195] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  763.782435][T14755] ath6kl: Failed to submit usb control message: -71
[  763.782495][T14755] ath6kl: unable to send the bmi data to the device: -71
[  763.782512][T14755] ath6kl: Unable to send get target info: -71
[  763.831032][T14755] ath6kl: Failed to init ath6kl core: -71
[  763.831422][T14755] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  763.851967][T14755] usb 1-1: USB disconnect, device number 56
[  764.194572][T15212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2289'.
[  764.290679][T15209] bridge0: port 3(syz_tun) entered blocking state
[  764.292445][T15209] bridge0: port 3(syz_tun) entered disabled state
[  764.292657][T15209] syz_tun: entered allmulticast mode
[  764.348507][T15209] syz_tun: entered promiscuous mode
[  764.352712][T15209] bridge0: port 3(syz_tun) entered blocking state
[  764.353150][T15209] bridge0: port 3(syz_tun) entered forwarding state
[  765.057402][T15211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  765.076568][T15211] block device autoloading is deprecated and will be removed.
[  765.362436][ T5691] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  765.494621][T15232] syzkaller0: entered promiscuous mode
[  765.494667][T15232] syzkaller0: entered allmulticast mode
[  765.522460][   T25] net_ratelimit: 1 callbacks suppressed
[  765.522478][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.524878][ T5691] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  765.524913][ T5691] usb 5-1: too many configurations: 85, using maximum allowed: 8
[  765.527615][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.527651][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.527673][ T5691] usb 5-1: config 1 has no interface number 0
[  765.527715][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.531376][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.531418][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.531541][ T5691] usb 5-1: config 1 has no interface number 0
[  765.531575][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.535194][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.535283][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.535349][ T5691] usb 5-1: config 1 has no interface number 0
[  765.535447][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.610105][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.610189][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.610243][ T5691] usb 5-1: config 1 has no interface number 0
[  765.610317][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.639370][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.639679][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.639773][ T5691] usb 5-1: config 1 has no interface number 0
[  765.639933][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.748063][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.748157][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.748212][ T5691] usb 5-1: config 1 has no interface number 0
[  765.748299][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.764169][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.764256][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.764310][ T5691] usb 5-1: config 1 has no interface number 0
[  765.764437][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.782188][ T5691] usb 5-1: config 1 has an invalid interface number: 119 but max is 0
[  765.782267][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.782360][ T5691] usb 5-1: config 1 has no interface number 0
[  765.782463][ T5691] usb 5-1: config 1 interface 119 has no altsetting 0
[  765.866645][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=82
[  765.866668][ T5691] usb 5-1: Product: syz
[  765.866680][ T5691] usb 5-1: Manufacturer: syz
[  765.866691][ T5691] usb 5-1: SerialNumber: syz
[  765.913973][ T5691] ttusb_dec_send_command: command bulk message failed: error -22
[  765.914140][ T5691] ttusb-dec 5-1:1.119: probe with driver ttusb-dec failed with error -22
[  765.999079][T15243] netlink: 'syz.5.2300': attribute type 1 has an invalid length.
[  765.999099][T15243] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2300'.
[  766.114525][T15234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.115864][T15234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.119707][T15234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.120178][T15234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.178486][T15251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.179257][T15251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.190127][ T5691] usb 5-1: USB disconnect, device number 38
[  766.322767][ T8834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.323525][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.324088][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.562742][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.863218][T15266] ALSA: mixer_oss: invalid OSS volume '*'
[  767.120106][T15277] ALSA: mixer_oss: invalid OSS volume 'bridg'
[  767.375673][ T5618] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  767.531303][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.543353][ T5618] usb 2-1: Using ep0 maxpacket: 8
[  767.544174][ T5618] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  767.544668][ T5618] usb 2-1: config 0 has no interfaces?
[  767.547588][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.550868][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  767.550890][ T5618] usb 2-1: Product: syz
[  767.550902][ T5618] usb 2-1: SerialNumber: syz
[  767.611287][ T5618] usb 2-1: config 0 descriptor??
[  767.685123][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.867402][T15288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2312'.
[  768.154103][ T5716] usb 2-1: USB disconnect, device number 37
[  768.225085][T15290] kvm: user requested TSC rate below hardware speed
[  768.721870][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.361936][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.518528][T15323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'.
[  769.611582][ T5716] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  769.762878][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.782398][ T5716] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  769.789505][ T5716] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  769.789537][ T5716] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  769.789556][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  769.789572][ T5716] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  769.846890][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.846915][ T5716] usb 6-1: Product: syz
[  769.846927][ T5716] usb 6-1: Manufacturer: syz
[  769.846981][ T5716] usb 6-1: SerialNumber: syz
[  769.874600][ T5716] usb 6-1: config 0 descriptor??
[  769.875545][T15320] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  769.880893][ T5716] usb 6-1: ucan: probing device on interface #0
[  769.880923][ T5716] usb 6-1: ucan: invalid in_ep MaxPacketSize
[  769.880940][ T5716] usb 6-1: ucan: probe failed; try to update the device firmware
[  770.050159][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.050709][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.086608][ T5716] usb 6-1: USB disconnect, device number 74
[  770.144756][ T5618] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  770.297631][ T5618] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  770.299556][ T5618] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  770.299594][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.406203][ T8834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.580476][ T5618] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[  770.665478][  T123] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  770.752877][ T5618] wwan wwan0: port wwan0qmi0 attached
[  770.807132][ T5691] net_ratelimit: 2 callbacks suppressed
[  770.807157][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.842440][  T123] usb 2-1: Using ep0 maxpacket: 32
[  770.845309][  T123] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00
[  770.846858][  T123] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.846922][  T123] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  770.846953][  T123] usb 2-1: config 0 interface 0 has no altsetting 0
[  770.846990][  T123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.931885][  T123] usb 2-1: config 0 descriptor??
[  771.055068][ T5618] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 3a:d0:ca:32:0b:76
[  771.069491][ T5618] usb 1-1: USB disconnect, device number 57
[  771.090520][ T5618] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[  771.211847][   T25] usb 6-1: new full-speed USB device number 75 using dummy_hcd
[  771.253591][ T5618] wwan wwan0: port wwan0qmi0 disconnected
[  771.373754][   T25] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  771.377302][   T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  771.377358][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  771.377379][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  771.435058][   T25] usb 6-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3
[  771.435082][   T25] usb 6-1: Product: syz
[  771.435095][   T25] usb 6-1: SerialNumber: syz
[  771.474710][   T25] usb 6-1: config 0 descriptor??
[  771.491020][T15336] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  771.509252][  T123] apple 0003:05AC:021C.002D: unknown main item tag 0x0
[  771.524040][  T123] apple 0003:05AC:021C.002D: unknown main item tag 0x0
[  771.524083][  T123] apple 0003:05AC:021C.002D: unexpected long global item
[  771.524879][  T123] apple 0003:05AC:021C.002D: parse failed
[  771.525073][  T123] apple 0003:05AC:021C.002D: probe with driver apple failed with error -22
[  771.709976][  T123] usb 2-1: USB disconnect, device number 38
[  771.754584][   T25] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71
[  771.781283][   T25] usb 6-1: USB disconnect, device number 75
[  771.849936][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.891818][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'.
[  771.891938][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'.
[  772.402072][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.697857][   T25] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  772.863210][   T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  772.882406][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.913106][T15357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.916189][T15357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.921657][   T25] usb 6-1: string descriptor 0 read error: -71
[  772.921823][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.984753][   T25] usb 6-1: can't set config #1, error -71
[  772.996107][   T25] usb 6-1: USB disconnect, device number 76
[  773.927564][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.242302][T14755] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  774.417418][T14755] usb 2-1: Using ep0 maxpacket: 32
[  774.448838][T14755] usb 2-1: unable to get BOS descriptor or descriptor too short
[  774.448885][T14755] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  774.449729][T14755] usb 2-1: unable to read config index 0 descriptor/start: -71
[  774.449759][T14755] usb 2-1: can't read configurations, error -71
[  774.888535][T15398] sctp: [Deprecated]: syz.5.2347 (pid 15398) Use of struct sctp_assoc_value in delayed_ack socket option.
[  774.888535][T15398] Use struct sctp_sack_info instead
[  774.963404][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.226436][T15410] netlink: 'syz.0.2350': attribute type 10 has an invalid length.
[  775.267294][T15410] loop5: detected capacity change from 0 to 4095
[  775.421905][ T5716] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  775.442639][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.551890][ T5716] usb 6-1: device descriptor read/64, error -71
[  775.793025][ T5716] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  775.799399][T15410] Buffer I/O error on dev loop5, logical block 511, async page read
[  775.801281][T15101] Buffer I/O error on dev loop5, logical block 511, async page read
[  775.921628][ T5716] usb 6-1: device descriptor read/64, error -71
[  776.003831][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.042223][ T5716] usb usb6-port1: attempt power cycle
[  776.261768][   T25] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  776.391716][ T5716] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  776.412830][ T5716] usb 6-1: device descriptor read/8, error -71
[  776.421287][   T25] usb 2-1: not running at top speed; connect to a high speed hub
[  776.421328][   T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  776.456888][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.456920][   T25] usb 2-1: Product: syz
[  776.456936][   T25] usb 2-1: Manufacturer: syz
[  776.456953][   T25] usb 2-1: SerialNumber: syz
[  776.512237][   T25] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  776.561375][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  776.615734][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  776.668794][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  776.681673][ T5716] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  776.702319][ T5716] usb 6-1: device descriptor read/8, error -71
[  776.736454][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  776.798979][T15416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.812145][ T5716] usb usb6-port1: unable to enumerate USB device
[  776.820282][T15416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.848001][T15416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.848505][T15416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.903521][   T25] usb 2-1: USB disconnect, device number 41
[  776.992003][   T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  777.021366][   T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  777.043381][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.048884][   T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  777.078145][   T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  777.092565][   T25] keyspan 2-1:1.0: device disconnected
[  777.810543][T15439] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  778.084132][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.481980][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.534388][T15453] dlm: no locking on control device
[  778.535849][T15450] bridge3: entered promiscuous mode
[  778.535869][T15450] bridge3: entered allmulticast mode
[  778.658374][T15454] netlink: 'syz.4.2363': attribute type 1 has an invalid length.
[  778.663024][T15450] binder: 15449:15450 ioctl 8100587e 200000000880 returned -22
[  778.709950][T15453] xt_CT: No such helper "netbios-ns"
[  778.808608][T15450] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2362'.
[  778.828793][T15454] bond4: entered promiscuous mode
[  778.845338][T15454] 8021q: adding VLAN 0 to HW filter on device bond4
[  779.121848][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.231763][ T5618] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  779.362377][ T5618] usb 6-1: device descriptor read/64, error -71
[  779.461931][T15338] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  779.603495][ T5618] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  779.631711][T15338] usb 5-1: Using ep0 maxpacket: 32
[  779.634949][T15338] usb 5-1: unable to get BOS descriptor or descriptor too short
[  779.635004][T15338] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[  779.637085][T15338] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 245, changing to 7
[  779.641377][T15338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.641398][T15338] usb 5-1: Product: syz
[  779.641410][T15338] usb 5-1: Manufacturer: syz
[  779.641421][T15338] usb 5-1: SerialNumber: syz
[  779.731906][ T5618] usb 6-1: device descriptor read/64, error -71
[  779.765925][T15475] ALSA: mixer_oss: invalid OSS volume 'gre0'
[  779.842096][ T5618] usb usb6-port1: attempt power cycle
[  780.002381][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.010383][T15467] netlink: 'syz.4.2367': attribute type 2 has an invalid length.
[  780.143212][T15338] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  780.164919][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.165208][T15338] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71
[  780.189521][ T5618] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  780.190757][T15338] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71
[  780.209397][ T5618] usb 6-1: device descriptor read/8, error -71
[  780.231082][T15338] usb 5-1: USB disconnect, device number 39
[  780.443321][ T5618] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  780.457481][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  780.468129][ T5618] usb 6-1: device descriptor read/8, error -71
[  780.572489][ T5618] usb usb6-port1: unable to enumerate USB device
[  780.612955][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  780.614003][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.614054][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  780.614070][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  780.614087][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  780.614117][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.125294][ T5618] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  781.182907][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.184254][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.186844][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.188262][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.210579][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.292439][ T5618] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  781.295488][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.295509][ T5618] usb 5-1: Product: syz
[  781.295521][ T5618] usb 5-1: Manufacturer: syz
[  781.295532][ T5618] usb 5-1: SerialNumber: syz
[  781.333665][ T5618] ums-karma 5-1:1.0: USB Mass Storage device detected
[  781.341193][ T5618] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  781.341193][ T5618]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  781.512765][T15490] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  781.522531][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.741963][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.746502][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.776988][  T123] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  781.817834][ T5618] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5
[  781.833085][ T5618] usb 5-1: USB disconnect, device number 40
[  781.911716][  T123] usb 2-1: device descriptor read/64, error -71
[  782.076684][T15502] IPv6: NLM_F_CREATE should be specified when creating new route
[  782.151612][  T123] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  782.254578][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.301663][  T123] usb 2-1: device descriptor read/64, error -71
[  782.413574][  T123] usb usb2-port1: attempt power cycle
[  782.511415][T15511] ALSA: mixer_oss: invalid OSS volume '
c0�'
[  782.687854][T15515] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5637] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[15515]
[  782.733976][   T31] audit: type=1326 audit(1790997553.703:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.2.2381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f292479e159 code=0x0
[  782.781703][  T123] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  782.805323][  T123] usb 2-1: device descriptor read/8, error -71
[  782.910793][T15517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2382'.
[  783.061714][  T123] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  783.094280][  T123] usb 2-1: device descriptor read/8, error -71
[  783.175379][T15338] usb 1-1: USB disconnect, device number 58
[  783.203983][  T123] usb usb2-port1: unable to enumerate USB device
[  783.282326][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.289227][T15521] x_tables: unsorted underflow at hook 2
[  783.409932][T15525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3333159381 (13332637524 ns) > initial count (1750453420 ns). Using initial count to start timer.
[  783.449860][T15525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  784.323050][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.563065][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.582519][    T9] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  784.744814][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  784.744868][    T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  784.746020][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  784.746039][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  784.748211][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.748238][    T9] usb 6-1: Product: syz
[  784.748254][    T9] usb 6-1: Manufacturer: syz
[  784.748276][    T9] usb 6-1: SerialNumber: syz
[  784.820966][    T9] usb 6-1: selecting invalid altsetting 1
[  784.828892][    T9] usb 6-1: unit 6 not found!
[  784.844205][T15543] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [7c!=40, 4,40]
[  785.047183][T15549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2393'.
[  785.196361][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  785.223468][T15550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  785.349202][T15553] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  785.352510][T15553] bond6: entered allmulticast mode
[  785.372132][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.581650][T15338] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  785.674891][T15561] ALSA: mixer_oss: invalid OSS volume 'syz_t'
[  785.711807][T15338] usb 1-1: device descriptor read/64, error -71
[  785.961778][T15338] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  786.113096][T15338] usb 1-1: device descriptor read/64, error -71
[  786.173229][    T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  786.197169][    T9] usb 6-1: USB disconnect, device number 85
[  786.233114][T15338] usb usb1-port1: attempt power cycle
[  786.290045][T15101] udevd[15101]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  786.402937][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.484302][T15564] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  786.528168][T15564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.528520][T15564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.594643][T15338] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  786.619271][T15338] usb 1-1: device descriptor read/8, error -71
[  786.812592][  T123] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  786.852489][T15338] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  786.873095][T15338] usb 1-1: device descriptor read/8, error -71
[  786.965774][  T123] usb 6-1: Using ep0 maxpacket: 32
[  786.969176][  T123] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  786.972413][  T123] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  786.972481][  T123] usb 6-1: config 0 has no interface number 0
[  786.972595][  T123] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  786.983137][T15338] usb usb1-port1: unable to enumerate USB device
[  787.022904][  T123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.022928][  T123] usb 6-1: Product: syz
[  787.022939][  T123] usb 6-1: Manufacturer: syz
[  787.022951][  T123] usb 6-1: SerialNumber: syz
[  787.029418][  T123] usb 6-1: config 0 descriptor??
[  787.031057][T15566] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  787.245668][T15566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.246229][T15566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.247974][T15566] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  787.441935][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.462861][  T123] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  787.463098][  T123] asix 6-1:0.188: probe with driver asix failed with error -71
[  787.500846][  T123] usb 6-1: USB disconnect, device number 86
[  787.601889][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.023718][T15580] tipc: Resetting bearer <eth:syzkaller0>
[  788.025984][ T6911] bridge0: port 4(syzkaller0) entered blocking state
[  788.026227][ T6911] bridge0: port 4(syzkaller0) entered listening state
[  788.087705][T15580] �����#: renamed from vlan0 (while UP)
[  788.164490][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2404'.
[  788.165745][T15582] bridge0: port 4(veth0) entered blocking state
[  788.166010][T15582] bridge0: port 4(veth0) entered disabled state
[  788.166201][T15582] veth0: entered allmulticast mode
[  788.168321][T15582] veth0: entered promiscuous mode
[  788.169202][T15582] bridge0: port 4(veth0) entered blocking state
[  788.169344][T15582] bridge0: port 4(veth0) entered forwarding state
[  788.199133][T15578] tipc: Resetting bearer <eth:syzkaller0>
[  788.482988][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.508082][T15595] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  788.650279][T15596] veth1_to_bond: entered promiscuous mode
[  788.693416][T15596] veth1_to_bond: entered allmulticast mode
[  788.712031][T14755] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  788.873136][T14755] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  788.874571][T14755] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  788.874626][T14755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.009545][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'.
[  789.128481][T15610] ALSA: mixer_oss: invalid OSS volume 'bridg'
[  789.265091][T14755] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[  789.271031][T14755] wwan wwan0: port wwan0qmi0 attached
[  789.283987][   T12] bridge0: port 4(syzkaller0) entered disabled state
[  789.284390][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  789.425607][T15594] veth1_to_bond: left allmulticast mode
[  789.437939][T15594] veth1_to_bond: left promiscuous mode
[  789.548415][T14755] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 76:99:1d:78:dd:65
[  789.576033][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.598431][T14755] usb 2-1: USB disconnect, device number 46
[  789.613768][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.633284][T14755] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[  789.723819][T15614] loop5: detected capacity change from 0 to 7
[  789.727157][T15614] Dev loop5: unable to read RDB block 7
[  789.727218][T15614]  loop5: unable to read partition table
[  789.727469][T15614] loop5: partition table beyond EOD, truncated
[  789.727672][T15614] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  789.834743][T14755] wwan wwan0: port wwan0qmi0 disconnected
[  790.241650][  T123] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  790.266269][T15621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2415'.
[  790.391983][  T123] usb 5-1: Using ep0 maxpacket: 16
[  790.395709][  T123] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  790.400901][  T123] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  790.400936][  T123] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  790.456740][  T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.456763][  T123] usb 5-1: Product: syz
[  790.456775][  T123] usb 5-1: Manufacturer: syz
[  790.456786][  T123] usb 5-1: SerialNumber: syz
[  790.506729][  T123] usb 5-1: 0:2 : does not exist
[  790.642831][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.643060][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.775155][T15629] netlink: 'syz.0.2418': attribute type 1 has an invalid length.
[  791.021713][T15629] 8021q: adding VLAN 0 to HW filter on device bond7
[  791.734041][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.767601][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.783666][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  791.954421][T15642] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  791.954475][T15642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.292512][  T123] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  792.302909][T14755] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  792.416919][  T123] usb 5-1: USB disconnect, device number 41
[  792.456578][T14755] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  792.458021][T14755] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  792.458050][T14755] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  792.495362][T14755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.495395][T14755] usb 1-1: Product: syz
[  792.495412][T14755] usb 1-1: Manufacturer: syz
[  792.495429][T14755] usb 1-1: SerialNumber: syz
[  792.551654][   T30] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  792.592202][T15101] udevd[15101]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  792.702288][   T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  792.704805][   T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  792.704842][   T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  792.704866][   T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  792.704911][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.746187][   T30] usb 6-1: config 0 descriptor??
[  792.755756][T14755] usb 1-1: Limiting number of CPorts to U8_MAX
[  792.802054][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.960533][    C0] usb 1-1: short aprc response received
[  793.276018][   T30] usbhid 6-1:0.0: can't add hid device: -71
[  793.276157][   T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  793.309740][   T30] usb 6-1: USB disconnect, device number 87
[  793.357552][T14755] usb 1-1: failed to set cport flags for port 0
[  793.358208][T14755] greybus greybus1: 0/0:0: failed to enable host cport: -71
[  793.480937][T14755] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71
[  793.532050][T14755] usb 1-1: USB disconnect, device number 63
[  793.683851][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.851793][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.114813][  T123] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  794.262442][  T123] usb 2-1: Using ep0 maxpacket: 8
[  794.263294][  T123] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  794.264795][  T123] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  794.264825][  T123] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  794.264885][  T123] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  794.264915][  T123] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  794.264944][  T123] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  794.264972][  T123] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  794.265020][  T123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.528983][  T123] usb 2-1: GET_CAPABILITIES returned 0
[  794.529044][  T123] usbtmc 2-1:16.0: can't read capabilities
[  794.579185][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'.
[  794.756816][T15670] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2428'.
[  794.875971][  T123] usb 2-1: USB disconnect, device number 47
[  794.889502][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.225311][T14755] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  795.383465][T14755] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  795.388758][T14755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.388799][T14755] usb 6-1: Product: syz
[  795.388827][T14755] usb 6-1: Manufacturer: syz
[  795.388852][T14755] usb 6-1: SerialNumber: syz
[  795.399348][T14755] usb 6-1: config 0 descriptor??
[  795.419538][T14755] ch341 6-1:0.0: ch341-uart converter detected
[  795.856394][T14755] usb 6-1: failed to send control message: -71
[  795.856463][T14755] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  795.906175][T14755] usb 6-1: USB disconnect, device number 88
[  795.922373][T14755] ch341 6-1:0.0: device disconnected
[  795.929332][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.723937][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.871863][T15691] nvme_fabrics: unknown parameter or missing value '����' in ctrl creation request
[  796.983464][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.001947][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.047438][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.202212][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.802463][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.993701][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'.
[  800.082656][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.138108][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.166423][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.613874][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'.
[  802.618705][T15699] 
: renamed from bond_slave_0
[  802.868136][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.869189][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.894753][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.955114][T15721] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  802.955148][T15721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  802.957144][T15721] vhci_hcd vhci_hcd.0: Device attached
[  803.020637][T15721] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.053957][T15725] sg_write: data in/out 962048/136 bytes for SCSI command 0x0-- guessing data in;
[  803.053957][T15725]    program syz.4.2439 not setting count and/or reply_len properly
[  803.090592][   T31] audit: type=1326 audit(1790997574.053:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.122100][   T31] audit: type=1326 audit(1790997574.093:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.122380][   T31] audit: type=1326 audit(1790997574.093:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.122600][   T31] audit: type=1326 audit(1790997574.093:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.122941][T15729] vivid-000: =================  START STATUS  =================
[  803.123063][T15729] vivid-000: Test Pattern: 75% Colorbar
[  803.123090][T15729] vivid-000: Fill Percentage of Frame: 6
[  803.123113][T15729] vivid-000: Horizontal Movement: No Movement
[  803.123136][T15729] vivid-000: Vertical Movement: Move Down Slow
[  803.123158][T15729] vivid-000: OSD Text Mode: All
[  803.123184][T15729] vivid-000: Show Border: false
[  803.123205][T15729] vivid-000: Show Square: false
[  803.123226][T15729] vivid-000: Sensor Flipped Horizontally: false
[  803.123248][T15729] vivid-000: Sensor Flipped Vertically: false
[  803.123270][T15729] vivid-000: Insert SAV Code in Image: false
[  803.123291][T15729] vivid-000: Insert EAV Code in Image: false
[  803.123312][T15729] vivid-000: Insert Video Guard Band: false
[  803.123334][T15729] vivid-000: Reduced Framerate: false
[  803.123355][T15729] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  803.123377][T15729] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  803.123400][T15729] vivid-000: Enable Capture Cropping: 
[  803.123657][   T31] audit: type=1326 audit(1790997574.093:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.124123][   T31] audit: type=1326 audit(1790997574.093:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.126295][   T31] audit: type=1326 audit(1790997574.093:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.128568][   T31] audit: type=1326 audit(1790997574.093:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.128622][   T31] audit: type=1326 audit(1790997574.093:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.128667][   T31] audit: type=1326 audit(1790997574.093:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.0.2441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7ffc0000
[  803.128753][T15729] true
[  803.128771][T15729] vivid-000: Enable Capture Composing: true
[  803.128795][T15729] vivid-000: Enable Capture Scaler: true
[  803.128817][T15729] vivid-000: Timestamp Source: End of Frame
[  803.128840][T15729] vivid-000: Colorspace: SMPTE 170M
[  803.128861][T15729] vivid-000: Transfer Function: Default
[  803.128883][T15729] vivid-000: Y'CbCr Encoding: Default
[  803.128903][T15729] vivid-000: HSV Encoding: Hue 0-179
[  803.128923][T15729] vivid-000: Quantization: Default
[  803.128948][T15729] vivid-000: Apply Alpha To Red Only: false
[  803.128968][T15729] vivid-000: Standard Aspect Ratio: 4x3
[  803.128989][T15729] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  803.129015][T15729] vivid-000: DV Timings: 640x480p59 inactive
[  803.129040][T15729] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  803.129063][T15729] vivid-000: Maximum EDID Blocks: 2
[  803.129084][T15729] vivid-000: Limited RGB Range (16-235): true
[  803.129104][T15729] vivid-000: Rx RGB Quantization Range: Automatic
[  803.129124][T15729] vivid-000: Power Present: 0x00000001
[  803.129146][T15729] tpg source WxH: 720x576 (R'G'B)
[  803.129159][T15729] tpg field: 4
[  803.129168][T15729] tpg crop: (0,0)/720x576
[  803.129183][T15729] tpg compose: (0,0)/720x576
[  803.129197][T15729] tpg colorspace: 1
[  803.129206][T15729] tpg transfer function: 0/2
[  803.129217][T15729] tpg quantization: 0/2
[  803.129227][T15729] tpg RGB range: 0/1
[  803.129237][T15729] vivid-000: ==================  END STATUS  ==================
[  803.212810][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.219797][ T5716] usb 33-1: new low-speed USB device number 6 using vhci_hcd
[  803.566586][  T123] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  803.731260][  T123] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  803.754389][  T123] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  803.754428][  T123] usb 1-1: config 0 interface 0 has no altsetting 0
[  803.754466][  T123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.790768][T15721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  803.800962][  T123] usb 1-1: config 0 descriptor??
[  803.828405][T15726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  803.978741][T15737] syzkaller0: entered promiscuous mode
[  803.978798][T15737] syzkaller0: entered allmulticast mode
[  804.244027][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.354960][T15747] CUSE: unknown device info "n��|�zQC*�"
[  804.354976][T15747] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  804.354987][T15747] CUSE: unknown device info "����"
[  804.354995][T15747] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  804.355005][T15747] CUSE: DEVNAME unspecified
[  804.460284][  T123] waterforce 0003:1044:7A4D.002E: unexpected long global item
[  804.460818][  T123] waterforce 0003:1044:7A4D.002E: hid parse failed with -22
[  804.460900][  T123] waterforce 0003:1044:7A4D.002E: probe with driver waterforce failed with error -22
[  804.535211][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2444'.
[  804.728825][    T9] usb 1-1: USB disconnect, device number 64
[  804.760496][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'.
[  804.774142][T15723] vhci_hcd: connection reset by peer
[  804.778405][ T6911] vhci_hcd vhci_hcd.0: stop threads
[  804.778516][ T6911] vhci_hcd vhci_hcd.0: release socket
[  804.778678][ T6911] vhci_hcd vhci_hcd.0: disconnect device
[  805.278804][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2450'.
[  805.278804][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2450'.
[  805.282625][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.382144][T15775] kvm: requested 124876 ns i8254 timer period limited to 200000 ns
[  805.382317][T15775] kvm: requested 168457 ns i8254 timer period limited to 200000 ns
[  805.466651][T15777] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.469531][T15777] 8021q: adding VLAN 0 to HW filter on device team0
[  805.501196][T15777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  805.641669][T15777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  805.641699][T15777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  805.651851][T15338] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  805.690507][T15777] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  805.692088][T14755] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  805.757680][T15789] xt_NFQUEUE: number of queues (65535) out of range (got 98302)
[  805.801729][T15338] usb 6-1: Using ep0 maxpacket: 32
[  805.804733][T15338] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  805.806121][T15338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.809295][T15338] usb 6-1: config 0 descriptor??
[  805.811906][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  805.836301][T15338] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  805.862422][T14755] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  805.863478][T14755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.863513][T14755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.864565][T14755] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  805.864591][T14755] usb 2-1: Manufacturer: syz
[  805.895151][T14755] usb 2-1: config 0 descriptor??
[  805.933994][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.982838][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  805.982882][    T9] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  805.986098][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  805.986157][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  805.986187][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  805.989341][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  805.989426][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  805.989458][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.070372][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.070475][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.070510][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.112811][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.112906][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.112940][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.116464][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.116558][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.116593][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.119376][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.119475][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.119511][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.159371][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.159417][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.159448][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.241256][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.241339][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  806.241370][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  806.292198][    T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  806.292284][    T9] usb 5-1: Product: syz
[  806.292301][    T9] usb 5-1: Manufacturer: syz
[  806.292318][    T9] usb 5-1: SerialNumber: syz
[  806.300030][    T9] usb 5-1: config 0 descriptor??
[  806.337051][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.357864][    T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  806.526962][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'.
[  806.600351][    C0] usb 5-1: yurex_control_callback - control failed: -71
[  806.610960][ T5707] usb 5-1: USB disconnect, device number 42
[  806.621840][ T5707] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  807.290810][T15338] gspca_vc032x: reg_r err -32
[  807.290843][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290857][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290872][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290882][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290892][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290902][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290917][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290925][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290932][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290940][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290947][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290955][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290962][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290982][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.290993][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.291005][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.291016][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.291027][T15338] gspca_vc032x: I2c Bus Busy Wait 00
[  807.291037][T15338] gspca_vc032x: Unknown sensor...
[  807.291108][T15338] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  807.362594][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.434581][T14755] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #100: -71
[  807.434659][T14755] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71
[  807.434684][T14755] uclogic 0003:256C:006D.002F: failed probing pen v1 parameters: -71
[  807.434749][T14755] uclogic 0003:256C:006D.002F: failed probing parameters: -71
[  807.434919][T14755] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71
[  807.494989][T14755] usb 2-1: USB disconnect, device number 48
[  808.312008][ T5716] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  808.402151][  T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.457513][  T123] usb 6-1: USB disconnect, device number 90
[  808.710557][   T31] kauditd_printk_skb: 105 callbacks suppressed
[  808.710578][   T31] audit: type=1326 audit(1790997579.673:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.0.2458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7fc00000
[  808.710731][   T31] audit: type=1326 audit(1790997579.673:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.0.2458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ae79e159 code=0x7fc00000
[  808.803024][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.810221][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.810289][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  808.811283][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.968462][T14755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.033120][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.033411][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.033647][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.033868][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.034271][T15853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.091073][T15855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2466'.
[  809.121726][T15338] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  809.121808][    T9] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[  809.272456][T15338] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  809.275190][T15338] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  809.275229][T15338] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  809.275250][T15338] usb 5-1: config 0 interface 0 has no altsetting 0
[  809.278757][T15338] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  809.278791][T15338] usb 5-1: Product: syz
[  809.278808][T15338] usb 5-1: Manufacturer: syz
[  809.278827][T15338] usb 5-1: SerialNumber: syz
[  809.299025][T15338] usb 5-1: config 0 descriptor??
[  809.305007][T15845] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  809.317544][    T9] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.04
[  809.322276][   T30] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  809.355204][    T9] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  809.355236][    T9] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  809.355263][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  809.355301][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.425368][    T9] usb 6-1: config 0 descriptor??
[  809.429043][T15338] usb 5-1: selecting invalid altsetting 0
[  809.502004][   T30] usb 2-1: Using ep0 maxpacket: 16
[  809.507443][   T30] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  809.524140][   T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.524203][   T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  809.534044][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  809.534137][   T30] usb 2-1: SerialNumber: syz
[  809.777304][   T30] usb 2-1: 0:2 : does not exist
[  809.813682][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  809.816718][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  809.818009][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  809.819832][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  809.823921][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  809.870639][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  809.870752][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  809.888766][    T9] usb 6-1: USB disconnect, device number 91
[  809.906694][   T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  809.958556][   T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  810.146744][   T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  810.271949][T15868] ------------[ cut here ]------------
[  810.271969][T15868] r == 0 || r == -EIO
[  810.271986][T15868] WARNING: arch/x86/kvm/../../../virt/kvm/kvm_main.c:4389 at kvm_vcpu_pre_fault_memory+0x45d/0x470, CPU#0: syz.2.2468/15868
[  810.297567][T15868] Modules linked in:
[  810.301598][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.2.2468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.313142][T15868] Tainted: [L]=SOFTLOCKUP
[  810.317489][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  810.328122][T15868] RIP: 0010:kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.335185][T15868] Code: fe ff ff e8 85 2e 88 00 90 0f 0b 90 e9 0d ff ff ff e8 77 2e 88 00 e8 42 85 f3 ff eb 8f e8 6b 2e 88 00 eb 05 e8 64 2e 88 00 90 <0f> 0b 90 e9 a7 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[  810.357048][T15868] RSP: 0018:ffffc900069b7c28 EFLAGS: 00010287
[  810.364945][T15868] RAX: ffffffff813fe025 RBX: ffffc900069b7e00 RCX: 0000000000080000
[  810.376563][T15868] RDX: ffffc90011181000 RSI: 00000000000003a5 RDI: 00000000000003a6
[  810.385792][T15868] RBP: dffffc0000000000 R08: ffff888077715dc0 R09: 0000000000000002
[  810.393936][T15868] R10: fffffffffffffffb R11: 0000000000000002 R12: ffffc900069b7e00
[  810.398823][   T30] usb 2-1: USB disconnect, device number 49
[  810.408092][T15868] R13: ffff888077715dc0 R14: 1ffff1100eee2bb8 R15: fffffffffffffffb
[  810.416518][T15868] FS:  00007f29256356c0(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000
[  810.425594][T15868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  810.432399][T15868] CR2: 00007ffe5cc44ebf CR3: 00000000222b8000 CR4: 00000000003526f0
[  810.440431][T15868] DR0: 0000000000000000 DR1: 0000000000000007 DR2: 0000000000000004
[  810.448954][T15868] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  810.457175][T15868] Call Trace:
[  810.460953][T15868]  <TASK>
[  810.463990][T15868]  ? kvm_vcpu_pre_fault_memory+0x15f/0x470
[  810.470394][T15868]  kvm_vcpu_ioctl+0x8a6/0xfd0
[  810.475881][T15868]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  810.481122][T15868]  ? hook_file_ioctl+0x1f2/0x600
[  810.486198][T15868]  ? __fget_files+0x2a/0x420
[  810.490849][T15868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  810.495894][T15868]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  810.501129][T15868]  __se_sys_ioctl+0xfc/0x170
[  810.506888][T15868]  do_syscall_64+0x166/0x520
[  810.511605][T15868]  ? trace_irq_disable+0x3b/0x140
[  810.518272][T15868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.525551][T15868]  ? clear_bhb_loop+0x70/0xc0
[  810.531409][T15868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.537904][T15868] RIP: 0033:0x7f292479e159
[  810.542639][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.563621][T15868] RSP: 002b:00007f2925635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  810.573757][T15868] RAX: ffffffffffffffda RBX: 00007f2924a26180 RCX: 00007f292479e159
[  810.581981][T15868] RDX: 0000200000000100 RSI: 00000000c040aed5 RDI: 0000000000000005
[  810.590509][T15868] RBP: 00007f292483506b R08: 0000000000000000 R09: 0000000000000000
[  810.599453][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  810.609403][T15868] R13: 00007f2924a26218 R14: 00007f2924a26180 R15: 00007f2924b4fa48
[  810.618060][T15868]  </TASK>
[  810.621147][T15868] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  810.628490][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.2.2468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.639486][T15868] Tainted: [L]=SOFTLOCKUP
[  810.644076][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  810.654437][T15868] Call Trace:
[  810.657771][T15868]  <TASK>
[  810.660903][T15868]  vpanic+0x56d/0xa60
[  810.664925][T15868]  ? __pfx__printk+0x10/0x10
[  810.669548][T15868]  ? __pfx_vpanic+0x10/0x10
[  810.674165][T15868]  ? is_bpf_text_address+0x292/0x2b0
[  810.679494][T15868]  ? is_bpf_text_address+0x26/0x2b0
[  810.684733][T15868]  panic+0xc5/0xd0
[  810.688495][T15868]  ? __pfx_panic+0x10/0x10
[  810.692960][T15868]  __warn+0x315/0x4c0
[  810.697365][T15868]  ? kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.703632][T15868]  ? kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.709689][T15868]  __report_bug+0x276/0x570
[  810.714363][T15868]  ? kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.720366][T15868]  ? __pfx___report_bug+0x10/0x10
[  810.726274][T15868]  ? __lock_acquire+0x747/0x2de0
[  810.731346][T15868]  ? kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.737243][T15868]  report_bug+0x16b/0x220
[  810.741642][T15868]  ? kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.747565][T15868]  ? kvm_vcpu_pre_fault_memory+0x45f/0x470
[  810.753524][T15868]  handle_bug+0x9c/0x200
[  810.758431][T15868]  exc_invalid_op+0x1a/0x50
[  810.763327][T15868]  asm_exc_invalid_op+0x1a/0x20
[  810.768440][T15868] RIP: 0010:kvm_vcpu_pre_fault_memory+0x45d/0x470
[  810.775518][T15868] Code: fe ff ff e8 85 2e 88 00 90 0f 0b 90 e9 0d ff ff ff e8 77 2e 88 00 e8 42 85 f3 ff eb 8f e8 6b 2e 88 00 eb 05 e8 64 2e 88 00 90 <0f> 0b 90 e9 a7 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[  810.795242][T15868] RSP: 0018:ffffc900069b7c28 EFLAGS: 00010287
[  810.801452][T15868] RAX: ffffffff813fe025 RBX: ffffc900069b7e00 RCX: 0000000000080000
[  810.809562][T15868] RDX: ffffc90011181000 RSI: 00000000000003a5 RDI: 00000000000003a6
[  810.817814][T15868] RBP: dffffc0000000000 R08: ffff888077715dc0 R09: 0000000000000002
[  810.826323][T15868] R10: fffffffffffffffb R11: 0000000000000002 R12: ffffc900069b7e00
[  810.835854][T15868] R13: ffff888077715dc0 R14: 1ffff1100eee2bb8 R15: fffffffffffffffb
[  810.845757][T15868]  ? kvm_vcpu_pre_fault_memory+0x455/0x470
[  810.852310][T15868]  ? kvm_vcpu_pre_fault_memory+0x455/0x470
[  810.858525][T15868]  ? kvm_vcpu_pre_fault_memory+0x15f/0x470
[  810.864613][T15868]  kvm_vcpu_ioctl+0x8a6/0xfd0
[  810.869447][T15868]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  810.874750][T15868]  ? hook_file_ioctl+0x1f2/0x600
[  810.879837][T15868]  ? __fget_files+0x2a/0x420
[  810.884472][T15868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  810.890600][T15868]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  810.897175][T15868]  __se_sys_ioctl+0xfc/0x170
[  810.901858][T15868]  do_syscall_64+0x166/0x520
[  810.906571][T15868]  ? trace_irq_disable+0x3b/0x140
[  810.912100][T15868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.918488][T15868]  ? clear_bhb_loop+0x70/0xc0
[  810.923301][T15868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.929820][T15868] RIP: 0033:0x7f292479e159
[  810.934858][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.954611][T15868] RSP: 002b:00007f2925635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  810.964897][T15868] RAX: ffffffffffffffda RBX: 00007f2924a26180 RCX: 00007f292479e159
[  810.974070][T15868] RDX: 0000200000000100 RSI: 00000000c040aed5 RDI: 0000000000000005
[  810.983137][T15868] RBP: 00007f292483506b R08: 0000000000000000 R09: 0000000000000000
[  810.992382][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  811.000410][T15868] R13: 00007f2924a26218 R14: 00007f2924a26180 R15: 00007f2924b4fa48
[  811.009125][T15868]  </TASK>
[  811.014039][T15868] Kernel Offset: disabled
[  811.019824][T15868] Rebooting in 86400 seconds..