last executing test programs: 5.189802299s ago: executing program 1 (id=320): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 5.013757373s ago: executing program 1 (id=323): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x11, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x40050) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xa3, 0x0, {0x5, 0x4, 0x1, 0x3, 0x10, 0x64, 0x3, 0x84, 0x1d, 0x8001, @rand_addr=0x64010100, @multicast1}}}}}}, 0x0) 4.86799308s ago: executing program 3 (id=325): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) 3.760650101s ago: executing program 2 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x4080) 3.482371237s ago: executing program 2 (id=330): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.166409545s ago: executing program 1 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c100714"], 0xf) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trrm'], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x9, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0xf, 0x3e, 0x3, '\x00', 0x8e}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x40, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x6, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x6, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x8}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x6f, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) creat(&(0x7f0000000180)='./file0\x00', 0x204) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r6, &(0x7f0000000000)="852102458b3e284a7a7fcb520cc2944b03c24ae22f201ef1756af5c44511536766095c9fc73c2f58a23cf0dfec6209fc0c626527f25074a206c27cb2fd79fa0e5bcf235fdd25c91da2c919dde3cf812cebedf2897ba47c14f0e7ed5c7dc32c7d5871221a4293a6d0e7353225", 0x6c, 0x77c25076c4f5990b, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) 3.064104704s ago: executing program 3 (id=336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb86050", 0x11}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2.832407227s ago: executing program 2 (id=339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {0x0}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 2.65101708s ago: executing program 1 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x4080) 2.613873886s ago: executing program 3 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2.455784387s ago: executing program 3 (id=343): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40010000, 0x1}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 2.395862438s ago: executing program 1 (id=345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 2.338794224s ago: executing program 0 (id=346): ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x3, 0x40000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) 2.250086403s ago: executing program 1 (id=348): r0 = eventfd2(0x9, 0x80001) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$eventfd(r0, &(0x7f0000000400)=0x8, 0x8) 1.324342771s ago: executing program 0 (id=349): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) 1.307925222s ago: executing program 2 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c100714"], 0xf) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trrm'], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x9, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0xf, 0x3e, 0x3, '\x00', 0x8e}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x40, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x6, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x6, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x8}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x6f, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) creat(&(0x7f0000000180)='./file0\x00', 0x204) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r6, &(0x7f0000000000)="852102458b3e284a7a7fcb520cc2944b03c24ae22f201ef1756af5c44511536766095c9fc73c2f58a23cf0dfec6209fc0c626527f25074a206c27cb2fd79fa0e5bcf235fdd25c91da2c919dde3cf812cebedf2897ba47c14f0e7ed5c7dc32c7d5871221a4293a6d0e7353225", 0x6c, 0x77c25076c4f5990b, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) 1.220272574s ago: executing program 3 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb86050", 0x11}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1.175380942s ago: executing program 0 (id=352): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x110000, 0x8}) 1.037616587s ago: executing program 0 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)}, {&(0x7f0000000600)}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9", 0x62}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c", 0xb1}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d2900d1d916b3c", 0x56}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5", 0x55}, {0x0}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4afcf590616c92c6de993cbafa1a807e0aec7041984a7f5fa2427ca65c438e1d1cf9bb58e0c1", 0x90}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1", 0x75}], 0x9, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 942.082487ms ago: executing program 0 (id=356): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d1", 0xa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7ffffffffffffffd, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 835.00459ms ago: executing program 0 (id=358): r0 = socket$inet6(0xa, 0x803, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x84}, 0x8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a3100000000140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r5, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000a9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) socket$inet(0x2, 0x2, 0x1) 763.593821ms ago: executing program 2 (id=359): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x240, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd, 0x4012011, r0, 0x0) 554.504428ms ago: executing program 3 (id=361): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x134, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x122, 0x3, 0x1, 0x1, 0x80, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x71, 0x3}, [@mixer_unit={0x9, 0x24, 0x5, 0x4, 0x1f, "245edeef"}, @processing_unit={0x1d, 0x24, 0x9, 0x4, 0x3, [0x1, 0x3, 0x3, 0x1, 0x3, 0x0]}, @feature_unit={0xd, 0x24, 0x7, 0x4, 0x4, [0xff, 0xe]}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x403, 0x5, 0x2, 0xa, 0x5, 0x8, 0x1ff, 0x3}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x5, [0xc, 0x0, 0x9, 0x5]}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x9, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8da, 0x7, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x4, 0x1, {0xa, 0x25, 0x25, 0x7f, 0xe, 0xa25d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0x9, 0x9, 0x3, 0x1, 0x1, 0x7, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x98, 0x0, 0x18, 0x7f, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1c6, 0x100, 0x5a, "3b4894"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x484e, 0x9, 0x2, 0x0, 0x45, 0x8, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x4, 0xf, {0xa, 0x25, 0x25, 0x100, 0x1, 0xd7}}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x4, 0x6, 0x8, 0x9}, 0x23, &(0x7f0000000500)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "30585f9bbd21c41f4a58b78df1887e10"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x7, 0x8}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x458}}, {0xc0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}, {0x8b, &(0x7f00000006c0)=ANY=[@ANYBLOB="8b03de3797e8b18e4927833e4938a4d7e39f1c7eddc696adc1e4fb8e3c4c1867c6670d7d48fb144e5321d45eac23d1ec90e9bdebc83423fb02c880c29432fb7ff8854c55003754f59876c3f811c11af378c156fd8e398e38dedc9a91a242ae4baa5f4b9458ce048a94acf474d911b38132336c6e1e1d5450c1cfb5a03f128e932c"]}]}) 489.651834ms ago: executing program 2 (id=362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {0x0}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 168.952858ms ago: executing program 4 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 138.995905ms ago: executing program 4 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x5c}}, 0x0) 68.224024ms ago: executing program 4 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x3}], 0x1, 0x20040885) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b80)=""/80, 0x50}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000c00)=""/234, 0xea}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/104, 0x68}, {&(0x7f00000009c0)=""/231, 0xe7}], 0x9}, 0x0) 67.894325ms ago: executing program 4 (id=368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000027c0)="e560", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000580)="04f2", 0x2}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="030006"], 0x14) 38.565465ms ago: executing program 4 (id=369): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xf4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 4 (id=370): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x11, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x40050) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xa3, 0x0, {0x5, 0x4, 0x1, 0x3, 0x10, 0x64, 0x3, 0x84, 0x1d, 0x8001, @rand_addr=0x64010100, @multicast1}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 72.873677][ T5780] cgroup: Unknown subsys name 'net' [ 73.134060][ T5780] cgroup: Unknown subsys name 'cpuset' [ 73.199847][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.796966][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.979976][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.987937][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.001831][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.003100][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.010178][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.011265][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.015709][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.016902][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.017521][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.017614][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.018244][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.020287][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.020401][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.026806][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.027381][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.028022][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.028027][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.032361][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.032755][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.033180][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.033581][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.036272][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.045125][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.045966][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.092426][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.896986][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 77.917216][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 77.950288][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.963442][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 78.031321][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 78.261437][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.262431][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.262554][ T5793] bridge_slave_0: entered allmulticast mode [ 78.264031][ T5793] bridge_slave_0: entered promiscuous mode [ 78.297279][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.297387][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.297670][ T5794] bridge_slave_0: entered allmulticast mode [ 78.301414][ T5794] bridge_slave_0: entered promiscuous mode [ 78.324657][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.324787][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.324943][ T5793] bridge_slave_1: entered allmulticast mode [ 78.327328][ T5793] bridge_slave_1: entered promiscuous mode [ 78.332227][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.332341][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.332801][ T5792] bridge_slave_0: entered allmulticast mode [ 78.335101][ T5792] bridge_slave_0: entered promiscuous mode [ 78.356115][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.356226][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.356672][ T5794] bridge_slave_1: entered allmulticast mode [ 78.359018][ T5794] bridge_slave_1: entered promiscuous mode [ 78.361993][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.362159][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.362304][ T5797] bridge_slave_0: entered allmulticast mode [ 78.364637][ T5797] bridge_slave_0: entered promiscuous mode [ 78.391615][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.391726][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.391865][ T5792] bridge_slave_1: entered allmulticast mode [ 78.395010][ T5792] bridge_slave_1: entered promiscuous mode [ 78.434106][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.435242][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.435765][ T5797] bridge_slave_1: entered allmulticast mode [ 78.438126][ T5797] bridge_slave_1: entered promiscuous mode [ 78.491029][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.491155][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.491308][ T5796] bridge_slave_0: entered allmulticast mode [ 78.493057][ T5796] bridge_slave_0: entered promiscuous mode [ 78.534949][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.553881][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.554165][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.554959][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.555109][ T5796] bridge_slave_1: entered allmulticast mode [ 78.556459][ T5796] bridge_slave_1: entered promiscuous mode [ 78.578530][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.584238][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.586968][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.628212][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.639958][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.678926][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.706209][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.708522][ T5793] team0: Port device team_slave_0 added [ 78.738176][ T5794] team0: Port device team_slave_0 added [ 78.746992][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.748535][ T5793] team0: Port device team_slave_1 added [ 78.775996][ T5792] team0: Port device team_slave_0 added [ 78.778386][ T5794] team0: Port device team_slave_1 added [ 79.081044][ T5808] Bluetooth: hci1: command tx timeout [ 79.081727][ T5112] Bluetooth: hci0: command tx timeout [ 79.159494][ T5112] Bluetooth: hci4: command tx timeout [ 79.159512][ T5808] Bluetooth: hci2: command tx timeout [ 79.159697][ T5112] Bluetooth: hci3: command tx timeout [ 79.242467][ T5797] team0: Port device team_slave_0 added [ 79.244170][ T5792] team0: Port device team_slave_1 added [ 79.284406][ T5797] team0: Port device team_slave_1 added [ 79.314458][ T5796] team0: Port device team_slave_0 added [ 79.315660][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.315669][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.315682][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.388901][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.388917][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.388938][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.395217][ T5796] team0: Port device team_slave_1 added [ 79.396103][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.396121][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.396174][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.418303][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.418317][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.418340][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.455601][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.455618][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.455641][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.493378][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.493394][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.493416][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.515498][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.515513][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.515535][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.557308][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.557326][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.557350][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.643969][ T5793] hsr_slave_0: entered promiscuous mode [ 79.645394][ T5793] hsr_slave_1: entered promiscuous mode [ 79.657243][ T5794] hsr_slave_0: entered promiscuous mode [ 79.658429][ T5794] hsr_slave_1: entered promiscuous mode [ 79.659842][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 79.659946][ T5794] Cannot create hsr debugfs directory [ 79.694988][ T5797] hsr_slave_0: entered promiscuous mode [ 79.697169][ T5797] hsr_slave_1: entered promiscuous mode [ 79.698050][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 79.698071][ T5797] Cannot create hsr debugfs directory [ 79.777822][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.777839][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.777854][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.854367][ T5796] hsr_slave_0: entered promiscuous mode [ 79.855065][ T5796] hsr_slave_1: entered promiscuous mode [ 79.855605][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 79.855621][ T5796] Cannot create hsr debugfs directory [ 79.857450][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.857463][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.857485][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.411250][ T5792] hsr_slave_0: entered promiscuous mode [ 80.412001][ T5792] hsr_slave_1: entered promiscuous mode [ 80.412563][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 80.412583][ T5792] Cannot create hsr debugfs directory [ 80.825886][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.867135][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.905936][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.000806][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.100354][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.135105][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.170063][ T60] Bluetooth: hci0: command tx timeout [ 81.170099][ T5112] Bluetooth: hci1: command tx timeout [ 81.196743][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.240791][ T60] Bluetooth: hci2: command tx timeout [ 81.240820][ T60] Bluetooth: hci4: command tx timeout [ 81.241056][ T5112] Bluetooth: hci3: command tx timeout [ 81.245074][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.352191][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.387058][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.427200][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.457856][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.575365][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.607151][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.629861][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.655358][ T810] cfg80211: failed to load regulatory.db [ 81.704908][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.813369][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.906714][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.953620][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.992188][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.028060][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.074318][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.121911][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.122794][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.147811][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.165702][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.165850][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.250908][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.286684][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.286827][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.323284][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.328323][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.328472][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.405387][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.432457][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.469983][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.470197][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.524399][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.524661][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.585833][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.625294][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.625416][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.644564][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.684387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.684525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.770248][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.824293][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.832500][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.848596][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.865497][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.865658][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.024194][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.197855][ T5794] veth0_vlan: entered promiscuous mode [ 83.239983][ T5112] Bluetooth: hci1: command tx timeout [ 83.249694][ T5112] Bluetooth: hci0: command tx timeout [ 83.290918][ T5794] veth1_vlan: entered promiscuous mode [ 83.296828][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.339423][ T5112] Bluetooth: hci3: command tx timeout [ 83.339454][ T5112] Bluetooth: hci4: command tx timeout [ 83.339474][ T5112] Bluetooth: hci2: command tx timeout [ 83.529087][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.535853][ T5794] veth0_macvtap: entered promiscuous mode [ 83.566335][ T5794] veth1_macvtap: entered promiscuous mode [ 83.573859][ T5797] veth0_vlan: entered promiscuous mode [ 83.626898][ T5797] veth1_vlan: entered promiscuous mode [ 83.649081][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.680997][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.715133][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.728172][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.737205][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.743883][ T2927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.752387][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.816652][ T5796] veth0_vlan: entered promiscuous mode [ 83.870313][ T5797] veth0_macvtap: entered promiscuous mode [ 83.951641][ T5797] veth1_macvtap: entered promiscuous mode [ 83.954509][ T5796] veth1_vlan: entered promiscuous mode [ 84.001042][ T5793] veth0_vlan: entered promiscuous mode [ 84.055867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.055890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.077558][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.078765][ T5793] veth1_vlan: entered promiscuous mode [ 84.116012][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.155088][ T5792] veth0_vlan: entered promiscuous mode [ 84.171909][ T2927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.171980][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.171994][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.178063][ T2927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187289][ T2927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.216318][ T2927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.217597][ T5796] veth0_macvtap: entered promiscuous mode [ 84.243090][ T5792] veth1_vlan: entered promiscuous mode [ 84.281904][ T5796] veth1_macvtap: entered promiscuous mode [ 84.394304][ T5793] veth0_macvtap: entered promiscuous mode [ 84.503212][ T5793] veth1_macvtap: entered promiscuous mode [ 84.521550][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.583126][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.600028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.600047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.656743][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.673021][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.702065][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708658][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.728674][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.731322][ T5792] veth0_macvtap: entered promiscuous mode [ 84.795427][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.795446][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.804998][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.882948][ T5792] veth1_macvtap: entered promiscuous mode [ 84.986401][ T2927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.002720][ T2927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.030704][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041973][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.229072][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.243204][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.315433][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.319464][ T5808] Bluetooth: hci1: command tx timeout [ 85.320887][ T5808] Bluetooth: hci0: command tx timeout [ 85.402155][ T5808] Bluetooth: hci2: command tx timeout [ 85.402179][ T5112] Bluetooth: hci4: command tx timeout [ 85.402190][ T5808] Bluetooth: hci3: command tx timeout [ 85.433125][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.435448][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.435723][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.435738][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.436295][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.437429][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.576209][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.576227][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.796103][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796121][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.908434][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.908453][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.062060][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.062076][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.249330][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.249350][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.850719][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.078595][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.078621][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.078640][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.666453][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 87.666478][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.666488][ T9] usb 1-1: Product: syz [ 87.666495][ T9] usb 1-1: Manufacturer: syz [ 87.666501][ T9] usb 1-1: SerialNumber: syz [ 88.379257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.419253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.429293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.438138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.018265][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.312494][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 89.315351][ T5968] mmap: syz.1.16 (5968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.402518][ T5964] usb 1-1: USB disconnect, device number 2 [ 89.510917][ T5964] usblp0: removed [ 90.149014][ T5982] sctp: [Deprecated]: syz.1.20 (pid 5982) Use of int in max_burst socket option. [ 90.149014][ T5982] Use struct sctp_assoc_value instead [ 90.619334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.619576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.620867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.625758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.626760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.627761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.527507][ T810] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.749299][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 92.554824][ T810] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 92.554853][ T810] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 92.554870][ T810] usb 3-1: Product: syz [ 92.554882][ T810] usb 3-1: Manufacturer: syz [ 92.554894][ T810] usb 3-1: SerialNumber: syz [ 92.605407][ T810] usb 3-1: config 0 descriptor?? [ 93.090866][ T810] usb 3-1: USB disconnect, device number 2 [ 94.775774][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.289387][ T893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.199734][ T893] usb 1-1: Using ep0 maxpacket: 8 [ 99.160637][ T893] usb 1-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice= 0.40 [ 99.160665][ T893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.160683][ T893] usb 1-1: Product: 㟞躱❉㺃㡉힤鿣縜웝궖軻䰼朘柆納רּ且⅓廔⎬㓈ﬣ젂슀㊔翻藸啌㜀皘섑셸ﵖ㦎㢎醚䊢䮮循鑋치訄겔瓴ᇙ膳㌲湬ᴞ偔쿁ꂵሿ鎎, [ 99.761574][ T893] usb 1-1: can't set config #1, error -71 [ 100.570330][ T893] usb 1-1: USB disconnect, device number 3 [ 100.802735][ T6070] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 101.113416][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.971276][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 102.000396][ T5964] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 102.000423][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 102.000438][ T5964] usb 4-1: Product: syz [ 102.000449][ T5964] usb 4-1: Manufacturer: syz [ 102.000460][ T5964] usb 4-1: SerialNumber: syz [ 102.075002][ T5964] usb 4-1: config 0 descriptor?? [ 102.308228][ T6085] capability: warning: `syz.1.51' uses 32-bit capabilities (legacy support in use) [ 102.321725][ T6085] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.387666][ T5964] usb 4-1: USB disconnect, device number 2 [ 104.303654][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.355494][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.503296][ T9] usb 1-1: device descriptor read/64, error -71 [ 104.779381][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.916785][ T6101] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 104.916801][ T6101] netlink: 760 bytes leftover after parsing attributes in process `syz.4.57'. [ 104.916817][ T6101] netlink: 1 bytes leftover after parsing attributes in process `syz.4.57'. [ 104.930352][ T9] usb 1-1: device descriptor read/64, error -71 [ 105.048272][ T9] usb usb1-port1: attempt power cycle [ 105.713879][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.751031][ T9] usb 1-1: device descriptor read/8, error -71 [ 106.229384][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.429907][ T9] usb 1-1: device descriptor read/8, error -71 [ 106.539722][ T9] usb usb1-port1: unable to enumerate USB device [ 108.950105][ T6115] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 108.950279][ T6115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 109.817757][ T6135] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 109.817777][ T6135] netlink: 760 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.817791][ T6135] netlink: 1 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.953971][ T6137] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.249464][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.419635][ T6146] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 110.496834][ T43] usb 1-1: device descriptor read/64, error -71 [ 110.759332][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.000907][ T43] usb 1-1: device descriptor read/64, error -71 [ 111.880173][ T43] usb usb1-port1: attempt power cycle [ 112.348000][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.413386][ T43] usb 1-1: device descriptor read/8, error -71 [ 112.700199][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.030690][ T43] usb 1-1: device descriptor read/8, error -71 [ 113.033653][ T6161] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 113.140748][ T43] usb usb1-port1: unable to enumerate USB device [ 113.691896][ T6172] overlayfs: failed to resolve './file0': -2 [ 113.697665][ T6173] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 113.697685][ T6173] netlink: 760 bytes leftover after parsing attributes in process `syz.4.81'. [ 113.697698][ T6173] netlink: 1 bytes leftover after parsing attributes in process `syz.4.81'. [ 114.234688][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 114.496904][ T6194] misc userio: No port type given on /dev/userio [ 114.648660][ T6198] misc userio: The device must be registered before sending interrupts [ 114.699593][ T5800] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.023126][ T5800] usb 1-1: Using ep0 maxpacket: 8 [ 115.180798][ T5800] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.180825][ T5800] usb 1-1: config 0 has no interface number 0 [ 115.180864][ T5800] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.180884][ T5800] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 115.180915][ T5800] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.180938][ T5800] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.180975][ T5800] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.180994][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.286476][ T5800] usb 1-1: config 0 descriptor?? [ 116.464939][ T5800] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 116.502591][ T5800] usb 1-1: USB disconnect, device number 12 [ 116.525549][ T5800] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 116.746081][ T6216] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 116.746097][ T6216] netlink: 760 bytes leftover after parsing attributes in process `syz.4.92'. [ 116.746105][ T6216] netlink: 1 bytes leftover after parsing attributes in process `syz.4.92'. [ 117.740589][ T6221] overlayfs: failed to resolve './cgroup': -2 [ 118.123218][ T6231] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 118.242568][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.393390][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 119.307118][ T5889] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.307158][ T5889] usb 3-1: config 0 has no interface number 0 [ 119.346746][ T6240] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 119.357375][ T5889] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.357462][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.357473][ T5889] usb 3-1: Product: syz [ 119.357479][ T5889] usb 3-1: Manufacturer: syz [ 119.357486][ T5889] usb 3-1: SerialNumber: syz [ 119.393580][ T5889] usb 3-1: config 0 descriptor?? [ 119.427494][ T5889] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.458578][ T60] Bluetooth: hci1: unexpected subevent 0x0c length: 32 > 5 [ 119.690367][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.720794][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.755651][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.757733][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.917393][ T5889] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 120.177460][ T5889] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 120.481115][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.484864][ T5889] usb 3-1: USB disconnect, device number 3 [ 120.521920][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.544730][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.545282][ T5889] quatech2 3-1:0.51: device disconnected [ 120.919444][ T36] audit: type=1326 audit(1772725894.234:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.919499][ T36] audit: type=1326 audit(1772725894.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.919533][ T36] audit: type=1326 audit(1772725894.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.919566][ T36] audit: type=1326 audit(1772725894.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967028][ T36] audit: type=1326 audit(1772725894.514:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967074][ T36] audit: type=1326 audit(1772725894.514:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967110][ T36] audit: type=1326 audit(1772725894.514:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967144][ T36] audit: type=1326 audit(1772725894.514:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967179][ T36] audit: type=1326 audit(1772725894.514:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 120.967213][ T36] audit: type=1326 audit(1772725894.514:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 122.595060][ T5112] Bluetooth: hci2: command 0x2016 tx timeout [ 123.107865][ T6275] sctp: [Deprecated]: syz.2.113 (pid 6275) Use of int in max_burst socket option. [ 123.107865][ T6275] Use struct sctp_assoc_value instead [ 124.619396][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 126.023719][ T5112] Bluetooth: hci4: unexpected subevent 0x0e length: 32 > 15 [ 126.023758][ T5112] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 129.162989][ T6314] sctp: [Deprecated]: syz.3.125 (pid 6314) Use of int in max_burst socket option. [ 129.162989][ T6314] Use struct sctp_assoc_value instead [ 129.430057][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 129.430075][ T36] audit: type=1326 audit(1772725903.004:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486727][ T36] audit: type=1326 audit(1772725903.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486774][ T36] audit: type=1326 audit(1772725903.004:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486811][ T36] audit: type=1326 audit(1772725903.004:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486855][ T36] audit: type=1326 audit(1772725903.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486891][ T36] audit: type=1326 audit(1772725903.014:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486927][ T36] audit: type=1326 audit(1772725903.014:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.486963][ T36] audit: type=1326 audit(1772725903.014:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.487000][ T36] audit: type=1326 audit(1772725903.014:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 129.487036][ T36] audit: type=1326 audit(1772725903.014:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa9305cc799 code=0x7ffc0000 [ 130.064005][ T6327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.124225][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.129547][ T6331] openvswitch: netlink: Flow actions attr not present in new flow. [ 131.419333][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 131.421982][ T5889] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.422006][ T5889] usb 4-1: config 0 has no interface number 0 [ 131.464326][ T5889] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.464344][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.464353][ T5889] usb 4-1: Product: syz [ 131.464360][ T5889] usb 4-1: Manufacturer: syz [ 131.464367][ T5889] usb 4-1: SerialNumber: syz [ 131.530501][ T6334] Bluetooth: MGMT ver 1.23 [ 131.541356][ T5889] usb 4-1: config 0 descriptor?? [ 131.608571][ T5889] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.829792][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.830220][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.934880][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.939682][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.162938][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 132.166942][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 132.251995][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 132.258842][ T5889] usb 4-1: USB disconnect, device number 3 [ 132.313641][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.780379][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.781129][ T5889] quatech2 4-1:0.51: device disconnected [ 132.848282][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.851985][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.969866][ T6342] bridge0: port 3(syz_tun) entered blocking state [ 132.970153][ T6342] bridge0: port 3(syz_tun) entered disabled state [ 132.970465][ T6342] syz_tun: entered allmulticast mode [ 132.973859][ T6342] syz_tun: entered promiscuous mode [ 132.976089][ T6342] bridge0: port 3(syz_tun) entered blocking state [ 132.976191][ T6342] bridge0: port 3(syz_tun) entered forwarding state [ 134.392650][ T6349] sctp: [Deprecated]: syz.1.137 (pid 6349) Use of int in max_burst socket option. [ 134.392650][ T6349] Use struct sctp_assoc_value instead [ 134.513827][ T6350] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 134.513849][ T6350] netlink: 1820 bytes leftover after parsing attributes in process `syz.2.135'. [ 134.513863][ T6350] netlink: 1 bytes leftover after parsing attributes in process `syz.2.135'. [ 135.501192][ T6367] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 135.515478][ T6368] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.118990][ T6374] bridge0: port 3(syz_tun) entered blocking state [ 136.124758][ T6374] bridge0: port 3(syz_tun) entered disabled state [ 136.140405][ T6374] syz_tun: entered allmulticast mode [ 136.707774][ T6374] syz_tun: entered promiscuous mode [ 136.734091][ T6374] bridge0: port 3(syz_tun) entered blocking state [ 136.734218][ T6374] bridge0: port 3(syz_tun) entered forwarding state [ 138.015426][ T6387] sctp: [Deprecated]: syz.2.149 (pid 6387) Use of int in max_burst socket option. [ 138.015426][ T6387] Use struct sctp_assoc_value instead [ 138.135795][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 138.135808][ T36] audit: type=1326 audit(1772725911.724:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.136060][ T36] audit: type=1326 audit(1772725911.724:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138425][ T36] audit: type=1326 audit(1772725911.724:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138471][ T36] audit: type=1326 audit(1772725911.724:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138492][ T36] audit: type=1326 audit(1772725911.724:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138512][ T36] audit: type=1326 audit(1772725911.724:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138531][ T36] audit: type=1326 audit(1772725911.724:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.138551][ T36] audit: type=1326 audit(1772725911.724:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.140801][ T36] audit: type=1326 audit(1772725911.724:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 138.146911][ T36] audit: type=1326 audit(1772725911.734:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477967c799 code=0x7ffc0000 [ 140.277452][ T6418] sctp: [Deprecated]: syz.4.160 (pid 6418) Use of int in max_burst socket option. [ 140.277452][ T6418] Use struct sctp_assoc_value instead [ 143.639958][ T6457] sctp: [Deprecated]: syz.4.174 (pid 6457) Use of int in max_burst socket option. [ 143.639958][ T6457] Use struct sctp_assoc_value instead [ 147.979640][ T6502] Zero length message leads to an empty skb [ 148.100830][ T6510] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.265475][ T6563] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 153.284168][ T6561] ======================================================= [ 153.284168][ T6561] WARNING: The mand mount option has been deprecated and [ 153.284168][ T6561] and is ignored by this kernel. Remove the mand [ 153.284168][ T6561] option from the mount to silence this warning. [ 153.284168][ T6561] ======================================================= [ 154.374224][ T6569] overlayfs: failed to resolve './file0': -2 [ 155.116686][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.309334][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 156.311161][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.312051][ T5864] usb 3-1: config 4 interface 0 has no altsetting 0 [ 156.316415][ T5864] usb 3-1: string descriptor 0 read error: -22 [ 156.316467][ T5864] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 156.316480][ T5864] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 156.377289][ T5864] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 156.575867][ T5864] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.596097][ T5864] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 156.598912][ T5864] usb 3-1: media controller created [ 156.711791][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.730959][ T6597] autofs: Unknown parameter '0x0000000000000000' [ 156.815230][ T6599] loop2: detected capacity change from 0 to 7 [ 156.866888][ T6599] Dev loop2: unable to read RDB block 7 [ 156.866935][ T6599] loop2: unable to read partition table [ 156.867132][ T6599] loop2: partition table beyond EOD, truncated [ 156.867164][ T6599] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 156.879296][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.912098][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.955418][ T5864] zl10353_read_register: readreg error (reg=127, ret==0) [ 157.236079][ T5864] usb 3-1: USB disconnect, device number 4 [ 157.616535][ T6611] overlayfs: failed to resolve './file1': -2 [ 160.602756][ T6635] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET) [ 162.437725][ T6653] overlayfs: failed to resolve './file1': -2 [ 162.599767][ T6660] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 166.915705][ T6699] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 166.915719][ T6699] netlink: 1840 bytes leftover after parsing attributes in process `syz.2.259'. [ 168.233123][ T165] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.971370][ T6734] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 168.971391][ T6734] netlink: 1840 bytes leftover after parsing attributes in process `syz.3.271'. [ 172.494452][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 175.004548][ T6805] bridge0: port 3(syz_tun) entered blocking state [ 175.004697][ T6805] bridge0: port 3(syz_tun) entered disabled state [ 175.004904][ T6805] syz_tun: entered allmulticast mode [ 175.007403][ T6805] syz_tun: entered promiscuous mode [ 175.008028][ T6805] bridge0: port 3(syz_tun) entered blocking state [ 175.008150][ T6805] bridge0: port 3(syz_tun) entered forwarding state [ 176.698594][ T6824] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 177.414973][ T6828] fuse: Bad value for 'fd' [ 180.008669][ T6880] overlayfs: failed to clone upperpath [ 180.219917][ T6889] bridge0: port 3(syz_tun) entered blocking state [ 180.220379][ T6889] bridge0: port 3(syz_tun) entered disabled state [ 180.220972][ T6889] syz_tun: entered allmulticast mode [ 180.239836][ T6889] syz_tun: entered promiscuous mode [ 180.285789][ T6889] bridge0: port 3(syz_tun) entered blocking state [ 180.286026][ T6889] bridge0: port 3(syz_tun) entered forwarding state [ 181.909872][ T5112] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 182.496982][ T6931] overlayfs: failed to resolve './cgroup': -2 [ 182.825735][ T6943] fuse: Unknown parameter 'fd0x0000000000000006' [ 183.654938][ T6946] overlayfs: failed to clone upperpath [ 183.839355][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.001957][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.001984][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.002005][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.004382][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 184.004406][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 184.004421][ T9] usb 2-1: Product: syz [ 184.004432][ T9] usb 2-1: Manufacturer: syz [ 184.004443][ T9] usb 2-1: SerialNumber: syz [ 184.316342][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.507589][ T5800] usb 2-1: USB disconnect, device number 2 [ 184.520301][ T5800] usblp0: removed [ 184.559440][ T6970] syz_tun: left allmulticast mode [ 184.559473][ T6970] syz_tun: left promiscuous mode [ 184.583219][ T6970] bridge0: port 3(syz_tun) entered disabled state [ 184.669019][ T6970] bridge_slave_0: left allmulticast mode [ 184.669037][ T6970] bridge_slave_0: left promiscuous mode [ 184.669171][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.765269][ T6970] bridge_slave_1: left allmulticast mode [ 184.765295][ T6970] bridge_slave_1: left promiscuous mode [ 184.766785][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.884943][ T6970] bond0: (slave bond_slave_0): Releasing backup interface [ 184.960640][ T6970] bond0: (slave bond_slave_1): Releasing backup interface [ 185.006218][ T6944] ------------[ cut here ]------------ [ 185.006232][ T6944] kcov->t != t [ 185.006241][ T6944] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.1.348/6944 [ 185.006289][ T6944] Modules linked in: [ 185.006322][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.1.348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.006342][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.006358][ T6944] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 185.006380][ T6944] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 54 54 00 48 89 df 5b 41 5e 41 5f e9 09 2c 5a 00 7c 1c 5b 41 5e 41 5f e9 cd 79 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 13 60 09 48 89 df be 03 00 [ 185.006395][ T6944] RSP: 0018:ffffc9000583fd20 EFLAGS: 00010283 [ 185.006409][ T6944] RAX: 5ebc3fec6b08ce00 RBX: ffff888029c53400 RCX: 0000000000000000 [ 185.006422][ T6944] RDX: 00000000d492317c RSI: ffffffff8ba64be0 RDI: 00000000ffffffff [ 185.006433][ T6944] RBP: ffffc9000583fe78 R08: ffffffff8b2461d0 R09: ffffffff8ddcd780 [ 185.006445][ T6944] R10: dffffc0000000000 R11: fffffbfff1ed4717 R12: dffffc0000000000 [ 185.006458][ T6944] R13: 0000000000000000 R14: ffff888029c53408 R15: ffff8880258d0000 [ 185.006470][ T6944] FS: 000055556d67f500(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 185.006486][ T6944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.006497][ T6944] CR2: 00007f47798f7dac CR3: 000000005beca000 CR4: 00000000003526f0 [ 185.006513][ T6944] Call Trace: [ 185.006525][ T6944] [ 185.006536][ T6944] do_exit+0x150/0x23c0 [ 185.006586][ T6944] ? __pfx_do_exit+0x10/0x10 [ 185.006607][ T6944] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.006634][ T6944] ? __rcu_read_unlock+0x83/0xe0 [ 185.006661][ T6944] ? rt_spin_unlock+0x160/0x200 [ 185.006683][ T6944] do_group_exit+0x21b/0x2d0 [ 185.006708][ T6944] __x64_sys_exit_group+0x3f/0x40 [ 185.006727][ T6944] x64_sys_call+0x221a/0x2240 [ 185.006744][ T6944] do_syscall_64+0x14d/0xf80 [ 185.006767][ T6944] ? trace_irq_disable+0x3b/0x150 [ 185.006786][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.006804][ T6944] ? clear_bhb_loop+0x40/0x90 [ 185.006827][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.006845][ T6944] RIP: 0033:0x7fa9305cc799 [ 185.006867][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.006880][ T6944] RSP: 002b:00007ffc7491bd78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 185.006898][ T6944] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9305cc799 [ 185.006918][ T6944] RDX: 00007fa92f829000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.006928][ T6944] RBP: 00007ffc7491bddc R08: 0000000000000000 R09: 00000000000927c0 [ 185.006940][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 185.006951][ T6944] R13: 00000000000927c0 R14: 000000000002c8cf R15: 00007ffc7491be30 [ 185.006982][ T6944] [ 185.006991][ T6944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.007004][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.1.348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.007024][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.007034][ T6944] Call Trace: [ 185.007041][ T6944] [ 185.007048][ T6944] vpanic+0x56c/0xa60 [ 185.007074][ T6944] ? __pfx__printk+0x10/0x10 [ 185.007094][ T6944] ? __pfx_vpanic+0x10/0x10 [ 185.007116][ T6944] ? is_bpf_text_address+0x292/0x2b0 [ 185.007140][ T6944] ? is_bpf_text_address+0x26/0x2b0 [ 185.007171][ T6944] panic+0xc5/0xd0 [ 185.007194][ T6944] ? __pfx_panic+0x10/0x10 [ 185.007237][ T6944] __warn+0x315/0x4f0 [ 185.007261][ T6944] ? kcov_task_exit+0xf5/0x160 [ 185.007284][ T6944] ? kcov_task_exit+0xf5/0x160 [ 185.007304][ T6944] __report_bug+0x29a/0x540 [ 185.007334][ T6944] ? kcov_task_exit+0xf5/0x160 [ 185.007354][ T6944] ? __pfx___report_bug+0x10/0x10 [ 185.007381][ T6944] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 185.007404][ T6944] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.007437][ T6944] ? kcov_task_exit+0xf5/0x160 [ 185.007457][ T6944] report_bug+0x16a/0x220 [ 185.007480][ T6944] ? kcov_task_exit+0xf5/0x160 [ 185.007499][ T6944] ? kcov_task_exit+0xf7/0x160 [ 185.007517][ T6944] handle_bug+0x9c/0x200 [ 185.007535][ T6944] exc_invalid_op+0x1a/0x50 [ 185.007553][ T6944] asm_exc_invalid_op+0x1a/0x20 [ 185.007570][ T6944] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 185.007617][ T6944] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 54 54 00 48 89 df 5b 41 5e 41 5f e9 09 2c 5a 00 7c 1c 5b 41 5e 41 5f e9 cd 79 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 13 60 09 48 89 df be 03 00 [ 185.007633][ T6944] RSP: 0018:ffffc9000583fd20 EFLAGS: 00010283 [ 185.007648][ T6944] RAX: 5ebc3fec6b08ce00 RBX: ffff888029c53400 RCX: 0000000000000000 [ 185.007660][ T6944] RDX: 00000000d492317c RSI: ffffffff8ba64be0 RDI: 00000000ffffffff [ 185.007673][ T6944] RBP: ffffc9000583fe78 R08: ffffffff8b2461d0 R09: ffffffff8ddcd780 [ 185.007687][ T6944] R10: dffffc0000000000 R11: fffffbfff1ed4717 R12: dffffc0000000000 [ 185.007700][ T6944] R13: 0000000000000000 R14: ffff888029c53408 R15: ffff8880258d0000 [ 185.007720][ T6944] ? rt_spin_lock+0x1e0/0x400 [ 185.007763][ T6944] do_exit+0x150/0x23c0 [ 185.007817][ T6944] ? __pfx_do_exit+0x10/0x10 [ 185.007838][ T6944] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.007877][ T6944] ? __rcu_read_unlock+0x83/0xe0 [ 185.007904][ T6944] ? rt_spin_unlock+0x160/0x200 [ 185.007933][ T6944] do_group_exit+0x21b/0x2d0 [ 185.007960][ T6944] __x64_sys_exit_group+0x3f/0x40 [ 185.007980][ T6944] x64_sys_call+0x221a/0x2240 [ 185.007997][ T6944] do_syscall_64+0x14d/0xf80 [ 185.008033][ T6944] ? trace_irq_disable+0x3b/0x150 [ 185.008053][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.008071][ T6944] ? clear_bhb_loop+0x40/0x90 [ 185.008091][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.008107][ T6944] RIP: 0033:0x7fa9305cc799 [ 185.008122][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.008136][ T6944] RSP: 002b:00007ffc7491bd78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 185.008152][ T6944] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9305cc799 [ 185.008163][ T6944] RDX: 00007fa92f829000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.008173][ T6944] RBP: 00007ffc7491bddc R08: 0000000000000000 R09: 00000000000927c0 [ 185.008183][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 185.008192][ T6944] R13: 00000000000927c0 R14: 000000000002c8cf R15: 00007ffc7491be30 [ 185.008216][ T6944] [ 185.008517][ T6944] Kernel Offset: disabled