last executing test programs: 25m41.730205596s ago: executing program 32 (id=621): r0 = socket$pptp(0x18, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) bind$pptp(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000108000000000000db0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008"], 0x30}}, 0x0) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) 25m35.377852331s ago: executing program 33 (id=634): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 23m49.333086806s ago: executing program 34 (id=932): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1201, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x110}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0x28, '\x00', 0x0, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 23m40.342388792s ago: executing program 35 (id=952): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x18d6, 0x0, &(0x7f0000ffe000), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) openat(0xffffffffffffff9c, 0x0, 0x185342, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 23m0.938509495s ago: executing program 36 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 22m54.276149377s ago: executing program 37 (id=1065): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 22m47.065851006s ago: executing program 38 (id=1075): socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 19m39.162002421s ago: executing program 39 (id=1673): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@loopback, @empty, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 19m31.786435674s ago: executing program 40 (id=1687): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) 19m26.761682238s ago: executing program 41 (id=1697): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 19m20.923273765s ago: executing program 42 (id=1707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="90d8", 0x2}], 0x1}}], 0x1, 0x4004804) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m15.795070253s ago: executing program 43 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be004411"], 0xfdef) 18m48.53927724s ago: executing program 44 (id=1722): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="939c", 0x2}], 0x1}}], 0x1, 0x2000008d) 12m20.377940396s ago: executing program 45 (id=2956): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) 11m49.15116942s ago: executing program 46 (id=3030): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x15) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) 10m55.277773471s ago: executing program 47 (id=3162): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x5, 0xa, 0x4, "f8a76bfeb47b"}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r1, 0x0, 0x4048043) dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) sched_setscheduler(0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) 10m45.237768348s ago: executing program 48 (id=3183): socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44810}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x80, 0x1, 0x22e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x32dc, 0x0, 0xe, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r7 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], 0x9) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f00000004c0)={{}, "e19f8a0b191e844605a21da223ad2a8dd476e73121e1d0eec46b6f64a5f15e3a8a4a9918c20bca3c1c91ee94a0882ddc2fafe3ce086b9c295468014b43db8b011552a11b2d8f54e3d0222be1ce6040980221dcd0539f66e7517aa672cd676712b898b0ac33fa9d77e09961ef0974f64fb808e700e8362ab1d01bfa5244cae264184aa5d998dc47718b4daab857654ebf2c3c81e702705a6cedd1dc3976ecec1846cdec9d1393d0e58f35f91d75196cb850ba41600581564c556e6436dcc3e87770c84aedfd2b15795dac4f19aafb9e69857b38c4b18ecbdad1ad8bb91c9d7f9e87ed8daa66ff4b8c2bcdbc0e78eebdbc360ba6ed9279545d149d33a56b02003de68f260a353aef791967cb4e456ccebb3be69ec183a3e82332eaf12bd583dda423099b91b3c04eff93b362243e37c55862cd589f46428d0c4f3374af6ab17a53ea3fa95ba8feb7b9f6be6d967a458b42b25d4a8f1ad509a9116ff4cd36b39883f3f2b30744c126434a558704105e4c94bc9e5c026127ead1cea0bf2416aa5f15e9182d0c302d7da594a131be3ce2c5f35542a87658b9caa537729c54a5b7619f2e5a44b1d1b3121cff861dd9df48cbb01196e627d0aecac10eacc7a14ef3dbd8e6b6fdaacb88a30914e6993b5721370be84ae074e2b7dc7af945a0d4bc7c6ad9b0e34cba87ab295d1c6f06730cfbc8b8810faba1fd16ecc33dc56ce58f39e58e8c710a6aa7b01faeb9f4518faba06c408ea937bc347ce4e0d33cfd8653be7cc31946bcbfc27655b76b88c56b2fb52d867225992bd8e9f15f155c2f4ca06bdd22f2e014384b6c5335700bf80fee6e54decb9075520417b0ed4b681ce3d51fb36ce13c6863ad9e1b0f4b2f11177b61406cfada24d4e815b0ebafb9ba2df56e98d6de55b61e0e2b640663bd345fad44868ec5cce63578cd57d20d95ec749ac7e3da46f65dd506ad9d9ac862546bb4e65064c10b2a9851389a6496a6f8ea41465b8448c1431a226e25ab5b709bd115454294e1ceb7e6e1f53a73240f39de0639854f568e2478502a2867c7a4fdf73a0b3c971631cb4f2be117162ef9a87d5ff8140e866dadbf34cefc7bf836e2e2fffbf23549ced10febfdfc741c1d2a2d539317dc08d99635e749f6428d2355a882f128013f520b6e4d8d502765f741e109ae54b573ffcf002a23751d2dd26ba83a5d27132e98cda7b2a0c968d2a3b16312efab3a6ef29aab8df390c95517b76250a3daef5280fdec0795c24df93d5be79b59066376966cd7943714439e12ddf964bac7fba337f4fd609b38b339d76c9e11289770ce6f278f332f864d917b2c66b926099538908578aa1056ae09bd308a1e4d6a435774126f5a777ce4b91eaa09488ddb1722a4c4a4410c3ff44b1a95b17b745b2cac0edae8145e9bce1455ce75c1cb2cda92fe057c311bd060da64f8a3af9baa6bf25be39c023efd179d4cd388c62ba925a46d947d6dff900b27c0d731d5dbd4d8ec46799d988e07115bb658814f8a9fff27e84d79ecc3c4f0872df71125eccbd8e58b0d921977eb6d966c6a4eddd167d5c41fa1cc1617e7b3e299b7fae120ecb48538037557d14e825c24335c047e2f3ae4a6aecf2771d36405539d0a20cc67f3360f3fc0625c4c2dd6bfa98a9cc9df78880fc145c18596299fcd5e7d6442ddb9dbb86f4069b4d0a8bf32e75b0c6506630143c12ba6e31dd2b6ad5e01866d92ebd1a1f33217c51fa2dd1bd5aceb5fba651e7b48fb840b622b9e744c9f77e164b96dd9c3d2d0a513a2b17f7a42f6010320f8934353b56b31a96401ca683ca5a672d0efd30c29ceb598c32ecfad89ff006b771df335d59ca294bd953614cf21aff1e7e887b6eb93aaeb7bc291ed77186fb5a7a32c5a92d3012c2094955ebbd4daf58e4b609ea3152b8b948425311d6184e109b0da3874318d19673fe9c947f2dfed4271ded59b1292dfe9c57cb6f6d45635835748ee7354466b9f865287ef1b5a37137bdb96191eb460875afc20fb49cea646417d8d4eb384b22418a1b239f07e5278570fec6837a2c3fb0a7599db8c550b52a85f21e1321ca34c7096f94ab8a074569cee4e1e37ad72e96d10aea4605ce56bcf8efac8d91318df38027105f2c330fb8a53dd32994e013d7b6db15a3fdc07f062d7236d08594d7a1d1e8b6a8e72d18f202276823bb9c2249068848e463bde0356687e1c807dbe56f4b9eefaf34357e08a8c4ead51815cb3679f7fa2aa39d296ac8cc8c32b87f60610740c62d2441cc3828b40b92ea21682ee0a562ae8ae6df393c892b9737606f08d28d4cdc7cd763ced4ddd7772492b653ac8aff5f017845ad7ef4cd42b1dbaa0c1f75191caac427cfcf4e17d7a66a121f807a1118e1a811f61f4c859dd0e3b8e7f6c210dc621b33153d4970439201b1e8e677f84a0c643711924260350ea855cb30557b9c740db43551db7f330b578c780cc9a7779f3841a046b16c0f29bb3c68777307b0b5492f5ab90f0571406ead888c39e3ae46a4b3fbdd01463c8c2eece9cf9d1f337f8b7bf60a240d83eb1198061782bf071f27314514cc95aa00e70708292eef121320d7ff6897f443b235bd92ca1a54db45861d328851159107d1fd0ff0717610664a6ac597e5c6ed7ce387680536b0e65f23db006d541acead707174c5747fcd05b7f5dc7a0f2616f0c3935bf3ab1d4ce3344933022237a1a0606c09c4e97d1a5e2ff6ce28edbdf7f17997d32af6e6a017f54e6a95787b47fa68636b657c375ec83a9cd800097de8569a3c0b3b1898391a82b640c8c48c89252875b0758ae71648e09b550eec038962fd34ad869fb2b0ffdc3328c43900c399b54fe1907bcb5d1b006fff69a84347453230ec2a7737a49b29ad47338dea4dbc72b027a3bfc8fb937e2a34fa9394b068bbdf94435d55d49424a601f828473f4e1fd89165ac2e391e6480f03a06a000713f7dd8031364f4e079ddd0df0515857540294dc9da69710e554ec2706b7aaa711ba9b3eb062563d0d5508847dec65c7254856940bbdf98037815dd37d577d66adfb977fd0e68d37ae5ed6c546bc73de2e622eeead35a5182613ce207ecf74fb77b96e601cf1410a7878abf9aa520766751da9f23e1140af1e42d672ea11b557952875400d81ab2459773d9613ba0b558b5930e8887f515007e518b2ea03ba12bdb8c223b74e9f89e9e9e0a59cc3eb5650d095412afbc5d85279c0266dc10b72dbbc4d06bb184ad053d068f4bff46143b0e1a27ae3b43a9bfde3eda80a3c17c5f6e5ba69f9bf9d55fda9fcc875ad89358be870fe9cef9d9e24869f7ed775b4286ca87d56b1d13cd715004c7b19605d9cbad97f55b1ad42a3e0fc486dfe47665f412c8b577ad78b025c2411bc3b69806d96e0579510a49a4ef5cdb5abc4552b16e0a5a9cfc0fc2febf44bd2a99cd7f88bd61d7e296ec107c0452e545f448af7963a078fcf94fbe9fe79fa3c5332d7dff11b48b976777df7a6b124d22a561929d59feb9dfc5d4d7633edcf49abb396fb8d5eac74cc87095106a4b63fdd897429178ec0186b9a5c4d85949b153bd5641ec1187e5511ba88f3828856cb6f817b4302f0ce0244b095fd452c382318ad2240b2f91173a4ca3105ce7a2151688c9d79cae6709453046745e3c661f07af1d3cf6a4d51ec13186a242c5fb2f9eb88ae43b909d6c1dafac7ff9a625712e30fe3af507d6bc2851267a3ecdd15f7e7ff4ed5b0bfc89c26c92bf6f43eb56f814ba3232d8b44a7c7540a91c3e40074bbf6866f0b2a8f248c6b6eeddd9955ec382f38490c146abc0492a48d1534034f72149ddf0b83b49eb060bd0f0f5d223c45b19de14c99cee42c762b0bce526621430bdd7ff1acb78669d9cdbb05fbbaa84f17bbe04f1df680a9ba57cdadb44ba2c60331fda988f62c45b31541ff657a7b8599fc53577abdafc6a03f75749963bb930b4a5f957a87de7102fc926bfa344f76c188e2b91f99c04155f0441c8703ab0d296379d5da6e51802575555f46b7b7642297f2052417591dd356b74dc8df14da7eace58c230f75a461b8f30d15405896ae740594899e17ecd6bfa05114227d80a41a568a0cca727d9e5d38f6bc460ab6db61918591614380db04c7f3d82b5d7abd6268191345ada087f2608e6ce0c8ea687fbcfbf39b8ec07c080c126338d4c3aee461b6b591c16ed5ce7ba316817f68d371399ae402094f5da260f00ca6903b8c18fd237825255f04022d67f364235cac8b4a15d1034d960e731bb0d2b0656da442d2c1f4c7c540a6e943c1f987f53f9efbbcd3c6071f9a06bad5872eb9dac00f91938d5f098c43c18a3dee6ed5b7ed6bea3c7bdd34fe55eef9a24490cd5fa58feb5d82a5bd961d8ecc2332ebd1af5ea324f0d7824f3bd98a767cf915869440d94cae81c63d83f37a20db4ce8dd1be93f9c6dfe0b78202f2c553a7c63e1afd912f277f5628be3c881d404cd8a373a2ba2e4cc4f9b806f3caea32cb2180eae9654552c77f626b548e721e78e55c9a64e4e8dcdb56bff58c60bab1ebf4166cb5199ac38c5d1b57688887ba36e69761ce3a75d34df217817d3d578bb59b90d687eb6a822f8628029d37b53969ea57c27dbdeaf4688671fec7a6995c51268681f19e31c9775a5f590b804fb50b406bfe995a6ee4fe62cb1cb57e533ff77c548fa09dd7d06408764b7805716ca33aa6bfe8c5ef1dd2c5c4335036fcd5990558f19c2cbeadce832639ed723a9fe9efe391c7661703b7b78256750755c7ad87d8e97b290a1cd79cdae95eeefcc76e274910b2e3d2ca3293f75032333ef9574afa47126339e31e885e9e9222cbfc035b1b2577162f5ab978f22cd39b8c6f08cd03544638f1bbaa7beed0194b204027369cf72d12d475b508f4f44889e9e6eaf6d69a424fa3319f0c4e0a4b97efeb834ff9afc7ac59f41c263e9a14d4828cdb891e7f6c1fefee841a994f6b5310d6f779fc3c444df482eb45aa60005d742476fca03f6e53e46c959ce15c0746cca2432f3305288999f178b1134b60dc0110eb3edda83977907a40578ed1fa12660d715f944b1ce7b1617eb4391b41523b807d6da3aa68ba45c15565181a239059d354cf479ecc54e1500adec7ffaac4a3e5ad14f63a6c1b933322f433e660d3ab81e746072ce36ae4c749480ed499ba9c554a59b4f521bbfd0ba0232cbb9c5ae70de034a6792dc116f1a0f1c833fd81ccf0351021058e75dbf77505425405b06dcf8dc5d7f94e88880f23cf7f9c78b0b2ffe18f9fe104b1ddcc9218d1242bea979eb578d8853e3c068312568e410d00eb87b1c15af730e6c3c95a34e47b122214df558efcc1398a6ca4d83c118d0a5585ebf87864d59199a0cc024da0feee726bed09d38715144720cfc345926dbcb1f8a8a6599bf82ec34d164e84087bd3e896380772a0abe2bf4ade6c67e8fc1f51ae1b9902361c368769e0f7a6b6c643069b957ac520115843bebe47d763efc0ccfcab09db51392cfe1e58aa5a27c37ffa79af3619038f84daf09195ee10e964b413a30e3bd5a7cabb3b58dfcf9386da1b273f8fe109adbb10c9dfc164668cf28930701339363295dc6ed584c73ba5b62821b6d018a1e86ba57983bf076bc76b6b781b5756bf532248a56f9c0eb8ce8b758821172aa042c4e78c1050897913675ad3eed9bfcfeaf8682f250b70f52073d8fcfed2ccf6d21d60418d324c61b806ae912d9c68e3430a2b460720c71c2ad82a95bd12957f81f8761f65c4f731e978c86956d3e07dc954c788cfcc015fde05acad8bf8aff953a488b7593c8d1e1"}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x22, 0x70000, 0xfffffffe, 0x5, 0x9, 0x1ef, 0x7f, 0x3, 0x7, 0x4, 0x9b4, 0x6, 0x8, 0x1ab, 0xfffffff8], 0x0, 0x1}) 10m37.804963985s ago: executing program 49 (id=3194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) add_key$user(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xf000, 0x863, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1042, 0xd2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@fmask={'fmask', 0x3d, 0xa2}}, {@shortname_win95}]}, 0x81, 0x2bc, &(0x7f00000000c0)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', 'resuid'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 10m0.387541232s ago: executing program 50 (id=3225): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) getpid() shutdown(r5, 0x1) 9m56.665816087s ago: executing program 51 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) 9m36.604200153s ago: executing program 52 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x1) setrlimit(0x7, &(0x7f0000000400)) 9m22.16887787s ago: executing program 53 (id=3258): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x64, 0x1) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) 9m1.832998281s ago: executing program 8 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 8m56.097655783s ago: executing program 8 (id=3299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m54.53627779s ago: executing program 8 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8m53.138648763s ago: executing program 8 (id=3305): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m44.835576483s ago: executing program 1 (id=3311): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) socket(0xa, 0x2, 0x3a) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m37.497263287s ago: executing program 54 (id=3305): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m36.866174245s ago: executing program 55 (id=3306): syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffa) socket(0xa, 0x80002, 0x10006) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000"], 0x0) syz_emit_vhci(0x0, 0x22) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 8m29.589099324s ago: executing program 56 (id=3311): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) socket(0xa, 0x2, 0x3a) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m13.348286521s ago: executing program 57 (id=3335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) gettid() syz_open_dev$sndctrl(0x0, 0x7, 0x802) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x280201, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 7m49.465954559s ago: executing program 58 (id=3349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5e37fa1c, 0x10000}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m13.972721574s ago: executing program 3 (id=3356): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x829, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x80) socket$xdp(0x2c, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000b80)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "86b682"}}}, 0xd) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="284e4f6fea0aa6d701138e239b0b5f05e509e886c55a92d3a64555b1765c37d3f2dd601216d0adbd1bd4af261effc37f092a1b6b34f0ac11deaeade928651600c40b2c85edfb7531a1f064067a811a20a1d36e28ea2e94b5c7a0c2aa6f21fd0dbc20b0b8427ad789521eb421685b1d2b82595561171d793f942c17d0eded57ada0735693b6fcf7", @ANYRES64=0x0], 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 7m12.868461742s ago: executing program 3 (id=3409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff}) kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 7m3.590244628s ago: executing program 59 (id=3403): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) read$FUSE(r3, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x28241, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) 7m1.454019861s ago: executing program 3 (id=3426): syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 7m0.623246405s ago: executing program 3 (id=3428): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 6m59.795502521s ago: executing program 3 (id=3429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x71) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000280)={0x2, 0x6, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0x12}, 0x0, &(0x7f0000000300)={0x3ff, 0x9, 0x3, 0x9, 0x4, 0x0, 0xffffffff, 0x3f8}, 0x0, 0x0) 6m57.269241978s ago: executing program 3 (id=3430): syz_open_dev$media(0x0, 0xff, 0x100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x4800000009) 6m53.637934935s ago: executing program 60 (id=3417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000414, &(0x7f00000000c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@usrquota}, {@usrjquota}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) open(0x0, 0x10b942, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x26600, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r1, 0x0, 0x4) 6m45.55508215s ago: executing program 2 (id=3441): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d0000000000", 0x9, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x100003}, 0x10) close(r0) 6m44.787901255s ago: executing program 2 (id=3442): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_setup(0xaa, &(0x7f0000000180)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x4) close_range(r0, r5, 0x0) 6m41.331422839s ago: executing program 61 (id=3430): syz_open_dev$media(0x0, 0xff, 0x100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x4800000009) 6m39.295962911s ago: executing program 2 (id=3445): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 6m36.626404635s ago: executing program 2 (id=3447): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 6m35.533528108s ago: executing program 2 (id=3449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x2, 0x6, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0x12}, 0x0, &(0x7f0000000300)={0x3ff, 0x9, 0x3, 0x9, 0x4, 0x0, 0xffffffff, 0x3f8}, 0x0, 0x0) 6m31.506896655s ago: executing program 2 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000040)={0x800080, 0x859, 0x7, 0xb, 0x7, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = getegid() dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007ac0)={{{@in=@local, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) fcntl$getown(r1, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d40)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32], 0xe8, 0x800}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000021c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xa8}}, {{&(0x7f0000003680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0}}], 0x3, 0x20004840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6m31.229850952s ago: executing program 8 (id=3422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 6m30.537510429s ago: executing program 8 (id=3453): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x6, 0x8, 0x3007, 0x3, 0x0, 0x6, 0x1, 0x6}}) r3 = fsopen(0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m16.282875964s ago: executing program 62 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000040)={0x800080, 0x859, 0x7, 0xb, 0x7, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = getegid() dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007ac0)={{{@in=@local, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) fcntl$getown(r1, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d40)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32], 0xe8, 0x800}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000021c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xa8}}, {{&(0x7f0000003680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0}}], 0x3, 0x20004840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6m14.939548432s ago: executing program 63 (id=3453): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x6, 0x8, 0x3007, 0x3, 0x0, 0x6, 0x1, 0x6}}) r3 = fsopen(0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m8.826865902s ago: executing program 1 (id=3444): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000001b40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40810, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 6m2.235037725s ago: executing program 1 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000004500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x230, 0x0) 6m1.18074082s ago: executing program 1 (id=3478): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d00000000000000", 0xb, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x100003}, 0x10) close(r0) 6m0.480622373s ago: executing program 1 (id=3480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 5m58.846403625s ago: executing program 1 (id=3483): r0 = getpid() prlimit64(r0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300"], 0x18}}, 0x4044004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5m43.176982812s ago: executing program 64 (id=3483): r0 = getpid() prlimit64(r0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300"], 0x18}}, 0x4044004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5m23.126642889s ago: executing program 6 (id=3527): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 5m21.172058294s ago: executing program 6 (id=3529): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 5m20.548201206s ago: executing program 6 (id=3532): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 5m18.371154195s ago: executing program 6 (id=3538): r0 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) read$FUSE(r0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4000, 0x2, 0x37c}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) 5m16.909297434s ago: executing program 6 (id=3540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xd}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m16.06408157s ago: executing program 6 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 5m0.834743442s ago: executing program 65 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 32.379163651s ago: executing program 5 (id=4505): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 30.781855613s ago: executing program 5 (id=4512): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040), 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 30.146144514s ago: executing program 5 (id=4516): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x2, 0x6, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0x12}, 0x0, &(0x7f0000000300)={0x3ff, 0x9, 0x3, 0x9, 0x4, 0x0, 0xffffffff, 0x3f8}, 0x0, 0x0) 29.505229037s ago: executing program 5 (id=4519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x18a, 0x3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x64, 0x0, &(0x7f00000006c0)="e101d51f553e85c94d0e72dd054261b669b09518e94b6c9531d626f5a58306d3241fe4b9ed5307ee647cb3902b9dd2d9bdd892c25daeb8d7b89dbac48a99d9e4bc2e76c6f931bcdf30eb13f17b39d68ef87ceb9bec0d11c48c84b41add867659aa0d27e5"}) 28.891424409s ago: executing program 5 (id=4521): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 28.169368371s ago: executing program 5 (id=4522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 13.01394016s ago: executing program 66 (id=4522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8.116798505s ago: executing program 9 (id=4626): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.064901116s ago: executing program 4 (id=4639): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x500, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) 4.585579407s ago: executing program 0 (id=4640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200000000}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4.467863818s ago: executing program 9 (id=4641): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881ab, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.977471942s ago: executing program 7 (id=4642): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3.850130241s ago: executing program 0 (id=4643): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x880) 3.519306161s ago: executing program 4 (id=4644): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) close(0x3) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x8010) close(r2) close(0x3) 3.080954052s ago: executing program 7 (id=4645): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.011306848s ago: executing program 9 (id=4646): r0 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 3.009396215s ago: executing program 0 (id=4647): r0 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.769739646s ago: executing program 4 (id=4648): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x2, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x6, 0x5}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.349398741s ago: executing program 7 (id=4649): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 2.245260407s ago: executing program 0 (id=4650): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 2.204420294s ago: executing program 4 (id=4651): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r1, 0x0, 0x0, 0x51c6, 0x2, 0x2, 0x0, 0xf2, 0x0, 0x401, 0x8, 0x8}) 1.689894326s ago: executing program 9 (id=4652): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.573583126s ago: executing program 7 (id=4653): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x5, 0x70bd26, 0x20000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}}, 0x0) 1.410626921s ago: executing program 4 (id=4654): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 894.553114ms ago: executing program 9 (id=4655): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881ab, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 831.043197ms ago: executing program 7 (id=4656): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x7, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x400, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x80000001, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 781.34895ms ago: executing program 0 (id=4657): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) close(0x3) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x8010) close(r2) close(0x3) 673.674094ms ago: executing program 4 (id=4658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 168.1702ms ago: executing program 7 (id=4659): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="2803004da808dce401c3"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 41.961486ms ago: executing program 9 (id=4660): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) munlockall() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x6, 0x3, 0x5, 0x1, 0x1, 0x6, 0x3}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32=r3, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac"], 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000180)="892c", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @broadcast}, 0x14) 0s ago: executing program 0 (id=4661): r0 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) kernel console output (not intermixed with test programs): x 5-1:0.0: Unknown AC97 audio processor detected! [ 1501.198825][T12687] Bluetooth: hci3: command tx timeout [ 1501.824731][ T9238] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1501.850132][ T9238] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1501.864894][ T9238] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1501.894401][ T9238] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1501.945115][ T9238] usb 5-1: USB disconnect, device number 27 [ 1502.166501][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.391071][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.521201][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.755753][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.859449][T17581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.866988][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.874960][T17581] bridge_slave_0: entered allmulticast mode [ 1502.884698][T17581] bridge_slave_0: entered promiscuous mode [ 1503.281893][T12687] Bluetooth: hci3: command tx timeout [ 1503.310068][ T59] bridge_slave_1: left allmulticast mode [ 1503.315926][ T59] bridge_slave_1: left promiscuous mode [ 1503.323023][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.344108][ T59] bridge_slave_0: left allmulticast mode [ 1503.356713][ T59] bridge_slave_0: left promiscuous mode [ 1503.363062][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.846368][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.866529][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.939107][ T59] bond0 (unregistering): Released all slaves [ 1503.961160][T17581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.968717][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.976331][T17581] bridge_slave_1: entered allmulticast mode [ 1503.984641][T17581] bridge_slave_1: entered promiscuous mode [ 1504.482555][T17581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.589986][T17581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.793171][ T59] hsr_slave_0: left promiscuous mode [ 1504.846495][ T59] hsr_slave_1: left promiscuous mode [ 1504.855409][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.863041][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.913424][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.921175][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.056437][ T59] veth1_macvtap: left promiscuous mode [ 1505.062444][ T59] veth0_macvtap: left promiscuous mode [ 1505.068301][ T59] veth1_vlan: left promiscuous mode [ 1505.073748][ T59] veth0_vlan: left promiscuous mode [ 1505.348842][T12687] Bluetooth: hci3: command tx timeout [ 1506.196653][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1506.218075][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1506.696973][T17538] veth0_vlan: entered promiscuous mode [ 1506.720331][T17581] team0: Port device team_slave_0 added [ 1506.750438][T17581] team0: Port device team_slave_1 added [ 1506.827083][T17538] veth1_vlan: entered promiscuous mode [ 1507.024787][T17581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.032045][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.058325][T17581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.209587][T17581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.216728][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.243594][T17581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.343506][T17538] veth0_macvtap: entered promiscuous mode [ 1507.398842][T17538] veth1_macvtap: entered promiscuous mode [ 1507.438808][T12687] Bluetooth: hci3: command tx timeout [ 1507.565938][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.683347][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.042599][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.059071][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.111810][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.143107][T17581] hsr_slave_0: entered promiscuous mode [ 1508.154282][T17581] hsr_slave_1: entered promiscuous mode [ 1508.163403][T17581] debugfs: 'hsr0' already exists in 'hsr' [ 1508.169435][T17581] Cannot create hsr debugfs directory [ 1508.186149][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.430288][T15888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1510.450828][T15888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1510.496541][T15888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1510.534691][T17581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1510.535536][T15888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1510.562687][T17581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1510.562873][T15888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1510.619747][T17581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1511.069062][T17581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1512.109208][ T9238] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1512.293082][T17581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.348841][ T9238] usb 3-1: Using ep0 maxpacket: 8 [ 1512.360075][ T9238] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1512.368686][ T9238] usb 3-1: config 0 has no interface number 0 [ 1512.375140][ T9238] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1512.386408][ T9238] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1512.398439][ T9238] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1512.409754][ T9238] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1512.424495][ T9238] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1512.434697][ T9238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.536237][T17581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.575733][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.583219][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1512.671521][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.678917][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.716623][T12687] Bluetooth: hci4: command tx timeout [ 1512.753357][ T9238] usb 3-1: config 0 descriptor?? [ 1512.805684][ T9238] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1513.041642][ T9238] usb 3-1: USB disconnect, device number 49 [ 1513.122258][ T9238] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1513.304057][T17618] chnl_net:caif_netlink_parms(): no params data found [ 1514.351918][T17521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.728643][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.799600][T15888] Bluetooth: hci4: command tx timeout [ 1515.213993][T17645] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 1515.907164][T17618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.915666][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.923855][T17618] bridge_slave_0: entered allmulticast mode [ 1515.932292][T17618] bridge_slave_0: entered promiscuous mode [ 1516.161767][T17618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.169405][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.177040][T17618] bridge_slave_1: entered allmulticast mode [ 1516.185572][T17618] bridge_slave_1: entered promiscuous mode [ 1516.231125][T17581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.730916][T17618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.788963][T15888] Bluetooth: hci2: command 0x0406 tx timeout [ 1516.813832][T17618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.868442][T12687] Bluetooth: hci4: command tx timeout [ 1517.248782][T17618] team0: Port device team_slave_0 added [ 1517.315804][T17618] team0: Port device team_slave_1 added [ 1517.681925][T17618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.692047][T17618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.718681][T17618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.965805][T17618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.973301][T17618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.001640][T17618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.183823][T16549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.192057][T16549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.681059][T17618] hsr_slave_0: entered promiscuous mode [ 1518.689961][T17618] hsr_slave_1: entered promiscuous mode [ 1518.697609][T17618] debugfs: 'hsr0' already exists in 'hsr' [ 1518.703532][T17618] Cannot create hsr debugfs directory [ 1518.782369][ T3709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.792673][ T3709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.949883][T12687] Bluetooth: hci4: command tx timeout [ 1519.294838][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.487117][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.686789][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.977303][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.584311][ T4297] bridge_slave_1: left allmulticast mode [ 1520.590899][ T4297] bridge_slave_1: left promiscuous mode [ 1520.597180][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.671200][ T4297] bridge_slave_0: left allmulticast mode [ 1520.677112][ T4297] bridge_slave_0: left promiscuous mode [ 1520.683674][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.204812][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.286547][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.338701][ T4297] bond0 (unregistering): Released all slaves [ 1521.565963][T17581] veth0_vlan: entered promiscuous mode [ 1521.786777][T17581] veth1_vlan: entered promiscuous mode [ 1521.913725][T15888] Bluetooth: hci6: command 0x0406 tx timeout [ 1522.143874][ T4297] hsr_slave_0: left promiscuous mode [ 1522.172417][ T4297] hsr_slave_1: left promiscuous mode [ 1522.180717][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.188382][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.255544][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.263400][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.353526][ T4297] veth1_macvtap: left promiscuous mode [ 1522.359647][ T4297] veth0_macvtap: left promiscuous mode [ 1522.365357][ T4297] veth1_vlan: left promiscuous mode [ 1522.370911][ T4297] veth0_vlan: left promiscuous mode [ 1522.983641][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 1523.056078][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 1523.523902][T17581] veth0_macvtap: entered promiscuous mode [ 1523.557558][T17581] veth1_macvtap: entered promiscuous mode [ 1523.848099][T17581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.920603][T17581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.133689][ T4297] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.207886][ T4297] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.252243][T15966] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.359201][T17618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1524.414009][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.486144][T17618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1524.623707][T17618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1524.703271][T17618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1525.463204][T17684] CIFS mount error: No usable UNC path provided in device string! [ 1525.463204][T17684] [ 1525.463311][T17684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1525.506609][T17684] loop4: detected capacity change from 0 to 256 [ 1525.653680][T17684] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1526.071697][T17682] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1526.120078][T17618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.577063][T17618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.760327][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.767657][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.943167][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.950580][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.082464][T17618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.846621][T17618] veth0_vlan: entered promiscuous mode [ 1530.034946][T17618] veth1_vlan: entered promiscuous mode [ 1530.369426][T17618] veth0_macvtap: entered promiscuous mode [ 1530.435901][T17618] veth1_macvtap: entered promiscuous mode [ 1530.597406][T17618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.653901][T17618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.763993][ T3709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.847766][ T3709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.901849][ T3709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.942044][ T3709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.064478][T16549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.072709][T16549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.219235][T15966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.227273][T15966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.832068][T15888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1535.845129][T15888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1535.871735][T15888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1535.924800][T15888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1535.997287][T15888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1536.295130][ T3931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.573398][ T3931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.826331][ T3931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.057652][ T3931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.132670][T15888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1537.141558][T15888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1537.150696][T15888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1537.164220][T15888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1537.175230][T15888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1538.148588][T15888] Bluetooth: hci0: command tx timeout [ 1538.189390][ T3931] bridge_slave_1: left allmulticast mode [ 1538.195155][ T3931] bridge_slave_1: left promiscuous mode [ 1538.201523][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.301723][ T3931] bridge_slave_0: left allmulticast mode [ 1538.307489][ T3931] bridge_slave_0: left promiscuous mode [ 1538.314449][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.920170][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.964553][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.016773][ T3931] bond0 (unregistering): Released all slaves [ 1539.188821][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.196763][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.279016][T15888] Bluetooth: hci2: command tx timeout [ 1539.470726][T17752] CIFS mount error: No usable UNC path provided in device string! [ 1539.470726][T17752] [ 1539.483589][T17752] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1539.709196][T17750] loop7: detected capacity change from 0 to 256 [ 1539.884162][T15967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.892297][T15967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.122930][ T3931] hsr_slave_0: left promiscuous mode [ 1540.159062][ T3931] hsr_slave_1: left promiscuous mode [ 1540.174943][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.182839][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.216577][T17750] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1540.231263][T15888] Bluetooth: hci0: command tx timeout [ 1540.247808][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.255714][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.285449][T17750] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 1540.348148][ T3931] veth1_macvtap: left promiscuous mode [ 1540.354548][ T3931] veth0_macvtap: left promiscuous mode [ 1540.360808][ T3931] veth1_vlan: left promiscuous mode [ 1540.366383][ T3931] veth0_vlan: left promiscuous mode [ 1541.029700][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 1541.056530][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 1541.414825][T12687] Bluetooth: hci2: command tx timeout [ 1541.467376][T17742] chnl_net:caif_netlink_parms(): no params data found [ 1542.311317][T12687] Bluetooth: hci0: command tx timeout [ 1542.388526][T12687] Bluetooth: hci8: command 0x0406 tx timeout [ 1542.393900][T17757] loop7: detected capacity change from 0 to 1024 [ 1542.578457][T17759] loop1: detected capacity change from 0 to 512 [ 1542.677975][T17759] ext3: Unknown parameter 'permit_directio' [ 1542.906755][ T3709] hfsplus: b-tree write err: -5, ino 4 [ 1543.149277][T17737] chnl_net:caif_netlink_parms(): no params data found [ 1543.458355][T15888] Bluetooth: hci2: command tx timeout [ 1543.944756][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.952875][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.967238][T17742] bridge_slave_0: entered allmulticast mode [ 1543.977026][T17742] bridge_slave_0: entered promiscuous mode [ 1544.389855][T15888] Bluetooth: hci0: command tx timeout [ 1544.497035][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.504741][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.512627][T17742] bridge_slave_1: entered allmulticast mode [ 1544.522369][T17742] bridge_slave_1: entered promiscuous mode [ 1545.508689][T15888] Bluetooth: hci2: command tx timeout [ 1545.522443][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.554220][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.646569][T17742] team0: Port device team_slave_0 added [ 1545.791599][T17742] team0: Port device team_slave_1 added [ 1545.866190][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.873831][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.881746][T17737] bridge_slave_0: entered allmulticast mode [ 1545.891026][T17737] bridge_slave_0: entered promiscuous mode [ 1546.155212][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.162482][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.188866][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.265459][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.272850][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.299466][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.867975][T17783] CIFS mount error: No usable UNC path provided in device string! [ 1546.867975][T17783] [ 1546.879332][T17783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1546.950229][T17742] hsr_slave_0: entered promiscuous mode [ 1546.959375][T17742] hsr_slave_1: entered promiscuous mode [ 1547.008988][T17785] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1547.115830][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.222275][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.230325][T17737] bridge_slave_1: entered allmulticast mode [ 1547.245984][T17737] bridge_slave_1: entered promiscuous mode [ 1547.546126][T17786] loop4: detected capacity change from 0 to 256 [ 1547.805540][T17786] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1548.000610][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.027552][T17787] @0Ù: renamed from bond_slave_1 (while UP) [ 1548.087426][T17782] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1548.106018][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.343511][T17737] team0: Port device team_slave_0 added [ 1548.436650][T17737] team0: Port device team_slave_1 added [ 1548.853454][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.861552][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.891274][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.210348][T17791] loop7: detected capacity change from 0 to 1024 [ 1549.265147][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.273991][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.300078][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.312590][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.257843][T17737] hsr_slave_0: entered promiscuous mode [ 1550.266821][T17737] hsr_slave_1: entered promiscuous mode [ 1550.274688][T17737] debugfs: 'hsr0' already exists in 'hsr' [ 1550.280675][T17737] Cannot create hsr debugfs directory [ 1550.331954][T16549] hfsplus: b-tree write err: -5, ino 4 [ 1551.592062][T17742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1551.616142][T17742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1551.642739][T17742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1551.674424][T17742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1551.833442][T17804] binder: 17802:17804 ioctl 4018620d 0 returned -22 [ 1553.257590][T17737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1553.341182][T17737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1553.451703][T17737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1553.518625][T17737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1553.559769][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.705601][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.835641][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.843235][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.180503][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.188009][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.333525][T17742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.558929][T17820] CIFS mount error: No usable UNC path provided in device string! [ 1554.558929][T17820] [ 1554.558996][T17820] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1554.926016][T17820] loop4: detected capacity change from 0 to 256 [ 1555.127086][T17823] overlayfs: failed to resolve './file0': -2 [ 1555.157435][T17820] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1555.784629][T17737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.074853][T17737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.178011][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.185688][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.295700][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.303123][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.065717][T17833] loop7: detected capacity change from 0 to 1024 [ 1558.303516][T17396] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1558.514920][ T3709] hfsplus: b-tree write err: -5, ino 4 [ 1558.542682][T17396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.553671][T17396] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1558.563266][T17396] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1558.572518][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.684096][T17396] usb 5-1: config 0 descriptor?? [ 1558.752527][T17396] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1558.759504][T17396] dvb-usb: bulk message failed: -22 (3/0) [ 1558.849039][T17396] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1558.925219][T17836] dibusb: i2c wr: len=61 is too big! [ 1558.925219][T17836] [ 1558.978607][T17396] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1558.985793][T17396] usb 5-1: media controller created [ 1559.069308][T17396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1559.173086][T17396] dvb-usb: bulk message failed: -22 (6/0) [ 1559.179323][T17396] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1559.289806][T17396] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 1559.351018][T17396] dvb-usb: schedule remote query interval to 150 msecs. [ 1559.358535][T17396] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1559.499777][T17396] usb 5-1: USB disconnect, device number 28 [ 1559.806867][T17396] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1560.122724][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.178029][T17842] binder: 17841:17842 ioctl 4018620d 0 returned -22 [ 1560.913031][T17737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.532831][T17737] veth0_vlan: entered promiscuous mode [ 1563.646134][T17737] veth1_vlan: entered promiscuous mode [ 1564.520047][T17737] veth0_macvtap: entered promiscuous mode [ 1564.596156][T17742] veth0_vlan: entered promiscuous mode [ 1564.658123][T17742] veth1_vlan: entered promiscuous mode [ 1564.706809][T17737] veth1_macvtap: entered promiscuous mode [ 1565.107136][T17742] veth0_macvtap: entered promiscuous mode [ 1565.147626][T17742] veth1_macvtap: entered promiscuous mode [ 1565.441534][T17737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.629814][T17866] CIFS mount error: No usable UNC path provided in device string! [ 1565.629814][T17866] [ 1565.640137][T17866] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1565.675287][T17737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.720476][ T997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.928600][T17866] loop7: detected capacity change from 0 to 256 [ 1565.964457][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.982753][ T3931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.227315][ T3931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.260739][ T997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.367289][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.746536][ T997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.873673][ T997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.908010][T17866] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1566.942835][ T997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.051430][ T997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.750438][ T9238] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1568.924685][ T9238] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1568.956543][T17880] loop7: detected capacity change from 0 to 1024 [ 1569.650262][T12687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1569.685035][T12687] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1569.701890][T12687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1569.717409][T12687] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1569.730515][T12687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1570.320401][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1570.322352][T17882] fido_id[17882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1570.754639][ T3931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.144025][ T3931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.242112][T17896] binder: 17893:17896 ioctl 4018620d 0 returned -22 [ 1571.444089][ T3931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.830577][T12687] Bluetooth: hci5: command tx timeout [ 1572.035104][ T3931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.806827][T17887] chnl_net:caif_netlink_parms(): no params data found [ 1572.861373][ T3931] bridge_slave_1: left allmulticast mode [ 1572.867245][ T3931] bridge_slave_1: left promiscuous mode [ 1572.874278][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.952590][ T3931] bridge_slave_0: left allmulticast mode [ 1572.958972][ T3931] bridge_slave_0: left promiscuous mode [ 1572.965549][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.579866][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.667745][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.728134][ T3931] bond0 (unregistering): Released all slaves [ 1573.909515][T12687] Bluetooth: hci5: command tx timeout [ 1574.545827][ T3931] hsr_slave_0: left promiscuous mode [ 1574.675133][ T3931] hsr_slave_1: left promiscuous mode [ 1574.688459][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.696045][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.761473][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1574.769313][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.863994][ T3931] veth1_macvtap: left promiscuous mode [ 1574.870211][ T3931] veth0_macvtap: left promiscuous mode [ 1574.876208][ T3931] veth1_vlan: left promiscuous mode [ 1574.885889][ T3931] veth0_vlan: left promiscuous mode [ 1575.651650][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 1575.675838][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 1575.996695][T12687] Bluetooth: hci5: command tx timeout [ 1576.201398][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.599726][ T3931] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.860256][ T3931] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.080326][ T3931] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.191295][T17887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.199628][T17887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.207179][T17887] bridge_slave_0: entered allmulticast mode [ 1577.215670][T17887] bridge_slave_0: entered promiscuous mode [ 1577.306178][ T3931] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.393152][T17887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.402264][T17887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.410472][T17887] bridge_slave_1: entered allmulticast mode [ 1577.420647][T17887] bridge_slave_1: entered promiscuous mode [ 1577.965446][T17887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.073659][T12687] Bluetooth: hci5: command tx timeout [ 1578.126701][T17887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.453894][ T3931] bridge_slave_1: left allmulticast mode [ 1578.459941][ T3931] bridge_slave_1: left promiscuous mode [ 1578.470311][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.576593][ T3931] bridge_slave_0: left allmulticast mode [ 1578.582551][ T3931] bridge_slave_0: left promiscuous mode [ 1578.589464][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.594834][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1579.019394][T17932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.166884][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.191592][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.212552][ T3931] bond0 (unregistering): Released all slaves [ 1579.281600][T17887] team0: Port device team_slave_0 added [ 1579.330134][T17887] team0: Port device team_slave_1 added [ 1579.678943][T17887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.686070][T17887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.713921][T17887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.756476][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.764719][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.878000][T17887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.885728][T17887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.885802][ T3816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.885914][ T3816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.916030][T17887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.145805][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.156067][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.279333][ T3931] hsr_slave_0: left promiscuous mode [ 1580.304032][ T3931] hsr_slave_1: left promiscuous mode [ 1580.317083][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.325635][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.353690][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.361703][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.393938][T17946] binder: 17945:17946 ioctl c0306201 0 returned -14 [ 1580.456914][ T3931] veth1_macvtap: left promiscuous mode [ 1580.464056][ T3931] veth0_macvtap: left promiscuous mode [ 1580.470189][ T3931] veth1_vlan: left promiscuous mode [ 1580.475719][ T3931] veth0_vlan: left promiscuous mode [ 1581.249292][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 1581.277940][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 1582.084496][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.092886][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.171269][T17887] hsr_slave_0: entered promiscuous mode [ 1582.181786][T17887] hsr_slave_1: entered promiscuous mode [ 1582.190808][T17887] debugfs: 'hsr0' already exists in 'hsr' [ 1582.196717][T17887] Cannot create hsr debugfs directory [ 1584.563333][T17887] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1584.635704][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3517'. [ 1584.662894][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1584.689421][T17887] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1584.762586][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1584.776727][T17966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.783921][T17887] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1584.886607][T17887] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1584.965438][T17976] binder: 17972:17976 ioctl c0306201 0 returned -14 [ 1586.270770][T17887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.510476][T17887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.596016][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.603712][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.616597][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.624008][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.081685][T17988] tipc: Enabling of bearer rejected, failed to enable media [ 1587.122015][T17887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1587.132822][T17887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.623396][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.777488][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.875526][T17887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.994956][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.169241][T18003] binder: 18002:18003 ioctl c0306201 0 returned -14 [ 1590.205897][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.872528][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1590.979695][ T59] bridge_slave_1: left allmulticast mode [ 1590.984352][T18015] syz.5.3534 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1590.985529][ T59] bridge_slave_1: left promiscuous mode [ 1591.002775][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.068463][ T59] bridge_slave_0: left allmulticast mode [ 1591.074295][ T59] bridge_slave_0: left promiscuous mode [ 1591.081018][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.313442][T18007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.365235][ T5855] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1591.810573][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.821334][ T5855] usb 5-1: device descriptor read/64, error -71 [ 1591.911089][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.944772][ T59] bond0 (unregistering): Released all slaves [ 1592.101197][ T5855] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1592.270633][ T5855] usb 5-1: device descriptor read/64, error -71 [ 1592.381604][ T5855] usb usb5-port1: attempt power cycle [ 1592.748869][ T59] hsr_slave_0: left promiscuous mode [ 1592.768772][ T5855] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1592.792098][ T5855] usb 5-1: device descriptor read/8, error -71 [ 1592.793554][ T59] hsr_slave_1: left promiscuous mode [ 1592.807285][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.814891][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.914562][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.922675][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.049427][ T5855] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1593.060953][ T59] veth1_macvtap: left promiscuous mode [ 1593.066669][ T59] veth0_macvtap: left promiscuous mode [ 1593.073064][ T59] veth1_vlan: left promiscuous mode [ 1593.078677][ T59] veth0_vlan: left promiscuous mode [ 1593.101181][ T5855] usb 5-1: device descriptor read/8, error -71 [ 1593.391948][ T5855] usb usb5-port1: unable to enumerate USB device [ 1593.970839][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1594.073842][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1595.286182][T18042] tipc: Started in network mode [ 1595.292129][T18042] tipc: Node identity 32c05b152fb2, cluster identity 4711 [ 1595.299988][T18042] tipc: Enabled bearer , priority 0 [ 1595.324042][T18042] syzkaller0: entered promiscuous mode [ 1595.330224][T18042] syzkaller0: entered allmulticast mode [ 1595.383424][T17887] veth0_vlan: entered promiscuous mode [ 1595.550527][T17887] veth1_vlan: entered promiscuous mode [ 1595.674751][T18042] tipc: Resetting bearer [ 1595.927005][T18041] tipc: Resetting bearer [ 1595.980026][T18041] tipc: Disabling bearer [ 1596.239859][T17887] veth0_macvtap: entered promiscuous mode [ 1596.329739][T17887] veth1_macvtap: entered promiscuous mode [ 1596.541530][T17887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.652022][T17887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.755144][T15967] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.780661][T15967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.861939][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.933751][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.257546][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1597.370144][T18049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.789294][ T9239] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1598.970344][ T9239] usb 6-1: device descriptor read/64, error -71 [ 1599.250004][ T9239] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1599.422334][ T9239] usb 6-1: device descriptor read/64, error -71 [ 1599.579639][ T9239] usb usb6-port1: attempt power cycle [ 1599.958951][ T9239] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1600.004740][ T9239] usb 6-1: device descriptor read/8, error -71 [ 1600.259867][ T9239] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1600.292072][T18081] tipc: Enabled bearer , priority 0 [ 1600.325783][T18081] syzkaller0: entered promiscuous mode [ 1600.331631][T18081] syzkaller0: entered allmulticast mode [ 1600.344557][ T9239] usb 6-1: device descriptor read/8, error -71 [ 1600.386781][T18081] tipc: Resetting bearer [ 1600.437435][T18080] tipc: Resetting bearer [ 1600.454137][T18080] tipc: Disabling bearer [ 1600.464401][ T9239] usb usb6-port1: unable to enumerate USB device [ 1601.669922][T18097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1601.874823][T18097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.021733][T18099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.075561][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1602.344026][ T9185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.352339][ T9185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.507378][T15967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.515600][T15967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.261402][T18109] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.3497'. [ 1603.770892][T18115] tipc: Started in network mode [ 1603.776130][T18115] tipc: Node identity 12e6dc028a0b, cluster identity 4711 [ 1603.784743][T18115] tipc: Enabled bearer , priority 0 [ 1603.842647][T18115] syzkaller0: entered promiscuous mode [ 1603.848522][T18115] syzkaller0: entered allmulticast mode [ 1603.935142][T18117] tipc: Resetting bearer [ 1604.011989][T18113] tipc: Resetting bearer [ 1604.043365][T18113] tipc: Disabling bearer [ 1604.589032][ T9239] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1604.770644][ T9239] usb 6-1: device descriptor read/64, error -71 [ 1605.021160][ T9239] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1605.179243][ T9239] usb 6-1: device descriptor read/64, error -71 [ 1605.293416][ T9239] usb usb6-port1: attempt power cycle [ 1605.422549][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1605.545313][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1605.651016][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1605.683002][ T9239] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1605.694550][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3576'. [ 1605.742679][ T9239] usb 6-1: device descriptor read/8, error -71 [ 1606.002172][ T9239] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1606.040893][ T9239] usb 6-1: device descriptor read/8, error -71 [ 1606.091101][T18139] loop9: detected capacity change from 0 to 164 [ 1606.150871][ T9239] usb usb6-port1: unable to enumerate USB device [ 1606.300209][T18140] Unsupported NM flag settings (8) [ 1606.794781][T18142] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1608.260563][T18151] tipc: Enabled bearer , priority 0 [ 1608.288593][T18151] syzkaller0: entered promiscuous mode [ 1608.294343][T18151] syzkaller0: entered allmulticast mode [ 1608.462736][T18151] tipc: Resetting bearer [ 1608.540412][T18150] tipc: Resetting bearer [ 1608.560250][T18150] tipc: Disabling bearer [ 1609.968337][T18166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.135987][T18169] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.3591'. [ 1610.246487][T18166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.323238][T18166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.366579][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3589'. [ 1610.788653][ T9239] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1610.836870][T15888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1610.851093][T15888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1610.860493][T15888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1610.891855][T15888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1610.903168][T15888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1610.949887][ T9239] usb 10-1: device descriptor read/64, error -71 [ 1611.222837][ T9239] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1611.392907][ T9239] usb 10-1: device descriptor read/64, error -71 [ 1611.535156][ T9239] usb usb10-port1: attempt power cycle [ 1612.018637][ T9239] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1612.099971][ T9239] usb 10-1: device descriptor read/8, error -71 [ 1612.364037][ T9239] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1612.427131][ T9239] usb 10-1: device descriptor read/8, error -71 [ 1612.539476][T18172] chnl_net:caif_netlink_parms(): no params data found [ 1612.565355][ T9239] usb usb10-port1: unable to enumerate USB device [ 1612.949259][T12687] Bluetooth: hci1: command tx timeout [ 1613.836962][T18192] tipc: Enabled bearer , priority 0 [ 1613.891385][T18195] syzkaller0: entered promiscuous mode [ 1613.903156][T18195] syzkaller0: entered allmulticast mode [ 1614.099507][T18192] tipc: Resetting bearer [ 1614.267349][T18191] tipc: Resetting bearer [ 1614.341529][T18191] tipc: Disabling bearer [ 1614.457629][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.465096][T18172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.472817][T18172] bridge_slave_0: entered allmulticast mode [ 1614.481229][T18172] bridge_slave_0: entered promiscuous mode [ 1614.676308][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.684080][T18172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.692083][T18172] bridge_slave_1: entered allmulticast mode [ 1614.702005][T18172] bridge_slave_1: entered promiscuous mode [ 1614.814807][T18201] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 1615.028469][T12687] Bluetooth: hci1: command tx timeout [ 1615.094086][ T3709] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.107846][T18205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.205292][T18172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.315089][ T3709] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.348724][T18206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.414498][T18172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.492683][T18206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.514047][ T3709] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.521311][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3603'. [ 1615.750271][ T3709] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.874493][T18172] team0: Port device team_slave_0 added [ 1615.892685][T18172] team0: Port device team_slave_1 added [ 1615.993384][T18172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.001988][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.028989][T18172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.084621][T18172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.092666][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.119195][T18172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.731400][ T3709] bridge_slave_1: left allmulticast mode [ 1616.737279][ T3709] bridge_slave_1: left promiscuous mode [ 1616.744265][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.832005][ T3709] bridge_slave_0: left allmulticast mode [ 1616.837882][ T3709] bridge_slave_0: left promiscuous mode [ 1616.847912][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.112170][T12687] Bluetooth: hci1: command tx timeout [ 1617.704889][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.731651][ T9238] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1617.746466][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.766694][ T3709] bond0 (unregistering): Released all slaves [ 1617.819434][T18172] hsr_slave_0: entered promiscuous mode [ 1617.830099][T18172] hsr_slave_1: entered promiscuous mode [ 1617.838971][T18172] debugfs: 'hsr0' already exists in 'hsr' [ 1617.844877][T18172] Cannot create hsr debugfs directory [ 1617.889858][ T9238] usb 10-1: device descriptor read/64, error -71 [ 1617.897374][T18232] syzkaller0: entered promiscuous mode [ 1617.903189][T18232] syzkaller0: entered allmulticast mode [ 1617.971145][T18228] tipc: Enabled bearer , priority 0 [ 1618.164654][T18226] tipc: Resetting bearer [ 1618.206019][ T9238] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1618.283862][T18225] tipc: Resetting bearer [ 1618.322954][T18225] tipc: Disabling bearer [ 1618.359262][ T9238] usb 10-1: device descriptor read/64, error -71 [ 1618.500043][ T9238] usb usb10-port1: attempt power cycle [ 1618.662188][ T3709] hsr_slave_0: left promiscuous mode [ 1618.682093][ T3709] hsr_slave_1: left promiscuous mode [ 1618.697520][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.705184][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.720746][T18238] binder: 18237:18238 ioctl c0306201 0 returned -14 [ 1618.781176][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1618.790494][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.859661][ T3709] veth1_macvtap: left promiscuous mode [ 1618.865400][ T3709] veth0_macvtap: left promiscuous mode [ 1618.872807][ T3709] veth1_vlan: left promiscuous mode [ 1618.878523][ T3709] veth0_vlan: left promiscuous mode [ 1618.906838][ T9238] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1619.060255][T18240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.201792][T12687] Bluetooth: hci1: command tx timeout [ 1619.322263][ T9238] usb 10-1: device descriptor read/8, error -71 [ 1619.410019][T18246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.557630][T18247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.577587][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3617'. [ 1619.587007][ T9238] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1619.610843][ T9238] usb 10-1: device descriptor read/8, error -71 [ 1619.722280][ T9238] usb usb10-port1: unable to enumerate USB device [ 1619.795135][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 1619.869534][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 1621.398419][T18262] tipc: Enabled bearer , priority 0 [ 1621.404342][T18265] binder: 18263:18265 ioctl c0306201 0 returned -14 [ 1621.412627][T18262] syzkaller0: entered promiscuous mode [ 1621.412732][T18262] syzkaller0: entered allmulticast mode [ 1621.557522][T18262] tipc: Resetting bearer [ 1621.643392][T18261] tipc: Resetting bearer [ 1621.667298][T18261] tipc: Disabling bearer [ 1622.253569][T18172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1622.276972][T18172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1622.305166][T18172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1622.362314][T18172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1622.983203][T18282] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1623.192848][T18172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.324041][T18172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.422489][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.430164][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.518373][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.525872][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1623.577097][T18287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1624.309779][T15888] Bluetooth: hci3: command 0x0406 tx timeout [ 1625.023422][T18299] binder: 18298:18299 ioctl c0306201 0 returned -14 [ 1625.150685][T18172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.622921][T18172] veth0_vlan: entered promiscuous mode [ 1625.703060][T18172] veth1_vlan: entered promiscuous mode [ 1625.796640][T18305] tipc: Enabled bearer , priority 0 [ 1625.846224][T18305] syzkaller0: entered promiscuous mode [ 1625.852142][T18305] syzkaller0: entered allmulticast mode [ 1625.952118][T18305] tipc: Resetting bearer [ 1626.039270][T18304] tipc: Resetting bearer [ 1626.082747][T18304] tipc: Disabling bearer [ 1626.208507][T18172] veth0_macvtap: entered promiscuous mode [ 1626.265347][T18172] veth1_macvtap: entered promiscuous mode [ 1626.412941][T18172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.494715][T18172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.589893][T15967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.645690][ T3816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.716221][ T3816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.802131][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.921169][T18315] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1627.876732][T18322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.509818][T18343] tipc: Enabled bearer , priority 0 [ 1629.530471][T18343] syzkaller0: entered promiscuous mode [ 1629.536145][T18343] syzkaller0: entered allmulticast mode [ 1629.612173][T18343] tipc: Resetting bearer [ 1629.642339][T18342] tipc: Resetting bearer [ 1629.679169][T18342] tipc: Disabling bearer [ 1630.215918][T18351] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3657'. [ 1631.081723][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.090292][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.200500][T15965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.209562][T15965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.043191][T18365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.007373][T18379] tipc: Started in network mode [ 1633.012979][T18379] tipc: Node identity 9eac5d29cb67, cluster identity 4711 [ 1633.021892][T18379] tipc: Enabled bearer , priority 0 [ 1633.060042][T18380] syzkaller0: entered promiscuous mode [ 1633.065987][T18380] syzkaller0: entered allmulticast mode [ 1633.240687][T18379] tipc: Resetting bearer [ 1633.330322][T18375] tipc: Resetting bearer [ 1633.391786][T18375] tipc: Disabling bearer [ 1635.248497][T17396] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1635.606152][T17396] usb 1-1: Using ep0 maxpacket: 8 [ 1635.619482][T17396] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1635.627796][T17396] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.638442][T17396] usb 1-1: config 0 has no interface number 0 [ 1635.644779][T17396] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1635.654839][T17396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.756997][T18410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1635.836864][T17396] usb 1-1: config 0 descriptor?? [ 1635.853091][T17396] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1636.075623][T14685] usb 1-1: USB disconnect, device number 46 [ 1636.561988][T18418] tipc: Started in network mode [ 1636.567133][T18418] tipc: Node identity e68e107b2cf, cluster identity 4711 [ 1636.575440][T18418] tipc: Enabled bearer , priority 0 [ 1636.727438][T18418] syzkaller0: entered promiscuous mode [ 1636.739916][T18418] syzkaller0: entered allmulticast mode [ 1636.875535][T18418] tipc: Resetting bearer [ 1636.997303][T18417] tipc: Resetting bearer [ 1637.040228][T18417] tipc: Disabling bearer [ 1637.617930][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1638.207355][T18434] Bluetooth: MGMT ver 1.23 [ 1638.212161][T18434] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1639.137907][T18449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.388677][T14685] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1639.602164][T14685] usb 6-1: Using ep0 maxpacket: 8 [ 1639.625107][T14685] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1639.633505][T14685] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.643973][T14685] usb 6-1: config 0 has no interface number 0 [ 1639.650382][T14685] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1639.659704][T14685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.829529][T14685] usb 6-1: config 0 descriptor?? [ 1639.867577][T14685] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1640.064228][T14685] usb 6-1: USB disconnect, device number 32 [ 1640.256338][T18458] tipc: Enabled bearer , priority 0 [ 1640.301715][T18458] syzkaller0: entered promiscuous mode [ 1640.307396][T18458] syzkaller0: entered allmulticast mode [ 1640.363311][T18458] tipc: Resetting bearer [ 1640.377918][T18457] tipc: Resetting bearer [ 1640.396373][T18457] tipc: Disabling bearer [ 1641.514648][T18474] 9pnet_virtio: no channels available for device syz [ 1642.474782][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.951687][T18492] tipc: Enabled bearer , priority 0 [ 1642.993451][T18492] syzkaller0: entered promiscuous mode [ 1642.999377][T18492] syzkaller0: entered allmulticast mode [ 1643.074686][T18492] tipc: Resetting bearer [ 1643.139389][T18490] tipc: Resetting bearer [ 1643.172022][T18490] tipc: Disabling bearer [ 1643.418769][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3716'. [ 1643.598956][T14685] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1643.800597][T14685] usb 1-1: Using ep0 maxpacket: 8 [ 1643.839233][T14685] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1643.847562][T14685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.858525][T14685] usb 1-1: config 0 has no interface number 0 [ 1643.864814][T14685] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.875936][T14685] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1643.889310][T14685] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1643.902078][T14685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.123782][T14685] usb 1-1: config 0 descriptor?? [ 1644.160178][T14685] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1644.391812][T17396] usb 1-1: USB disconnect, device number 47 [ 1644.959192][T17396] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1645.284219][T17396] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1645.292951][T17396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.303390][T17396] usb 5-1: config 0 has no interfaces? [ 1645.309148][T17396] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1645.318507][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.410620][T17396] usb 5-1: config 0 descriptor?? [ 1645.521550][T18524] tipc: Started in network mode [ 1645.526751][T18524] tipc: Node identity 5a99ed9f2afc, cluster identity 4711 [ 1645.534622][T18524] tipc: Enabled bearer , priority 0 [ 1645.588106][T18524] syzkaller0: entered promiscuous mode [ 1645.594148][T18524] syzkaller0: entered allmulticast mode [ 1645.667508][T18524] tipc: Resetting bearer [ 1645.690634][T18522] tipc: Resetting bearer [ 1645.707694][T18522] tipc: Disabling bearer [ 1645.727396][T14685] usb 5-1: USB disconnect, device number 33 [ 1646.022234][T18530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.923070][ T30] audit: type=1800 audit(1761079059.487:1634): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3732" name="bus" dev="overlay" ino=93 res=0 errno=0 [ 1648.062760][T18553] tipc: Enabled bearer , priority 0 [ 1648.103514][T18553] syzkaller0: entered promiscuous mode [ 1648.109331][T18553] syzkaller0: entered allmulticast mode [ 1648.144633][T17396] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1648.215850][T18553] tipc: Resetting bearer [ 1648.259898][T18552] tipc: Resetting bearer [ 1648.321631][T18552] tipc: Disabling bearer [ 1648.328562][T17396] usb 1-1: Using ep0 maxpacket: 8 [ 1648.361583][T17396] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1648.370280][T17396] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.380753][T17396] usb 1-1: config 0 has no interface number 0 [ 1648.386945][T17396] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1648.398354][T17396] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1648.413464][T17396] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1648.423664][T17396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.471255][T17396] usb 1-1: config 0 descriptor?? [ 1648.488696][T17396] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1648.705749][T17396] usb 1-1: USB disconnect, device number 48 [ 1649.869719][T18569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.391921][T18592] tipc: Enabled bearer , priority 0 [ 1651.435410][T18592] syzkaller0: entered promiscuous mode [ 1651.441303][T18592] syzkaller0: entered allmulticast mode [ 1651.553377][T18597] tipc: Resetting bearer [ 1651.611683][T18591] tipc: Resetting bearer [ 1651.647692][T18591] tipc: Disabling bearer [ 1653.662840][T18622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.272228][T18634] tipc: Enabled bearer , priority 0 [ 1654.290106][T18634] syzkaller0: entered promiscuous mode [ 1654.296016][T18634] syzkaller0: entered allmulticast mode [ 1654.365017][T18634] tipc: Resetting bearer [ 1654.393931][T18633] tipc: Resetting bearer [ 1654.456357][T18633] tipc: Disabling bearer [ 1656.827134][T18666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1657.016573][T18667] tipc: Enabled bearer , priority 0 [ 1657.071022][T18664] syzkaller0: entered promiscuous mode [ 1657.076715][T18664] syzkaller0: entered allmulticast mode [ 1657.099518][T18669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1657.209818][T12687] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1657.215205][T18667] tipc: Resetting bearer [ 1657.374139][T18663] tipc: Resetting bearer [ 1657.493569][T18663] tipc: Disabling bearer [ 1658.863695][T15888] Bluetooth: Wrong link type (-57) [ 1659.159711][T18697] fuse: Bad value for 'fd' [ 1659.319071][T14685] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1659.534149][T14685] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1659.545553][T14685] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1659.556028][T14685] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1659.565399][T14685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.662447][T18694] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1659.702872][T14685] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1659.986514][T14685] usb 1-1: USB disconnect, device number 49 [ 1660.055538][T18699] loop9: detected capacity change from 0 to 2048 [ 1660.149507][T15888] Bluetooth: hci0: command 0x0406 tx timeout [ 1660.199313][T18699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1660.373545][T17194] udevd[17194]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.505483][T18706] tipc: Enabling of bearer rejected, failed to enable media [ 1660.597858][T18708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1660.609143][T18708] block device autoloading is deprecated and will be removed. [ 1661.073090][T18713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1662.647942][T18736] loop9: detected capacity change from 0 to 2048 [ 1662.759094][T18736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1663.593873][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3820'. [ 1663.954574][T18750] tipc: Enabled bearer , priority 0 [ 1664.050127][T18750] syzkaller0: entered promiscuous mode [ 1664.055873][T18750] syzkaller0: entered allmulticast mode [ 1664.150183][T18754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.219155][T18750] tipc: Resetting bearer [ 1664.305665][T18749] tipc: Resetting bearer [ 1664.368857][T18749] tipc: Disabling bearer [ 1665.193482][T18767] loop9: detected capacity change from 0 to 2048 [ 1665.334256][T18767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1665.969706][T18779] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3834'. [ 1666.518679][T14685] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1666.738816][T14685] usb 10-1: Using ep0 maxpacket: 8 [ 1666.784609][T14685] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1666.793722][T14685] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1666.804082][T14685] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1666.814220][T14685] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1666.824654][T14685] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1666.832654][T18789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1666.839981][T14685] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1666.858483][T14685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.071233][T18792] fuse: Bad value for 'fd' [ 1667.192942][T18793] tipc: Enabled bearer , priority 0 [ 1667.251002][T14685] usb 10-1: usb_control_msg returned -32 [ 1667.251651][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1667.256924][T14685] usbtmc 10-1:16.0: can't read capabilities [ 1667.290738][T18793] syzkaller0: entered promiscuous mode [ 1667.296410][T18793] syzkaller0: entered allmulticast mode [ 1667.366512][T18794] tipc: Resetting bearer [ 1667.424196][T18790] tipc: Resetting bearer [ 1667.491356][T18790] tipc: Disabling bearer [ 1667.625037][T18801] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0 [ 1667.833631][T14685] usb 10-1: USB disconnect, device number 24 [ 1667.980807][T18803] loop4: detected capacity change from 0 to 2048 [ 1668.170682][T18803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1668.706692][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3848'. [ 1669.390571][T18819] fuse: Bad value for 'fd' [ 1669.719118][T14685] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1669.811721][T18826] tipc: Enabling of bearer rejected, failed to enable media [ 1669.952496][T14685] usb 10-1: Using ep0 maxpacket: 8 [ 1669.998867][T14685] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1670.009351][T14685] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1670.021385][T14685] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1670.031684][T14685] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1670.045355][T14685] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1670.054784][T14685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.088589][T18832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1670.385480][T14685] usb 10-1: GET_CAPABILITIES returned 2f [ 1670.391638][T14685] usbtmc 10-1:16.0: can't read capabilities [ 1670.591979][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1670.614718][T14685] usb 10-1: USB disconnect, device number 25 [ 1671.032758][T18840] 9pnet_virtio: no channels available for device syz [ 1671.056627][T18841] 9pnet_virtio: no channels available for device syz [ 1671.600839][T18843] loop0: detected capacity change from 0 to 2048 [ 1671.740185][T18843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1671.843524][T18847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3862'. [ 1672.716369][T18852] fuse: Bad value for 'fd' [ 1673.564559][T18865] tipc: Enabled bearer , priority 0 [ 1673.575658][T18865] syzkaller0: entered promiscuous mode [ 1673.579957][T18864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1673.581618][T18865] syzkaller0: entered allmulticast mode [ 1673.681757][T18865] tipc: Resetting bearer [ 1673.766484][T18862] tipc: Resetting bearer [ 1673.791689][T18862] tipc: Disabling bearer [ 1674.653577][T18881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1674.759175][T18880] loop7: detected capacity change from 0 to 2048 [ 1674.856118][T18880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1675.586222][T18889] sd 0:0:1:0: PR command failed: 1026 [ 1675.593421][T18889] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1675.601338][T18889] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1675.726063][T18897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1676.800332][T18902] tipc: Enabled bearer , priority 0 [ 1676.833138][T18902] syzkaller0: entered promiscuous mode [ 1676.839222][T18902] syzkaller0: entered allmulticast mode [ 1676.918498][T18902] tipc: Resetting bearer [ 1676.960208][T18901] tipc: Resetting bearer [ 1676.994389][T18901] tipc: Disabling bearer [ 1677.121690][T18910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1677.726715][T18919] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3891'. [ 1679.094828][T18931] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1679.133083][T18938] tipc: Enabled bearer , priority 0 [ 1679.155664][T18938] syzkaller0: entered promiscuous mode [ 1679.161545][T18938] syzkaller0: entered allmulticast mode [ 1679.271962][T18929] loop4: detected capacity change from 0 to 2048 [ 1679.309304][T18936] tipc: Resetting bearer [ 1679.383241][T18936] tipc: Disabling bearer [ 1679.629204][T18929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1680.192216][T18950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.612815][T18955] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1681.476536][T18965] tipc: Enabled bearer , priority 0 [ 1681.510146][T18965] syzkaller0: entered promiscuous mode [ 1681.515914][T18965] syzkaller0: entered allmulticast mode [ 1681.644116][T18964] tipc: Resetting bearer [ 1681.713320][T18964] tipc: Disabling bearer [ 1681.799211][T18972] 9pnet_virtio: no channels available for device syz [ 1683.102192][T18982] loop0: detected capacity change from 0 to 2048 [ 1683.173357][T18982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1683.386355][T18988] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1683.518869][T17396] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1683.854052][T17396] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1683.862899][T17396] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.873570][T17396] usb 10-1: config 0 has no interfaces? [ 1683.879504][T17396] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1683.888983][T17396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.023248][T18992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.036547][T17396] usb 10-1: config 0 descriptor?? [ 1684.312266][T17396] usb 10-1: USB disconnect, device number 26 [ 1685.467361][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1685.479841][T19005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1685.506191][T19005] erspan0: entered promiscuous mode [ 1686.364046][T19011] tipc: Enabled bearer , priority 0 [ 1686.452429][T19017] syzkaller0: entered promiscuous mode [ 1686.458410][T19017] syzkaller0: entered allmulticast mode [ 1686.671736][T19010] tipc: Resetting bearer [ 1686.723027][T19010] tipc: Disabling bearer [ 1687.889079][T19026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1688.999437][T19036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1689.878847][T17396] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1690.086290][T17396] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1690.095310][T17396] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.105841][T17396] usb 1-1: config 0 has no interfaces? [ 1690.111723][T17396] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.121558][T17396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.461507][T17396] usb 1-1: config 0 descriptor?? [ 1690.777175][T14685] usb 1-1: USB disconnect, device number 50 [ 1694.497994][T19075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.758586][T14685] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1695.988624][T15888] Bluetooth: hci5: command 0x0406 tx timeout [ 1696.056431][T14685] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1696.064971][T14685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.075484][T14685] usb 1-1: config 0 has no interfaces? [ 1696.081269][T14685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1696.090680][T14685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.204879][T14685] usb 1-1: config 0 descriptor?? [ 1696.501824][T14685] usb 1-1: USB disconnect, device number 51 [ 1699.096752][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.387969][T19117] loop4: detected capacity change from 0 to 256 [ 1700.249477][T19115] loop0: detected capacity change from 0 to 2048 [ 1700.472530][T19117] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1700.649459][T19115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1700.687592][T19111] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1701.024141][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.624495][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054612000: rx timeout, send abort [ 1701.635782][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054612000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1702.698779][T17396] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1702.906475][T19135] syzkaller1: entered promiscuous mode [ 1702.913968][T19135] syzkaller1: entered allmulticast mode [ 1702.952981][T17396] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1702.963429][T17396] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1702.977343][T17396] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1702.988505][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.337883][T17396] usb 5-1: usb_control_msg returned -32 [ 1703.344091][T17396] usbtmc 5-1:16.0: can't read capabilities [ 1704.490837][T19146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1705.516890][T17396] usb 5-1: USB disconnect, device number 34 [ 1706.254120][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3980'. [ 1706.292099][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3983'. [ 1706.970839][T19161] loop4: detected capacity change from 0 to 256 [ 1707.027563][T19157] loop9: detected capacity change from 0 to 2048 [ 1707.287700][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.838664][T19157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1707.873233][T19161] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1708.129041][T19160] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1709.848864][T17396] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1710.157261][T17396] usb 10-1: Using ep0 maxpacket: 8 [ 1710.250340][T17396] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1710.260608][T17396] usb 10-1: config 0 has no interface number 0 [ 1710.267018][T17396] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1710.279005][T17396] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1710.291077][T17396] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1710.302565][T17396] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1710.305492][T19181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1710.313542][T17396] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1710.335006][T17396] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1710.344670][T17396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.621324][T17396] usb 10-1: config 0 descriptor?? [ 1710.771042][T17396] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1711.042462][T19175] ldusb 10-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1711.199030][T17396] usb 10-1: USB disconnect, device number 27 [ 1711.228039][T17396] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1713.919622][T19209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.645842][T19216] CIFS mount error: No usable UNC path provided in device string! [ 1714.645842][T19216] [ 1714.656418][T19216] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1715.670905][T19225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1717.059646][T19234] netlink: 'syz.5.4007': attribute type 1 has an invalid length. [ 1717.067584][T19234] netlink: 'syz.5.4007': attribute type 2 has an invalid length. [ 1719.071346][T19259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.217386][T19268] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1720.976734][T19274] CIFS mount error: No usable UNC path provided in device string! [ 1720.976734][T19274] [ 1720.987730][T19274] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1721.375676][T19274] loop9: detected capacity change from 0 to 256 [ 1721.617537][T19274] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1721.705502][T19269] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 1724.064061][T19307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.358548][T19314] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1724.913405][T19316] overlayfs: invalid origin (0000) [ 1725.561011][T19320] CIFS mount error: No usable UNC path provided in device string! [ 1725.561011][T19320] [ 1725.571298][T19320] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1727.054859][T19341] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1728.275537][T19356] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1728.351955][T19357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1729.889662][T19372] CIFS mount error: No usable UNC path provided in device string! [ 1729.889662][T19372] [ 1729.900194][T19372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1730.052482][T19375] loop4: detected capacity change from 0 to 256 [ 1730.189350][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4056'. [ 1730.462395][T19375] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1730.559618][T19371] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1732.635362][T19398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1733.330333][T19407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.782600][T19410] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1734.480622][T19415] 9pnet_virtio: no channels available for device syz [ 1734.560189][T19415] ceph: No source [ 1734.764885][T19405] loop4: detected capacity change from 0 to 65536 [ 1734.851933][T19405] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1735.053274][T19405] XFS (loop4): Ending clean mount [ 1735.058636][T19405] XFS (loop4): Quotacheck needed: Please wait. [ 1735.213319][T19405] XFS (loop4): Quotacheck: Done. [ 1735.307056][T19427] loop7: detected capacity change from 0 to 256 [ 1735.741352][T19427] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1735.873541][T17209] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1735.944894][T19418] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 1736.951120][T19429] Bluetooth: hci1: command 0x0406 tx timeout [ 1738.295905][T19452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1738.481565][T19455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1740.107399][T19457] loop7: detected capacity change from 0 to 65536 [ 1740.206062][T19457] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1740.274651][T14685] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1740.482316][T19457] XFS (loop7): Ending clean mount [ 1740.485181][T14685] usb 5-1: Using ep0 maxpacket: 8 [ 1740.494135][T19457] XFS (loop7): Quotacheck needed: Please wait. [ 1740.509556][T14685] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.521175][T14685] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.531535][T14685] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1740.538476][T14685] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1740.549045][T14685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.634892][T19457] XFS (loop7): Quotacheck: Done. [ 1740.636904][T14685] usb 5-1: config 0 descriptor?? [ 1740.798006][T17581] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1741.066998][T19480] CIFS mount error: No usable UNC path provided in device string! [ 1741.066998][T19480] [ 1741.079207][T19480] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1741.140133][T19465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.150175][T19465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.186367][T14685] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1741.194129][T14685] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1741.201943][T14685] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1741.209694][T14685] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1741.217328][T14685] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1741.263999][T14685] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1741.492751][T19479] loop9: detected capacity change from 0 to 256 [ 1741.585766][T14685] usb 5-1: USB disconnect, device number 35 [ 1742.003806][T19479] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1742.052490][T19477] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 1743.917307][T19498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4097'. [ 1745.665998][T19502] loop9: detected capacity change from 0 to 65536 [ 1745.788833][T19502] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1746.097979][T19502] XFS (loop9): Ending clean mount [ 1746.107948][T19502] XFS (loop9): Quotacheck needed: Please wait. [ 1746.291165][T19502] XFS (loop9): Quotacheck: Done. [ 1746.454826][T17887] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1746.990536][T19529] CIFS mount error: No usable UNC path provided in device string! [ 1746.990536][T19529] [ 1747.001096][T19529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1750.306629][T19558] loop0: detected capacity change from 0 to 65536 [ 1750.509174][T19558] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1750.715064][T19558] XFS (loop0): Ending clean mount [ 1750.724909][T19558] XFS (loop0): Quotacheck needed: Please wait. [ 1750.820490][T19558] XFS (loop0): Quotacheck: Done. [ 1751.003749][T18172] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1751.902703][T19580] Bluetooth: hci0: unsupported parameter 255 [ 1751.909079][T19580] Bluetooth: hci0: unsupported parameter 255 [ 1752.759518][T19588] CIFS mount error: No usable UNC path provided in device string! [ 1752.759518][T19588] [ 1752.770262][T19588] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1752.814055][T19583] loop0: detected capacity change from 0 to 256 [ 1753.523871][T19593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1753.524743][T19583] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1753.709291][T19583] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1757.802770][T19623] Bluetooth: hci0: unsupported parameter 255 [ 1757.809338][T19623] Bluetooth: hci0: unsupported parameter 255 [ 1760.787225][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.979375][T19639] CIFS mount error: No usable UNC path provided in device string! [ 1760.979375][T19639] [ 1760.989991][T19639] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1761.203512][T19641] loop4: detected capacity change from 0 to 256 [ 1761.710306][T19641] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1761.889674][T19633] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1762.702564][T19650] ip6gre1: entered promiscuous mode [ 1762.707900][T19650] ip6gre1: entered allmulticast mode [ 1763.429509][T19663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 1766.509396][T19686] CIFS mount error: No usable UNC path provided in device string! [ 1766.509396][T19686] [ 1766.520497][T19686] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1767.987599][T19705] fuse: Bad value for 'fd' [ 1770.196561][T19717] loop9: detected capacity change from 0 to 65536 [ 1770.291461][T19717] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1770.310916][T19722] CIFS mount error: No usable UNC path provided in device string! [ 1770.310916][T19722] [ 1770.321663][T19722] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1770.403375][T19717] XFS (loop9): Ending clean mount [ 1770.412892][T19717] XFS (loop9): Quotacheck needed: Please wait. [ 1770.446931][T19722] loop0: detected capacity change from 0 to 256 [ 1770.508740][T19717] XFS (loop9): Quotacheck: Done. [ 1770.629530][T19722] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1770.661256][T17887] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1770.707422][T19722] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1771.880081][T19740] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1772.034911][T19744] fuse: Bad value for 'fd' [ 1774.295510][T19754] loop4: detected capacity change from 0 to 65536 [ 1774.381784][T19754] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1774.476265][T19761] cifs: Unknown parameter 'xœìÜ ¸OU÷8ðµöÞ‡ëfø&™ÏÚëðM†M’„’dH’$$sB’$I’¸dJB2Þ$sÈœnºæyÈœtóJ’$$$Ùÿç6üýz‡Ÿ÷}ýþú¿w}žç<örÎÚgí»žï' [ 1774.507117][T19771] loop0: detected capacity change from 0 to 256 [ 1774.557831][T19754] XFS (loop4): Ending clean mount [ 1774.580112][T19754] XFS (loop4): Quotacheck needed: Please wait. [ 1774.639118][T19754] XFS (loop4): Quotacheck: Done. [ 1774.801859][T17209] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1774.854610][T19771] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1774.950400][T19760] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1776.043261][T19783] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1776.184381][T19786] fuse: Bad value for 'fd' [ 1778.521312][T19809] CIFS mount error: No usable UNC path provided in device string! [ 1778.521312][T19809] [ 1778.531632][T19809] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1778.641468][T19811] loop7: detected capacity change from 0 to 256 [ 1778.766300][T19811] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1778.813718][T19809] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 1778.869631][T19813] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1782.219375][T19844] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1782.382116][T19845] CIFS mount error: No usable UNC path provided in device string! [ 1782.382116][T19845] [ 1782.392399][T19845] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1782.486414][T19845] loop0: detected capacity change from 0 to 256 [ 1782.743861][T19845] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1782.849896][T19845] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1785.089221][T19878] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1787.182797][T19894] CIFS mount error: No usable UNC path provided in device string! [ 1787.182797][T19894] [ 1787.193044][T19894] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1789.024361][T19911] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1793.250032][T19955] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1798.149850][T19998] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1798.890282][T20006] fuse: Bad value for 'fd' [ 1799.049443][T20009] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1799.429044][T14685] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1799.638654][T14685] usb 1-1: Using ep0 maxpacket: 8 [ 1799.679513][T14685] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1799.687958][T14685] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1799.698458][T14685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1799.708567][T14685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1799.718930][T14685] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.732557][T14685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1799.741958][T14685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.398714][T14685] usb 1-1: usb_control_msg returned -32 [ 1800.404694][T14685] usbtmc 1-1:16.0: can't read capabilities [ 1800.785478][T20022] usbtmc 1-1:16.0: INITIATE_CLEAR returned 82 [ 1801.012052][T17396] usb 1-1: USB disconnect, device number 52 [ 1802.508485][T20024] loop9: detected capacity change from 0 to 65536 [ 1802.640378][T20024] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1803.036548][T20024] XFS (loop9): Ending clean mount [ 1803.069591][T20024] XFS (loop9): Quotacheck needed: Please wait. [ 1803.201391][T20038] fuse: blksize only supported for fuseblk [ 1803.449913][T20024] XFS (loop9): Quotacheck: Done. [ 1803.734859][T17887] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1804.140315][T20039] CIFS mount error: No usable UNC path provided in device string! [ 1804.140315][T20039] [ 1804.151099][T20039] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1804.356498][T20042] loop4: detected capacity change from 0 to 256 [ 1805.089031][T20042] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1805.414727][T20039] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1808.919119][T17396] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1809.328713][T17396] usb 5-1: Using ep0 maxpacket: 8 [ 1809.598805][T17396] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1809.607371][T17396] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1809.617639][T17396] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1809.627839][T17396] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1809.638132][T17396] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1809.651794][T17396] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1809.661239][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.487452][T20071] loop7: detected capacity change from 0 to 65536 [ 1810.663226][T20071] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1810.769035][T17396] usb 5-1: usb_control_msg returned -32 [ 1810.774911][T17396] usbtmc 5-1:16.0: can't read capabilities [ 1811.061093][T20071] XFS (loop7): Ending clean mount [ 1811.084274][T20071] XFS (loop7): Quotacheck needed: Please wait. [ 1811.184508][T20071] XFS (loop7): Quotacheck: Done. [ 1811.487394][T17581] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1811.540716][T20086] usbtmc 5-1:16.0: INITIATE_CLEAR returned 2e [ 1811.854789][T17396] usb 5-1: USB disconnect, device number 36 [ 1812.022484][T20088] fuse: Bad value for 'fd' [ 1812.400110][T20091] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1816.000492][T20106] CIFS mount error: No usable UNC path provided in device string! [ 1816.000492][T20106] [ 1816.000598][T20106] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1816.094029][T20106] loop4: detected capacity change from 0 to 256 [ 1817.857289][T20106] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1819.152980][T20114] loop9: detected capacity change from 0 to 65536 [ 1819.321721][T20114] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1819.612868][T20114] XFS (loop9): Ending clean mount [ 1819.633406][T20114] XFS (loop9): Quotacheck needed: Please wait. [ 1819.746807][T20114] XFS (loop9): Quotacheck: Done. [ 1819.998997][T17887] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1820.856429][T20130] fuse: Bad value for 'fd' [ 1821.951153][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1826.875215][T20166] CIFS mount error: No usable UNC path provided in device string! [ 1826.875215][T20166] [ 1826.885933][T20166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1828.811012][T20177] sit0: entered promiscuous mode [ 1828.836889][T20177] netlink: 'syz.5.4349': attribute type 1 has an invalid length. [ 1828.845078][T20177] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1831.359761][T20204] CIFS mount error: No usable UNC path provided in device string! [ 1831.359761][T20204] [ 1831.370150][T20204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1831.601343][T20209] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1833.239533][T20206] loop0: detected capacity change from 0 to 65536 [ 1833.387644][T20206] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1833.726309][T20206] XFS (loop0): Ending clean mount [ 1833.784378][T20206] XFS (loop0): Quotacheck needed: Please wait. [ 1833.874055][T20206] XFS (loop0): Quotacheck: Done. [ 1834.905559][T18172] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1836.052478][T20251] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1836.080148][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.357517][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.456996][T20253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.539378][T20252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1837.349102][ T9238] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1837.459809][T20263] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4378'. [ 1837.531220][ T9238] usb 5-1: Using ep0 maxpacket: 8 [ 1837.593538][ T9238] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1837.603414][ T9238] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1837.613774][ T9238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1837.624060][ T9238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1837.634492][ T9238] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1837.649520][ T9238] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1837.659564][ T9238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.175271][ T9238] usb 5-1: usb_control_msg returned -32 [ 1838.181326][ T9238] usbtmc 5-1:16.0: can't read capabilities [ 1840.383476][T20270] loop9: detected capacity change from 0 to 65536 [ 1840.459241][T20270] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1840.823470][T20270] XFS (loop9): Ending clean mount [ 1840.858146][T20270] XFS (loop9): Quotacheck needed: Please wait. [ 1840.942584][T20270] XFS (loop9): Quotacheck: Done. [ 1841.163912][ T9238] usb 5-1: USB disconnect, device number 37 [ 1841.173450][T17887] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1841.790982][T14685] IPVS: starting estimator thread 0... [ 1841.910825][T20292] IPVS: using max 240 ests per chain, 12000 per kthread [ 1842.829746][T20298] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1845.402053][T20312] 9pnet_fd: p9_fd_create_tcp (20312): problem connecting socket to 127.0.0.1 [ 1847.452966][T20333] bridge_slave_0: left allmulticast mode [ 1847.459166][T20333] bridge_slave_0: left promiscuous mode [ 1847.465853][T20333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.630221][T20333] bridge_slave_1: left allmulticast mode [ 1847.636197][T20333] bridge_slave_1: left promiscuous mode [ 1847.643804][T20333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.899796][T20333] bond0: (slave bond_slave_0): Releasing backup interface [ 1848.247308][T20333] bond0: (slave c@0Ù): Releasing backup interface [ 1848.353361][T20333] team0: Port device team_slave_0 removed [ 1848.546655][T20333] team0: Port device team_slave_1 removed [ 1848.558096][T20333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.565967][T20333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.677327][T20333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.685224][T20333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.781454][T20333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1848.895266][T20334] team0: Mode changed to "loadbalance" [ 1848.905323][T20335] vlan0: entered promiscuous mode [ 1848.940551][T20335] team0: Port device vlan0 added [ 1849.325613][T20350] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1850.343637][ T9238] IPVS: starting estimator thread 0... [ 1850.448821][T20356] IPVS: using max 240 ests per chain, 12000 per kthread [ 1851.851753][T20372] 9pnet_virtio: no channels available for device syz [ 1857.205183][T20421] overlayfs: failed to clone upperpath [ 1859.065416][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1859.432901][ T9238] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1859.628791][ T9238] usb 10-1: Using ep0 maxpacket: 8 [ 1859.699064][ T9238] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1859.707588][ T9238] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1859.717897][ T9238] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1859.728391][ T9238] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1859.738904][ T9238] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.752408][ T9238] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1859.763637][ T9238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.329091][ T9238] usb 10-1: usb_control_msg returned -32 [ 1860.335052][ T9238] usbtmc 10-1:16.0: can't read capabilities [ 1860.450261][ T9238] usb 10-1: USB disconnect, device number 28 [ 1861.111920][T20448] fuse: Bad value for 'fd' [ 1862.312145][T20464] 9pnet_virtio: no channels available for device syz [ 1866.095489][T20497] fuse: Bad value for 'fd' [ 1868.510353][ T5855] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1868.718691][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 1868.772556][ T5855] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1868.781123][ T5855] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1868.791309][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1868.801374][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1868.811653][ T5855] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1868.825092][ T5855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1868.834623][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.219167][ T5855] usb 5-1: GET_CAPABILITIES returned 0 [ 1869.224954][ T5855] usbtmc 5-1:16.0: can't read capabilities [ 1870.017604][T20537] fuse: blksize only supported for fuseblk [ 1871.650055][T20548] 9pnet_virtio: no channels available for device syz [ 1874.480710][T20567] fuse: blksize only supported for fuseblk [ 1874.679321][T20526] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 1875.029354][ T9238] usb 5-1: USB disconnect, device number 38 [ 1875.446487][T20572] overlayfs: failed to resolve './file0': -2 [ 1876.146476][T20579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1879.783385][T20616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.912015][T20628] loop6: detected capacity change from 0 to 7 [ 1881.037055][T20630] support for cryptoloop has been removed. Use dm-crypt instead. [ 1881.124083][T20628] Dev loop6: unable to read RDB block 7 [ 1881.130408][T20628] loop6: unable to read partition table [ 1881.136953][T20628] loop6: partition table beyond EOD, truncated [ 1881.143811][T20628] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1881.290607][ T5855] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1881.508753][ T5855] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1881.520275][ T5855] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.530916][ T5855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1881.537785][ T5855] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1881.547365][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.696366][ T5855] usb 5-1: config 0 descriptor?? [ 1882.169511][ T5855] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1882.176847][ T5855] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1882.186105][ T5855] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1882.193641][ T5855] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1882.201035][ T5855] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1882.235280][ T5855] mcp2221 0003:04D8:00DD.000E: USB HID vff.fd Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1882.393837][ T5855] usb 5-1: USB disconnect, device number 39 [ 1883.380201][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.606708][T20652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1884.001095][ T9238] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1884.176256][ T9238] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1884.236129][ T9238] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1884.245663][ T9238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1884.254371][ T9238] usb 5-1: Product: syz [ 1884.258825][ T9238] usb 5-1: Manufacturer: syz [ 1884.263617][ T9238] usb 5-1: SerialNumber: syz [ 1884.513580][ T9238] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1886.738791][ T9238] usb 5-1: USB disconnect, device number 40 [ 1886.776965][ T9238] usblp0: removed [ 1887.872564][T20684] overlayfs: failed to clone upperpath [ 1887.904729][T20686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1888.269231][T20691] fuse: blksize only supported for fuseblk [ 1888.474958][ T5855] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1888.641141][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 1888.680610][ T5855] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1888.689408][ T5855] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1888.698056][ T5855] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1888.707613][ T5855] usb 5-1: config 250 has no interface number 0 [ 1888.714357][ T5855] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1888.726411][ T5855] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1888.738102][ T5855] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1888.748808][ T5855] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1888.759396][ T5855] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1888.773835][ T5855] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1888.874561][T20694] uprobe: syz.9.4544:20694 failed to unregister, leaking uprobe [ 1888.944677][ T5855] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1888.954377][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1888.963228][ T5855] usb 5-1: Product: syz [ 1888.967580][ T5855] usb 5-1: SerialNumber: syz [ 1889.007767][ T5855] hub 5-1:250.228: bad descriptor, ignoring hub [ 1889.014900][ T5855] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1889.231865][ T5855] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1889.529199][ T5855] usb 5-1: USB disconnect, device number 41 [ 1889.542854][ T5855] usblp0: removed [ 1889.918582][ T5855] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1890.110353][ T5855] usb 5-1: config 0 has no interfaces? [ 1890.121589][ T5855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1890.131088][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1890.139909][ T5855] usb 5-1: SerialNumber: syz [ 1890.190287][ T5855] usb 5-1: config 0 descriptor?? [ 1890.391461][T20716] fuse: blksize only supported for fuseblk [ 1890.415082][ T9238] usb 5-1: USB disconnect, device number 42 [ 1890.724123][T20721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1891.962078][T20733] fuse: Bad value for 'fd' [ 1892.894440][T20743] fuse: blksize only supported for fuseblk [ 1893.379982][T20750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1893.861641][T20758] fuse: Bad value for 'fd' [ 1893.977294][T20759] bond1: entered promiscuous mode [ 1894.242913][T20764] netlink: 'syz.0.4575': attribute type 13 has an invalid length. [ 1894.264654][T20764] veth0_macvtap: left promiscuous mode [ 1894.296336][T20764] macvtap0: entered promiscuous mode [ 1894.302232][T20764] macvtap0: entered allmulticast mode [ 1894.762872][T20771] fuse: blksize only supported for fuseblk [ 1895.680361][T20787] fuse: Bad value for 'fd' [ 1895.794308][T20789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1896.932666][T20811] 9pnet_virtio: no channels available for device syz [ 1897.458683][ T9238] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1897.665501][ T9238] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1897.677162][ T9238] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.687589][ T9238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1897.694677][ T9238] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1897.704080][ T9238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.721058][ T9238] usb 1-1: config 0 descriptor?? [ 1898.162651][ T9238] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1898.170184][ T9238] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1898.177488][ T9238] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1898.185077][ T9238] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1898.192626][ T9238] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1898.305794][ T9238] mcp2221 0003:04D8:00DD.000F: USB HID vff.fd Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1898.435340][ T9238] usb 1-1: USB disconnect, device number 53 [ 1898.447398][T20828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1898.642799][T19429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1898.656943][T19429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1898.669497][T19429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1898.684872][T19429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1898.698119][T19429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1899.649437][T20830] chnl_net:caif_netlink_parms(): no params data found [ 1900.792629][T12687] Bluetooth: hci2: command tx timeout [ 1901.213283][T20830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.221126][T20830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.228867][T20830] bridge_slave_0: entered allmulticast mode [ 1901.237901][T20830] bridge_slave_0: entered promiscuous mode [ 1901.268098][T20862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1901.338416][T20830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.346172][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.354219][T20830] bridge_slave_1: entered allmulticast mode [ 1901.364135][T20830] bridge_slave_1: entered promiscuous mode [ 1901.576605][T20830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.601888][T20830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.769335][T20830] team0: Port device team_slave_0 added [ 1901.800622][T20830] team0: Port device team_slave_1 added [ 1902.075513][T20872] netlink: 'syz.7.4623': attribute type 10 has an invalid length. [ 1902.169340][T20871] team0: Port device vlan2 added [ 1902.191907][T20830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.199209][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.225325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.231829][T20830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.326219][T20872] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1902.364874][T20830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.372256][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.398918][T20830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.828551][T20830] hsr_slave_0: entered promiscuous mode [ 1902.838912][T20830] hsr_slave_1: entered promiscuous mode [ 1902.896471][T12687] Bluetooth: hci2: command tx timeout [ 1904.180357][T20892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1904.595186][T20830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1904.655552][T20830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1904.737726][T20830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1904.782441][T20830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1904.948880][T12687] Bluetooth: hci2: command tx timeout [ 1905.869724][T20830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1905.970836][T20830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.040752][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.048439][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.162353][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.170002][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.043464][T12687] Bluetooth: hci2: command tx timeout [ 1907.051613][T20916] sit0: entered promiscuous mode [ 1907.070587][T20916] netlink: 'syz.7.4642': attribute type 1 has an invalid length. [ 1907.078728][T20916] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1908.196423][T20830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.625577][T20830] veth0_vlan: entered promiscuous mode [ 1908.746162][T20830] veth1_vlan: entered promiscuous mode [ 1909.104538][T20830] veth0_macvtap: entered promiscuous mode [ 1909.165651][T20830] veth1_macvtap: entered promiscuous mode [ 1909.376462][T20830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.481237][T20830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.573426][T20948] sit0: entered promiscuous mode [ 1909.596434][T20948] netlink: 'syz.4.4654': attribute type 1 has an invalid length. [ 1909.604543][T20948] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1909.643750][ T3931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.696027][ T3931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.728055][ T3931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.775904][ T3931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.902566][T20964] ===================================================== [ 1910.910099][T20964] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0 [ 1910.917329][T20964] eth_type_trans+0x7af/0x9a0 [ 1910.922397][T20964] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 1910.928550][T20964] do_xdp_generic+0xd52/0x1690 [ 1910.933515][T20964] tun_get_user+0x45be/0x6d70 [ 1910.938599][T20964] tun_chr_write_iter+0x3e9/0x5c0 [ 1910.943880][T20964] vfs_write+0xbe2/0x15d0 [ 1910.948618][T20964] __ia32_sys_write+0x1f9/0x4d0 [ 1910.953774][T20964] ia32_sys_call+0x35bc/0x4310 [ 1910.958891][T20964] __do_fast_syscall_32+0xb0/0x150 [ 1910.964286][T20964] do_fast_syscall_32+0x38/0x80 [ 1910.969452][T20964] do_SYSENTER_32+0x1f/0x30 [ 1910.974201][T20964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1910.981228][T20964] [ 1910.983633][T20964] Uninit was stored to memory at: [ 1910.989161][T20964] pskb_expand_head+0x310/0x1610 [ 1910.994352][T20964] do_xdp_generic+0xa79/0x1690 [ 1910.999409][T20964] tun_get_user+0x45be/0x6d70 [ 1911.004260][T20964] tun_chr_write_iter+0x3e9/0x5c0 [ 1911.009612][T20964] vfs_write+0xbe2/0x15d0 [ 1911.014115][T20964] __ia32_sys_write+0x1f9/0x4d0 [ 1911.019327][T20964] ia32_sys_call+0x35bc/0x4310 [ 1911.024334][T20964] __do_fast_syscall_32+0xb0/0x150 [ 1911.029827][T20964] do_fast_syscall_32+0x38/0x80 [ 1911.034888][T20964] do_SYSENTER_32+0x1f/0x30 [ 1911.039728][T20964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1911.046278][T20964] [ 1911.048852][T20964] Uninit was created at: [ 1911.053435][T20964] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 1911.060434][T20964] kmalloc_reserve+0x22f/0x4b0 [ 1911.065413][T20964] __alloc_skb+0x347/0x7d0 [ 1911.070102][T20964] alloc_skb_with_frags+0xc5/0xa60 [ 1911.075463][T20964] sock_alloc_send_pskb+0xacc/0xc60 [ 1911.081068][T20964] tun_get_user+0x1142/0x6d70 [ 1911.085929][T20964] tun_chr_write_iter+0x3e9/0x5c0 [ 1911.091280][T20964] vfs_write+0xbe2/0x15d0 [ 1911.095808][T20964] __ia32_sys_write+0x1f9/0x4d0 [ 1911.100964][T20964] ia32_sys_call+0x35bc/0x4310 [ 1911.105906][T20964] __do_fast_syscall_32+0xb0/0x150 [ 1911.111418][T20964] do_fast_syscall_32+0x38/0x80 [ 1911.116455][T20964] do_SYSENTER_32+0x1f/0x30 [ 1911.121328][T20964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1911.127924][T20964] [ 1911.130495][T20964] CPU: 0 UID: 0 PID: 20964 Comm: syz.7.4659 Not tainted syzkaller #0 PREEMPT(none) [ 1911.140199][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1911.150560][T20964] ===================================================== [ 1911.157646][T20964] Disabling lock debugging due to kernel taint [ 1911.164042][T20964] Kernel panic - not syncing: kmsan.panic set ... [ 1911.170594][T20964] CPU: 0 UID: 0 PID: 20964 Comm: syz.7.4659 Tainted: G B syzkaller #0 PREEMPT(none) [ 1911.181790][T20964] Tainted: [B]=BAD_PAGE [ 1911.186108][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1911.196268][T20964] Call Trace: [ 1911.199621][T20964] [ 1911.202627][T20964] __dump_stack+0x26/0x30 [ 1911.207152][T20964] dump_stack_lvl+0x53/0x270 [ 1911.211931][T20964] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1911.217946][T20964] dump_stack+0x1e/0x25 [ 1911.222228][T20964] vpanic+0x435/0xd30 [ 1911.226389][T20964] panic+0x15d/0x160 [ 1911.230486][T20964] kmsan_report+0x31c/0x320 [ 1911.235178][T20964] ? __do_fast_syscall_32+0xb0/0x150 [ 1911.240636][T20964] ? __msan_warning+0x1b/0x30 [ 1911.245467][T20964] ? eth_type_trans+0x7af/0x9a0 [ 1911.250491][T20964] ? bpf_prog_run_generic_xdp+0x126b/0x2000 [ 1911.256564][T20964] ? do_xdp_generic+0xd52/0x1690 [ 1911.261666][T20964] ? tun_get_user+0x45be/0x6d70 [ 1911.266680][T20964] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1911.272053][T20964] ? vfs_write+0xbe2/0x15d0 [ 1911.276707][T20964] ? __ia32_sys_write+0x1f9/0x4d0 [ 1911.281889][T20964] ? ia32_sys_call+0x35bc/0x4310 [ 1911.286998][T20964] ? __do_fast_syscall_32+0xb0/0x150 [ 1911.292454][T20964] ? do_fast_syscall_32+0x38/0x80 [ 1911.297639][T20964] ? do_SYSENTER_32+0x1f/0x30 [ 1911.302475][T20964] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1911.309159][T20964] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1911.315160][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.320450][T20964] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1911.326964][T20964] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1911.333210][T20964] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1911.339254][T20964] ? stack_depot_save_flags+0x615/0x7b0 [ 1911.345013][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.350313][T20964] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1911.356816][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.362119][T20964] __msan_warning+0x1b/0x30 [ 1911.366789][T20964] eth_type_trans+0x7af/0x9a0 [ 1911.371694][T20964] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 1911.377662][T20964] do_xdp_generic+0xd52/0x1690 [ 1911.382595][T20964] ? tun_get_user+0x4111/0x6d70 [ 1911.387602][T20964] ? filter_irq_stacks+0x49/0x190 [ 1911.392903][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.398234][T20964] ? tun_get_user+0x453d/0x6d70 [ 1911.403251][T20964] tun_get_user+0x45be/0x6d70 [ 1911.408101][T20964] ? stack_depot_save_flags+0x35/0x7b0 [ 1911.413719][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.419013][T20964] ? kmsan_get_metadata+0xfb/0x160 [ 1911.424312][T20964] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1911.430819][T20964] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1911.437138][T20964] tun_chr_write_iter+0x3e9/0x5c0 [ 1911.442351][T20964] vfs_write+0xbe2/0x15d0 [ 1911.446862][T20964] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1911.452591][T20964] __ia32_sys_write+0x1f9/0x4d0 [ 1911.457629][T20964] ia32_sys_call+0x35bc/0x4310 [ 1911.462555][T20964] __do_fast_syscall_32+0xb0/0x150 [ 1911.467854][T20964] do_fast_syscall_32+0x38/0x80 [ 1911.472876][T20964] do_SYSENTER_32+0x1f/0x30 [ 1911.477548][T20964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1911.484061][T20964] RIP: 0023:0xf7ff4539 [ 1911.488231][T20964] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1911.507993][T20964] RSP: 002b:00000000f54e6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1911.516561][T20964] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 1911.524646][T20964] RDX: 000000000000fdef RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 1911.532724][T20964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1911.540799][T20964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1911.548876][T20964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1911.556994][T20964] [ 1911.560369][T20964] Kernel Offset: disabled [ 1911.564743][T20964] Rebooting in 86400 seconds..