last executing test programs: 19m17.919462715s ago: executing program 32 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 18m22.602625737s ago: executing program 33 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000"], 0x54}}, 0x0) 17m24.523150259s ago: executing program 34 (id=503): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 16m59.924243211s ago: executing program 35 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000005c0)={0x8f, 0x0, 0x1a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m56.975436397s ago: executing program 36 (id=590): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000006c0)={0x1, 0x0, @pic={0xa, 0x2, 0x4, 0xc0, 0xcd, 0x9, 0xfa, 0x8, 0x33, 0x9, 0x2, 0x8, 0xa, 0x7, 0x4, 0x4}}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x41, 0x9, 0x1, 0x4, 0x3, 0x26, 0x40, 0x8, 0x80, 0x0, 0xf9, 0x8, 0x2, 0x40, 0x9, 0x8}}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x1, 0xc, 0x3, 0x7, 0x4, 0x84, 0x10, 0x1, 0x3, 0x1, 0x40, 0x1, 0x2}, {0x806, 0x50, 0x6, 0x2, 0x3, 0x8, 0x7f, 0x8, 0x19, 0x1, 0x5, 0x9}, {0x40, 0x0, 0xff, 0x2, 0x4, 0x5c, 0x0, 0x9, 0x14, 0x1b, 0xf9, 0x3, 0x100080000}], 0x100006}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x1, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3ffff, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m56.479127393s ago: executing program 37 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 16m52.784096143s ago: executing program 38 (id=599): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01c0c20000"], 0x0) 16m40.810468943s ago: executing program 39 (id=606): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x800084, 0x80800) socket(0x2, 0x80805, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x50) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 16m36.643960929s ago: executing program 40 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x100010, r3, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x196}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1c, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x206}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x921}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000045}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4048aecb, &(0x7f0000000040)=@arm64_extra={0x603000000013c02a, &(0x7f0000000080)=0x2}) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000440)={0x3ff, 0x2}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd00000000000019ba9c0000000000", @ANYRES32=r5, @ANYBLOB="0c005a800800038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 16m34.966400714s ago: executing program 41 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x4, 0x20000000, 0x5, 0x7}, 0x6, 0x5}, [{0x4b, 0x9ce, 0x6, 0x1, 0x9, 0x9}, {0x81, 0x7, 0x80000001, 0x1, 0x9f, 0x3}, {0x5, 0x5, 0x400, 0x4b13e0b0, 0x8, 0x9}, {0x4, 0x20, 0x4, 0x200, 0x8, 0x75}, {0x3, 0x5, 0x8, 0x6, 0xfcc4, 0x2}, {0x24, 0x80, 0x1fb979a6, 0x1, 0x180000, 0x401}, {0x1, 0xff, 0x9, 0xfffffffb, 0xb2e, 0x2}, {0x4, 0x0, 0x3, 0x1ff, 0xbb59, 0x4}, {0x3, 0x0, 0x81, 0x8, 0x0, 0x5}, {0x9, 0x2, 0x200, 0xe, 0xb370, 0x1}, {0x4, 0x3, 0x4, 0x8, 0x2, 0x8e}, {0x0, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x80000001, 0x0, 0x8001, 0x3}, {0x78d, 0x2, 0x2, 0x4, 0x4, 0x8}, {0x6, 0x100, 0x18f, 0x7, 0x0, 0x1}, {0x40, 0x4, 0x3, 0xffffffff, 0x9, 0x5}, {0xfffffeff, 0x9, 0x101, 0x2, 0xfffffbff, 0x9}, {0xffffffff, 0x0, 0x8, 0x3, 0x80000000, 0x2}, {0x81, 0x7, 0x1, 0x8, 0x101, 0x9}, {0x7, 0x5, 0x7d, 0x0, 0x0, 0x2}, {0xab, 0x40, 0x3, 0xfffffffd, 0x0, 0x3}, {0x4, 0x7, 0x6, 0x401, 0xfffffffe, 0x2}, {0x10001, 0xff, 0x0, 0x0, 0x5, 0x66a8}, {0x708c, 0x5, 0x401, 0x3, 0x0, 0x4}, {0x8, 0x0, 0x1, 0x5, 0x5, 0x7}, {0x3, 0xef60, 0x8, 0x7, 0xf4ec, 0x8400000}, {0x8, 0x7, 0x3, 0x8, 0x73, 0x91}, {0x7, 0x3, 0x0, 0xffffffff, 0x6, 0x7fd}, {0xa6fd, 0x4, 0x80000001, 0x1, 0xffffffe1, 0x401}, {0x3, 0x4024, 0x5, 0x5, 0xf, 0x2}, {0x1, 0x7, 0xc0, 0x7, 0x100, 0x2}, {0x1, 0x3, 0xffffff3a, 0xffffff0c, 0x4, 0x59d4}, {0x400, 0x5, 0x1ee, 0x4, 0x1, 0x91}, {0x2, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x296, 0x6, 0x5, 0x8, 0x5, 0xa}, {0xf54, 0xd3, 0x5, 0x60, 0x9, 0x10}, {0x200, 0xff, 0x9, 0x1, 0x4, 0x3}, {0x7, 0x80, 0xb, 0x0, 0x4, 0x200}, {0x3, 0x9, 0x7, 0x3, 0x3, 0x3}, {0x0, 0x10, 0x3ff, 0x3, 0x3, 0x4}, {0xd57, 0xffffffff, 0x7, 0x6, 0xe, 0xf}, {0x74c3, 0x4, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x3, 0x101, 0x2}, {0x7f, 0x2, 0x1, 0xb6b, 0x0, 0x5}, {0xffff, 0xb28, 0x7, 0x3, 0x3, 0x80000000}, {0x0, 0xfc3, 0x8, 0x0, 0xcc3, 0x101}, {0xf4cd, 0x4, 0x9, 0x9, 0x7fff, 0x9}, {0x6, 0x2, 0xb7, 0x1, 0x80000001, 0x6}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x1}, {0x7ff, 0x237, 0xdfc, 0xffff, 0x400, 0x3}, {0x3, 0x3, 0x800, 0x2, 0xebf, 0x6}, {0x3263, 0x7, 0x80000001, 0x8, 0xb, 0x9}, {0x8, 0x5, 0x5, 0x2, 0x1, 0x40}, {0x7fb, 0x400, 0x3, 0x400, 0x7, 0xa0a}, {0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0x8}, {0x487f, 0x800, 0x7ff, 0x6, 0x10001, 0x80000000}, {0x7fc, 0xd, 0x1ff, 0x6, 0xfffffff9, 0xffffff01}, {0x3, 0x3, 0x480, 0x8000, 0x8, 0x3}, {0x0, 0x8, 0x7, 0x5, 0x0, 0x101}, {0x5, 0x7, 0xd, 0x80000000, 0xffff, 0x2}, {0x4, 0x9, 0xfff, 0xffffff81, 0x0, 0x6f}, {0x3, 0x2, 0x6bfe1ad4, 0x3, 0x2, 0x8}, {0x2, 0x101, 0x80, 0xfff, 0x9, 0x9}, {0x25, 0x4, 0xfffffbff, 0x77cf, 0x800, 0x9}, {0x2, 0x4, 0x101, 0x5, 0x101, 0xd05}, {0xfffffffe, 0xd, 0x0, 0x5, 0x7, 0x7941}, {0x2, 0x7, 0x7, 0x40, 0x9, 0x6}, {0x2, 0x370, 0x1, 0x7, 0x7, 0x9}, {0x3, 0x9, 0xc688, 0x3, 0x80000001, 0x3}, {0x5, 0x8, 0x3, 0x6, 0x7fff, 0x3}, {0x0, 0x2, 0x8, 0x10, 0x2, 0x5b5}, {0x2, 0x5, 0x4, 0xa, 0x19, 0x4}, {0xfffffffc, 0x95, 0x8, 0x2028, 0x5, 0x7}, {0x30, 0x1, 0x5, 0x1, 0x4, 0x5}, {0x0, 0x968d, 0x101, 0x5c, 0xff, 0xff}, {0x7, 0x5, 0x9, 0x8, 0x0, 0x7}, {0x6, 0x8, 0x934, 0x9}, {0x0, 0x3, 0x2, 0x10000, 0xc, 0x101}, {0x4, 0x1, 0x6, 0x7, 0xf582, 0x7}, {0x2, 0x7, 0x5, 0xa6, 0x3, 0x3de8}, {0xb9, 0x1, 0x8001, 0x1, 0xe9, 0xb440}, {0x1ff, 0x6, 0x3928, 0x5, 0x80000000, 0x3ff}, {0x18, 0x7fff, 0x7, 0xff, 0x81, 0x1b2}, {0x5, 0x3, 0x1, 0xd, 0x1, 0x800}, {0xc, 0x2, 0x78fd, 0x7, 0x7ff, 0x4}, {0x5, 0x34e1, 0x3, 0x7fffffff, 0x4, 0xd}, {0x1, 0x800, 0x3, 0xff, 0x2, 0x6}, {0x1, 0x8f2, 0x5, 0x2800000, 0x2, 0x7}, {0x401, 0x7ff, 0x6, 0x2a7318d7, 0x9, 0xffffff80}, {0x80000, 0xbd, 0x8, 0x0, 0x3b, 0x6}, {0xcd, 0x800, 0x7, 0x5}, {0x2, 0xb, 0xffffffff, 0x3, 0x7, 0x9}, {0x5, 0x0, 0x7fffffff, 0xb, 0x7, 0x4}, {0x9, 0x8, 0x5, 0x1ff, 0x2, 0xfffffffb}, {0x9, 0x276, 0x9, 0xffff, 0x93}, {0x8095, 0xfffffff2, 0x3, 0x3, 0x7, 0x8}, {0x76d, 0x9, 0x7, 0x1004, 0x3, 0xd}, {0x5, 0x4, 0x69, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xfffffe01, 0x7, 0x8, 0x1}, {0x1, 0x7c4, 0x18e99bd9, 0x2, 0x9, 0x5}, {0x9, 0x2, 0x6, 0xfffffffb, 0x0, 0x441}, {0xffff0001, 0x5, 0x10000000, 0x9, 0x0, 0x200}, {0x2, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x9, 0x80000001, 0x3, 0x4, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x49, 0xffff, 0x1}, {0x9, 0x3877a981, 0x2, 0x5, 0x7c1e, 0x7}, {0x6, 0x7, 0x1, 0x37, 0x101, 0x6}, {0x5, 0x400, 0xcc, 0xa8, 0x200, 0x10}, {0x4, 0x101, 0x8000, 0x2b2b313a, 0x3, 0x9}, {0x9, 0x0, 0x6, 0x4, 0x4c14, 0x8}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xa0}, {0x8, 0xe5, 0x68e4, 0xc, 0x340a, 0x7fff}, {0x401, 0x7f, 0x0, 0x0, 0x3, 0x98000000}, {0x6, 0x58, 0x10, 0x1, 0x29, 0x40}, {0xfffffff7, 0xffad, 0x5, 0x5d, 0xff, 0xe8000000}, {0xfffffff8, 0x40f1b4ea, 0x10000, 0x5, 0x3, 0x3}, {0x3, 0xd26, 0x7, 0x7, 0x5, 0x2}, {0xffffffff, 0xfffe, 0x8, 0x7, 0x2, 0x5}, {0x1, 0x6, 0x4, 0x1, 0x3, 0x8}, {0x7, 0x1ff80, 0x2006, 0x36, 0x6, 0x9}, {0x5, 0x9, 0xb, 0xf1f5, 0x5, 0x2}, {0x4000000, 0x8, 0xfffffffa, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7f, 0x6, 0x0, 0xffff, 0x1}, {0x9, 0x2, 0x3, 0x9, 0x4, 0x5}, {0x1119, 0xd75, 0xf, 0x1, 0x5, 0x1}, {0x6, 0x401, 0x2, 0x5359, 0x80000001, 0x8}, {0xb, 0x6db, 0x7, 0x200, 0x80, 0x6}], [{0x3}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x46b716bf411929ed, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 13m15.083811696s ago: executing program 42 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 11m12.078532931s ago: executing program 43 (id=1327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 8m27.216855263s ago: executing program 44 (id=1553): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0xfd, @time={0x5}, {}, {0xe}, @queue={0x0, {0xfffffffc}}}], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m8.644444928s ago: executing program 45 (id=1829): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x80) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x8, 0x5}) 6m45.261440611s ago: executing program 46 (id=1909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket(0x29, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000400)=""/126, 0x7e, 0x0, &(0x7f0000000480)=""/12, 0xc}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="f72b00000000e6f5bd34ffc6585aa369c730b9afbb691c4c030a5049b388bf8923b6525654cd16e9b60093bfb9699d1098ec6e637366eeba0ad93817bbd948fa94a51d539986423507e54cb26a52d95fc7da1fa8addd8aab9c76a52f3872258c1f6863e1de50c333c1477aa32cfbf1a6003230f42794ff0e8860e232cd0c9663d2957dcd7018c59f3033cd1022f3784702883aaf20"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x8008700b, &(0x7f0000000140)={0x2, 0xfe, {0x0, 0x5, 0x0, 0xe, 0x0, 0x5c, 0x6, 0xde}}) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m18.648549249s ago: executing program 47 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x0, 0x2, 0x0, &(0x7f0000000200)=""/107, 0x0, 0x8080000}) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f00000000c0)=""/119, 0x77, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @time={0x8323, 0x344}, {0x0, 0x3}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfa, 0x94, 0xfe, @time={0x4, 0x80000007}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {}, {0x0, 0x6}, @time}], 0x70) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x200000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r5, 0xc0606610, &(0x7f0000000040)=0x60) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno', 0x4) 6m16.930696576s ago: executing program 48 (id=1993): socket$inet6(0xa, 0x2, 0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5m0.272749818s ago: executing program 49 (id=2108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x141040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0x9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 3m45.406771162s ago: executing program 50 (id=2272): syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x0, 0x158, 0xffffffff, 0x380, 0x0, 0x46c, 0x46c, 0xffffffff, 0x46c, 0x46c, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x4, 0x1, [0x6, 0xd3e, 0x228, 0x80, 0x7, 0x400, 0xff, 0x5, 0x7, 0x7f, 0xff, 0x9, 0x3a, 0x101, 0x3, 0xb63e], 0x8}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@mcast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e23, @port=0x4e23}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x16, @ipv6=@empty, @ipv4=@remote, @icmp_id=0x66, @gre_key=0x6}}}, {{@uncond, 0x0, 0xf4, 0x13c, 0x0, {}, [@common=@srh={{0x2c}, {0x3b, 0x4, 0x80, 0x4, 0x5f02, 0x64a, 0x2802}}, @common=@mh={{0x24}, {"a210"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e22, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, [0xffffffff, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xff0000ff], 'veth0\x00', 'macvlan1\x00', {0xff}, {}, 0x6, 0xff, 0x0, 0x26}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@local, @ipv4=@rand_addr=0x64010102, @icmp_id=0x66, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x56c) sendmsg$key(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc025}, 0x6081) r4 = socket(0x11, 0x3, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m40.494582452s ago: executing program 51 (id=2281): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$get_persistent(0x16, 0xee01, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa080006000100"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r3, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01090000000000000000010000001c000180060001000200000008000300ac1414aa080006000300"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc081}, 0x800) 3m40.041487927s ago: executing program 1 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m39.230991743s ago: executing program 1 (id=2288): r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0x6c, 0xf9, 0x7, '\v4z', 0x8, 0x7}]}}}, 0x13) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@multicast2}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r5, 0x0, 0xa002a0}, 0x38) io_setup(0xa, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r8, 0x8004510a, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.481240778s ago: executing program 1 (id=2289): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) tee(r0, 0xffffffffffffffff, 0x9, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f00000000c0)="0309207965b0ac", 0x7, 0x8186, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) openat$adsp1(0xffffff9c, &(0x7f00000001c0), 0x571f87cbb88e487b, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) 3m37.728031963s ago: executing program 52 (id=2289): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) tee(r0, 0xffffffffffffffff, 0x9, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f00000000c0)="0309207965b0ac", 0x7, 0x8186, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) openat$adsp1(0xffffff9c, &(0x7f00000001c0), 0x571f87cbb88e487b, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) 3m33.149131242s ago: executing program 53 (id=2296): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb4, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1401fcdb8c25000000000000000000377402007b517f0d2ff6acca5bde6fd80ed7cde05de140cbfdc3d6127fdfe35d3c57c2540d71d46c9ec5b71b184fb0cfd8fd4d99e674e746eedf21532b1ab228e99ad34ca50ae1e448c8d124624d01a83a0a5c1f47ed8d46a7647efacccd25bd71bd0332d436332dccccb0f4200427"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8010) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x400, 0x2, 0x180, 0x0, 0x1, 0xf1, 0xfd2c, 0x8000000000000, 0x2, 0x6, 0x57c673b4, 0x8000000000000001, 0x200000f46, 0x100000000, 0xbdb], 0xffff1001, 0x24000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) socket$netlink(0x10, 0x3, 0x0) 3m19.894935264s ago: executing program 3 (id=2274): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(0x0, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f0000000400)) 3m19.689859141s ago: executing program 3 (id=2298): write(0xffffffffffffffff, &(0x7f0000000440)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012cafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 3m19.388154771s ago: executing program 3 (id=2299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000280)="da0e83cf18262f4aa44dee90c0162f24dfd05b13b3f5b41ad7536bd3dd6fb038cdfdee93de2848e33a21b0fa068adac133ddcd172e05a1cac4bf92a6d48b8e2b8d16f1377d601184832c4c40381852e214891017871390dc1a23a80dbd89741904f5c857dca0bea24319f37f48e6f46f4c5d5815b44c0c6d3ad98682c7de77f9e73b44be058c54996838b8e8bf1aee07fdb9f2c2a0bf5321b59208b93e45eb09079e4625e44fe18fdff15c3c87e25fcfee6689f58e0e552ec477d6f8cbab") sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xc, 0x8, 0x801, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1}, [@typed={0x4, 0xfe}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x8, 0x8e}, {0x0, 0x5}}}, {0x4, 0x0, 0x0, 0x0, @tick, {}, {0xfe}, @queue={0xfe, {0x0, 0x2}}}], 0x38) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FITHAW(r4, 0xc0045878) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3m19.157213439s ago: executing program 3 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m18.795221651s ago: executing program 3 (id=2301): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe9, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001380)="7201cc576a0c42dc9734b695f6b360bbe06853a4f0703787e506b7a171e18f", 0x1f}], 0x1) 3m18.366419164s ago: executing program 2 (id=2283): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002cc0)) dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3m18.293320257s ago: executing program 3 (id=2302): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/215, 0x58}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 3m17.640549968s ago: executing program 54 (id=2302): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/215, 0x58}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 3m17.618531079s ago: executing program 2 (id=2304): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(0x0, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f0000000400)) 3m17.446106495s ago: executing program 2 (id=2305): write(0xffffffffffffffff, &(0x7f0000000440)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012cafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a468cfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 3m16.810834495s ago: executing program 2 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m16.549299784s ago: executing program 2 (id=2307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002880)={0x7, 0x8, 0xfa00, {r1, 0xe}}, 0x10) close_range(r0, r0, 0x0) 3m15.785310078s ago: executing program 2 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m15.170142879s ago: executing program 55 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m14.045029155s ago: executing program 5 (id=2290): socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m13.829820082s ago: executing program 5 (id=2310): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(0x0, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f0000000400)) 3m13.493320173s ago: executing program 5 (id=2311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x44, r1, 0x5eae78d9c54e9d3b, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c7c61d41089e7cc78dab1f7fa8af33cd"}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x44}}, 0x0) 3m13.139140215s ago: executing program 5 (id=2312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m12.805448056s ago: executing program 5 (id=2313): unshare(0x22020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0x7ff, 0x0) 3m11.326103855s ago: executing program 0 (id=2315): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x7fff, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3m11.178783159s ago: executing program 0 (id=2316): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x138, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x124, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m9.533420963s ago: executing program 0 (id=2317): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 3m9.389103958s ago: executing program 5 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x40000002, 0x7, 0x4, {0x3, 0x0, 0x400, 0x9, 0x5, 0x2}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0x1e4ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x40002, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x5, 0x6, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x8, 0x8, 0x8, 0x4000002, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x1, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0xd07, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x8, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x0, 0x6, 0x6f, 0x3f, 0x5, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x180, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x9, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0x8, 0x2, 0x6, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7dff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x8, 0x5, 0x4, 0x3ff, 0x2, 0x1, 0x2, 0x1, 0xfffffff4, 0x1, 0x2, 0x41, 0x1, 0x0, 0xfffffffa, 0x8, 0xd0c0, 0xb886, 0xc974, 0xfffff0bc, 0x5, 0x3, 0x1b4, 0x24f, 0x3, 0x10003, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0xfff, 0x5, 0x8, 0x6, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xfffffffc, 0x320, 0x9, 0x2, 0x6, 0x4, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff8, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0xa, 0x4, 0xa27d, 0x86b3, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x4, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 3m9.3069924s ago: executing program 0 (id=2319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m8.733841279s ago: executing program 56 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x40000002, 0x7, 0x4, {0x3, 0x0, 0x400, 0x9, 0x5, 0x2}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0x1e4ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x40002, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x5, 0x6, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x8, 0x8, 0x8, 0x4000002, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x1, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0xd07, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x8, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x0, 0x6, 0x6f, 0x3f, 0x5, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x180, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x9, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0x8, 0x2, 0x6, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7dff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x8, 0x5, 0x4, 0x3ff, 0x2, 0x1, 0x2, 0x1, 0xfffffff4, 0x1, 0x2, 0x41, 0x1, 0x0, 0xfffffffa, 0x8, 0xd0c0, 0xb886, 0xc974, 0xfffff0bc, 0x5, 0x3, 0x1b4, 0x24f, 0x3, 0x10003, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0xfff, 0x5, 0x8, 0x6, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xfffffffc, 0x320, 0x9, 0x2, 0x6, 0x4, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff8, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0xa, 0x4, 0xa27d, 0x86b3, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x4, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 3m8.7210759s ago: executing program 0 (id=2321): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 3m8.481392937s ago: executing program 0 (id=2322): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x7fff, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3m7.928280045s ago: executing program 57 (id=2322): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x7fff, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2m43.081338736s ago: executing program 6 (id=2346): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x208853, &(0x7f0000000680)={[{@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@delalloc}]}, 0x0, 0x523, &(0x7f0000000140)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@auto_da_alloc}, {@resgid}, {@orlov}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@errors_remount}, {@noinit_itable}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9//3WwRjqhQx24WQuXVv/TBCclyLDgd7P0GZlNF1Gk461Dtwu3I03MgQRB+IL8N7L4RvwVQx0MGQUvRChcpKTNuuSpu2yJS6fD5z2eXLO6XO+fc734TnnJCSAkXU8/ZGLeDkivk4iDrety0e28nhzu9VHN2bSJYm1tU/+SCLJXmttn2S/D2aVlyLily8jTuWebLe2vDJfqlTKi1l9or5wdaK2vHL68kJprjxXvjI1PX32rempd995u2+xvn7hr+8+vvfh2a9OrH7704Mjd5I4F4eyde1xPIWb7ZXjpX+yUiHObdpwsg+NDZNk0AfAroxleV6IdAw4HGNZ1gMvvi8iYg0YUYn8hxHVmge0ru03XwefHMis5Pl5+EHzAqgR+572+PPNeyOxr3FtdGA1eezKKL3eHe9D+2kbP/9+9066xNb3Ifb3qAPsyM1bEXEmn39y/E+y8W/3zjRuHm9tcxt9ug8LbMO9dP7zRqf5X259/hMd5j8HO+TubvTO/9yDPjTTVTr/e6/j/Hd96Bofy2r/a8z5Csmly5XymYj4f2N+XNib1rd6nnN29f5at3Xt8790SdtvzQWz43iQ3/v4PrOleiki9jxN3C0Pb0W8ku8Uf7Le/8l6/xc2jioiLmyzjWPlu6+uVzZNmnvH/2yt/RjxWsf+33iilWz9fHKicT5MtM6KJ/15+9iv3dofdPxp/x/YOv7xpP15bW3nbfyw7+9yt3W7Pf/3JJ82yq0kuF6q1xcnN/rssdenNvZt1ZvbN+M/eWLr8S/pMP6lF1+fbTP+20dvd910GPp/dkf9v/PC/Y8+/75b+9vr/zcbpda9iGz86yw7V7Z7gE/7/wMAAAAAAIBhkouIQ5HkiuvlXK5YbL6/42gcyFWqtfqpS9WlK7PR+KzseBRyrSfdh9veDzGZPdpv1ac21acj4khEfDO2v1EvzlQrs4MOHgAAAAAAAAAAAAAAAAAAAIbEwS6f/0/9NjboowOeucYXG+wd9FEAg9DzK//78U1PwFDqmf/AC0v+w+iS/zC65D+MLvkPo0v+w+iS/zC65D8AAAAAAAAAAAAAAAAAAAAAAAAAAAD01YXz59NlbfXRjZm0PntteWm+eu30bLk2X1xYminOVBevFueq1blKuThTXej19yrV6tXJqVi6PlEv1+oTteWViwvVpSv1i5cXSnPli+XCc4kKAAAAAAAAAAAAAAAAAAAA/ltqyyvzpUqlvKjQtfB+DMVhPMsAm3a1e35YolDoUriVde/O9hrgoAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm/wbAAD//0B/MmI=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2m41.889361935s ago: executing program 6 (id=2355): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) 2m40.885059578s ago: executing program 6 (id=2357): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0x40000010, 0x0, 0x8ff}, {0x256, 0x0, 0xa4}, {0xc0000101, 0x0, 0x7}, {0xa85, 0x0, 0x7}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400009d46a4a67877f3b34d00d5459d89818192f9ed0f94e7ed6440e963f72087e5497e636297e168373f6b4fa015cf13023c9010324c1456d02362562ede31b13e6900bf00bddf43d82a010000005dad0ec509d9f915357a25e22cdb2776f29b791f8fdc6107015929c9010023a83374acdc53ae6bee46f6bab0701cd3fe27b8c95ed332baea15a794a856857049084522b4f4a84b886698aa2cfc0f6dc44773c6d3f45bfc6631", @ANYRES8=r4, @ANYBLOB="270e28bd7000000000000407020067df512ee328ab1b08c3b0b262965cdae7b5c7ecadccfc554dd71942dc3847a8123416bfd84ded119eef8284e3596bbe833a433fd75fca31d7bd96"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x1}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x3e, 0x0, 0x3, 0xf5ff}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) socket$igmp(0x2, 0x3, 0x2) 2m37.307573485s ago: executing program 6 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(0x0, 0xa) 2m36.915804587s ago: executing program 6 (id=2370): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x8006}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m36.23336069s ago: executing program 6 (id=2375): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0x40000010, 0x0, 0x8ff}, {0x256, 0x0, 0xa4}, {0xc0000101, 0x0, 0x7}, {0xa85, 0x0, 0x7}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400009d46a4a67877f3b34d00d5459d89818192f9ed0f94e7ed6440e963f72087e5497e636297e168373f6b4fa015cf13023c9010324c1456d02362562ede31b13e6900bf00bddf43d82a010000005dad0ec509d9f915357a25e22cdb2776f29b791f8fdc6107015929c9010023a83374acdc53ae6bee46f6bab0701cd3fe27b8c95ed332baea15a794a856857049084522b4f4a84b886698aa2cfc0f6dc44773c6d3f45bfc6631", @ANYRES8=r4, @ANYBLOB="270e28bd7000000000000407020067df512ee328ab1b08c3b0b262965cdae7b5c7ecadccfc554dd71942dc3847a8123416bfd84ded119eef8284e3596bbe833a433fd75fca31d7bd96"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x1}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x3e, 0x0, 0x3, 0xf5ff}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) socket$igmp(0x2, 0x3, 0x2) 2m33.946967094s ago: executing program 58 (id=2375): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0x40000010, 0x0, 0x8ff}, {0x256, 0x0, 0xa4}, {0xc0000101, 0x0, 0x7}, {0xa85, 0x0, 0x7}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400009d46a4a67877f3b34d00d5459d89818192f9ed0f94e7ed6440e963f72087e5497e636297e168373f6b4fa015cf13023c9010324c1456d02362562ede31b13e6900bf00bddf43d82a010000005dad0ec509d9f915357a25e22cdb2776f29b791f8fdc6107015929c9010023a83374acdc53ae6bee46f6bab0701cd3fe27b8c95ed332baea15a794a856857049084522b4f4a84b886698aa2cfc0f6dc44773c6d3f45bfc6631", @ANYRES8=r4, @ANYBLOB="270e28bd7000000000000407020067df512ee328ab1b08c3b0b262965cdae7b5c7ecadccfc554dd71942dc3847a8123416bfd84ded119eef8284e3596bbe833a433fd75fca31d7bd96"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x1}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x3e, 0x0, 0x3, 0xf5ff}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) socket$igmp(0x2, 0x3, 0x2) 2m3.683579942s ago: executing program 1 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(0x0, 0xa) 2m2.694015595s ago: executing program 1 (id=2442): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) r4 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYBLOB="2c776664fac51e", @ANYRESHEX=r4, @ANYBLOB=',']) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001dc0)={&(0x7f0000000140), 0xc, &(0x7f0000001d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00r[', @ANYRES16=r5, @ANYBLOB="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"], 0x1054}, 0x1, 0x0, 0x0, 0x6080}, 0x8000) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000300)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x4192b07e18736d64, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x123500, 0x0) 2m1.93187016s ago: executing program 1 (id=2450): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0) 2m1.013080459s ago: executing program 59 (id=2450): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0) 9.515191149s ago: executing program 4 (id=3003): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB="2c776664fac51e", @ANYRESHEX=r3, @ANYBLOB=',']) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000001dc0)={&(0x7f0000000140), 0xc, &(0x7f0000001d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00r[', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf254b0000000410a80052232f69baeb9ba3397d4f7fb5a944c338697cac9a8626797f21bcf2dba2a5d9c864d23c1c882e75c643ed8106c000a3880e4b39734f1fc07920fd026956d47626b7a2283972fd7a11d736cf912e40bdcf3ff2dc83359dfa674b9cce5073e1f67009eda5e862ab84d6204feae0b56e732c3096e569d3c599f1046f810a0d5d7d98e415717ea2449ddffbb1647126f1025364acf7c6b85b07c20babec375d6ba65f317dcb4d32dfdc3cb865aa706d65596333125960769e89a84618ff23f282465aa94eb72c9657fe2c771d0da6ab2d56fe2623910faaa4ff4a14ec2ab3e3418c1bc0292d653c8b5f62de5d9d2d66e3656179741f915762937df96d32c0c7879430f002be3bea8576606d883cc966aefcec83b43117da4502086e54167e9f9c32ef6451619a825f11cec9c70d98bdbc2f58ca38f4c21e3d65a73d7c44af9a8261d57788c5e312de83ca1338357a83112324e79c6a06e575e4cf630faccb9a312933094990b440cbcedeaf945930c127aa7bfecc20ae598dac3c6022707bf53cd32880aef8838b79015a974ac676493944febf70967ab09a875cee9cb74b8ee7901f8b722b16ed3dd555c913252b92d531368b028d7769a32e06982e51b4383fd722c37efdbb12fcfc8d924a5592bb1dd5ceaa4ce9d3b56bb9bfe43460b5e6ac258cf25dcdb5340d6d0e9a9a3342fa23101af89ce9cdd17c96fcf58b5efbf6f332de91f87cbaefa7a4b32ac89c97f9a83bc55d11fa46006d7f0a700c00b0f03c75ab720934be372f5bd7d699abce1763c9ee7bd2fe838b6ade2ab7a08f5cdba0a88a036811cf72af519ae0a1a9139f2da8039026f5dd9df89ef9cda310ecb8f1644753505756a288ae621ee3c4550f5d6a92b0b6e317daba4bf09aa270fbd59af00f4e3be8a8dccf54ef29e129317b98c5e274ba2248a24bf2225899b41c4abf5ffca0e7a909782bab5e93bd2ee68b4bb6d01167f660b4e7a520f29863990d89463b2431eaf022ee794e55820f0722ab6b07b9a8e7d181acee00fd145462ef39b5bae31bca8b17534bb57149a586a7e9ff8a38e92385103bd078b987d190ada1834298c3e91cacadb84f62a0fbcc604f5765f1eb59f3587950eacb29ec8e193f03e414143e909dff99f6277eb3abdd463b9cce0419df62377970c4004d8e0fa47e8918a9383a0eebccbc8755cef63f410222ff23f96832052d4a081362709b335e99054f61df6213590b82096c769bb5dde7fb8468319ba5911cb6356164f2424dcee411506676ec8814b8a73a2db805f2bb4843fd06e64276916b6d91c4b4dc6d3c6a399d34262515065b8d13382e6ee346980bee8f7e5cfa0e6d3f88c817b57ec019a21c362c83c554b54bc824c0b704450745df447dcf2ad971c6fd0444f6d4ecb6b22c734a8207854ac38a9e9b3437752a79967b269fb039512894336d38088bfd630010c3e5909a8bdfb26466dfd70e45263b53c0dab4507db454340b37721ae4eea66bf05407e23520bba8abef0dad30fde8f3fc57bf7e2a88339a5703d22df99cb94dedcf46140af84347b120be7626027609b7a5e7c147e650c4e97220931a7cdde90fd6b95713a4aa5b18d6f9bbaa0095624ce11ec91882b95db311604ff12f43a060f77d67b6610379c7bb31c8a1e395dcd0541640b5480316cd6190f62359136fb637dd5633158031f15ce0fe635f173b2dc41fe2aa6b7acc2992b53797ef6191182dbe19f23295982581482f76fdb9f7f177745ff725479ebeb1c75380efedbc13d2be53bb9af7789d09d848a6d8facebe3da55f1efee0d55dfb31d85dd4830ea6d1fd43f67f0e207e24081af3f3c4b4f768068232ef78bfedad1afc3f2f175e41392909d38dbb77df773f2bc3ccbf2818de5504f78a83abe161a9f1c9fb89ff46470c30c8cf0edb83578d0b171c22ca88bd48ff9bdc88f0e83563573a101e23b770f4496143b3b11341d8117e736f36635fc184810033c49a1bba0dd0e8903362e6d84647cc2e97a4eeae2f530a0fa5d7da67416803f0131d45454972da1ea3c89c119e95843e4357cf838f1a1dc14575e481e56995851c6550f6e64dc53f794f86d0a1eb17e11682067ab1bc0021fd36a94a754f539687da72502d41c76330e3798c2c06325300a4b16c0f967ef6d3fe8a642ac14d5eab550b454282440d20f4d34400ed31360e434142cae34c63026ba1e06b837f4726d6fde422bc0f2af037bdbdbccefb133977f2f222411e74952d6c129bcfd091ff6db363f6deef3f0aab1f63a0c781281ee019d6d46a5f76af9ef6805e585d037c138be38a6f172de5b01858d4df4e40efd0c043a87d7563defe6bc172fdb677bee9855bbdff25df5f8b6a42f6a53da8dfb3a8c8eb0ab8dc8c8a216502ce7b66869b771ca7cc0d57fc751def7239ab4aa234dcbc6c4be9e4d648af5e5985e64828b677629e0bf807d11c2e3c958a14f19ef25e0ca0e6e3288c5b6d50e923a5749528e2566be1ffa081f5b31101d652cc5d430c3bf210d6a33485fab941740a48206134a89069a9eead0bdce19740427e50083609a9a2997f3ae513b6ee6b68fe60a1f979d9ba45dd7b2f29bad29d18176da71e2c5a1f76071b67ab1cb5e21599d2eb3e4573122fda8767ecc0ce35c6492e0846fc0aced8befd47507f829fa857851a11f134a8ee6d1d819c3a77dd677e82a01ca6d67e33cb244eb69b8ac3580d2e9ceabc82d894d3a518287494ffb92d573629b11e89bf4df73ee06f398028e889405d9992e693b823d396512ed2dc57e9dd298233c4eed7e0babe1d8b4ec29c33d79833f67c6a0d9b463df9c09c38975c698e88e1127b2e6a31ddb3bd95bdd88cbaad6bdc8977168a7234b397b5523d1984d612aa76f0a5775c5cf57904c766e9a38955aecc2f796bd196984ec6b34d9ff0e5c4c2ad2bee64918cc24a2dc65ee3a1fe1c576ee113cec0b6b4a2064d7e80661baa35d9db4314247a9e092634a0f2e0f84c6e2183a6ea94f4d823e735153d83574edcf20803d911cb17811b94729f394e897e4edbf9b2d18b506cb3d6b69bc75cdcd5800bf0d8be6207bdf6258d547f853f63e6a92403e10c736986d69284208f0dfea04c2a01122bc3446590b89b0b9a1f8f0ec8c9f917a18137bba847c9a2173104f15d43561954f5a98bd6596a75c1b4f14af1d387f91292fdd98fb16cf31a41b16ce0490b0708aff77614f781e2c54b8807f2dbbad574d359fb3d9c8c34839976956503a0acd83681131bd8d890a07ddeb7cdec1b954ccf2f254f699bc55ff6a197b105c21b2ff01d350edc03165384d0bab5fd0b92ce224c5f1e645142ad9f033b976d6f3c109fd8487be3a663bc878b35795d38c8357b755cf291e4fe1cea5c44c5b72ce54e354c2e2f5677722be7b885e0b60eb5f26357c399e47bd543f82b17ce15dfc5887abcd4b13657944035961b5d861f027935a5d60d933473acdf5ed9edc48caefec1557f1fa87dc366021f2e7bd491edd2f9f80baebfc1e107a4ee68ccc61149962320df122e61db944bd9f25f7ac5f353cbd2110a58f9871b9732251616223e949d5555e6bd4e57b09d1946408661337c9caeb0a36c2daa94e4d54855e9199a44ae5481e3c7dde9ce15800a4d88d737fd06095e6a04b60112d342cc8faea7dab2d71ef1c2834133f956730ba44c4bff14f08c56cc6b46929f34964be91f2ee8468cb80a37aa1fffad8a287a5121e0a3efa8542a8594677c7567fd7cdbf1ba95bdaf803dc3dc356e54cab78bbe3189c27d9dfc007bcf465d36ee95e37444489b773d901d217d867af29b660d2a9dd6957a2a800953329d733f760f715e72ab99a1825bda7700742cbf1a01e280d859808722a88b955d2cd41243f5283254e65c0553148c7e4df9106a85f3c9627e989c9a03d7f695adf5beb76acce5e2383827fb11c1f89e5fd87fc67f7ddb4919f82eb1fe232ce76bdedd64af3e667041998cf6c0023f683e77c8c924f29d124e01bb1c7b6afdc9ac6af51bd207dd4ea4a22b2ca792dfb7d57977b5041e33a017a7b96cafb1ada32e765c74aac35455b05454af0b66a14d4e4d0bde273b8826a3f4a3bc9f87f6a7c3dfa39824208e7ef2cdb8da71bb70035e2407fa541ecb69f6860664ecd4d0a75ea29564f5626891804cb9b29bd20adc7fe699e106a84ae07fd716bec49daf8273bf3419f6d6fe7b9ad9e6345373fbecfa955afbcbab89cf963ae11517df4e6b5bfe90171c5fc79aacbda7b6d350d8e10ccf58bccac9d5de4109d9bf5c17ae71f9233c08969dc2df4144201656d8892ded4236f44d852a6c023ab15ca1e7cf8cd2d2845f25586ba0d6c8f6ef077d43d5652f45e084deb93b012f6b86efccb0ff29207e6cb78cbe64239897df3c5a7d2b2b88fe41f5c466571397f6f6ffb89c37b15c950fe8293449c3563c56c205986bf28626f98ef003dab7e3d0f05ebb0a0d7bf8e2efb36f91723f3e395110216bbd85adadb9182e6e17552acbbfe3d02674b96037db3c21ae7910d139de83de9753e8919becd70107b5dc8061a93ff19f76231285ce7851926a0f681da276cfd45aa2726dbe4270281f5b3dc98f897df98f54770ac1f947877b892bf7909554a22aa1c9535bcfa81df8236f3b45b2d4cca72769054652ae3e1a27dd81175079392cf87316d86fa3c85fb6d6bf4b96602bbbca6182ac03bfe39c179cdb34b87b5ecf00ff929f6008d944f9574f18989212a001394188d5ac100e225e34bf9b7c4afef8398a046081ee3dfcc0329bb633f02b21e93f680ddaa79e903a9307b8f856fc0f3023148dc4734d41f1083a7aeeec034ad0ebd638f461457344da91f39d24498443c106e15181df73fa5ab4bb0eea18277ac87fc0f67c12b980577352c388fcee30163bf970c1c521c93de88f3182c5c9450646af2b56b709302f6d10e13fedc42ef0ac0a0078355fb224bd2a6c779839450a92dfd1ee1bed14173b4af98057b35c715edfc4b17d018f90e46565fb01cd372e48bd37399d45dc22d717bdb14c8dc14a0bef9d8ebef23d9b46b4fffcacec2c8d0caf6d1e62399c0b12be924d2550245c4d588d8e7ad6f8b1f31406e7b9ce9117affe28a28601a10d236970741f6f5af60c52ab8b5217fb1d91d64aed4322354220a1226130811dd689734060de6d58dd8cee3846a9d8429734ee888429cf9490486df8644a1638e10fb8bdc3513290b06fb4f1306275dfcac95da39c4e6a03b07992a0b5a5770bd9970e393a15a026bbbd44264d90aab077572beefa3959843fff642db9851b5d20ffed279d744cf03e9436b3060e9ada218d291befbae5a61da41c9b73b774980435de9529fc46e6fe23c14de84345b9d4fb0b716e3ab8ea37ad808e3ec14f3b6d14c3fcb8e4936823064ac4ed161ea68662c8b633d45e128fc25d81079d2610e0121589599e1e5aeacf7cd78c7a9f032b948fb721a19c5be55595df0817a6ce894647b731888322ece6581c20c6f53de6c0f835189b8875a049ba90c6b22f99136e0b1076e5b7380db1c46982170640686de99efc2b3ff005e14cd1d45e45b47650af4d5884296134f150473c5ea1665179a2cb5dc58b7419861bc4ff52c0aa9f6545a7a29588f40710fa81ddb265a9a690caff645bfedf8fc998ecc4decb3db7304f82ea0a6a7c99cdc3d87bfb7723979beeda2ae74437c6778898f87a52756b142b4d6474fda7acfff59e7ae7b2ce4cbf43c8ad51770e66be193d5fa2c49d2c26be936d5d6bce26311e41545f8a8c23fc4545c2822999aed232a17bf7474d13964308a4f8024fbf9ac3080001007063690011000200303030303a30303a31302e300000000008000300030000000c00a700cacd00"], 0x1054}, 0x1, 0x0, 0x0, 0x6080}, 0x8000) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000300)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x4192b07e18736d64, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdbdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11e85e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f60200ca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f0100000000000000fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9dd56d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92d074a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a4043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6b00005b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e11567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a87e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c4f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2b357f46632d30c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea64f3d60a67dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x123500, 0x0) 9.347098975s ago: executing program 4 (id=3004): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x5000001) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) 7.177225635s ago: executing program 4 (id=3021): openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x5cab10b16fb1ae42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0xfc30) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x9c1, 0xfffffe0000000001, 0xfa12, 0xfffffffc}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r6, 0x720, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$nl_route(0x10, 0x3, 0x0) 4.909415009s ago: executing program 8 (id=3027): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x11}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 4.788896214s ago: executing program 8 (id=3029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0x10000, 0x4, 0x9, 0xfd, 0x7, 0x40, 0x4, 0x0, 0x2b, 0x16}, {0x200000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x0, 0x5, 0x27, 0x7, 0x0, 0x9, 0xfe, 0xa8, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0xf, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0x9, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0xd, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x5000, [0xf90000000000, 0x4, 0x80, 0x1003]}) 4.687938267s ago: executing program 7 (id=3030): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171df", 0xa}], 0x1}}], 0x1, 0xc044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x1a0}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.325361869s ago: executing program 8 (id=3032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f00004a9000/0x3000)=nil) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0xc32d, 0x100, 0x2, 0xb5, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3ea, 0x80, 0x401, 0x320, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d1, 0x8000, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x1, 0xff, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 4.316329259s ago: executing program 7 (id=3033): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.27059395s ago: executing program 9 (id=3034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) write$P9_RXATTRWALK(r1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) io_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88801, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4.114337215s ago: executing program 7 (id=3035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.013382808s ago: executing program 4 (id=3036): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000008780438010000000000010902240001000020000904000c09030002000921ff030c7f00000009058103ca"], 0x0) 3.870714503s ago: executing program 7 (id=3037): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x11}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.66811174s ago: executing program 7 (id=3038): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5452, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.04196256s ago: executing program 8 (id=3039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 2.803517988s ago: executing program 8 (id=3040): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x1, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x5, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.364200862s ago: executing program 4 (id=3041): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e27, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c) 2.362322352s ago: executing program 8 (id=3042): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\r'], 0x30}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.273375395s ago: executing program 9 (id=3043): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 763.223104ms ago: executing program 4 (id=3044): openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x5cab10b16fb1ae42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0xfc30) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x9c1, 0xfffffe0000000001, 0xfa12, 0xfffffffc}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r5, 0x720, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$nl_route(0x10, 0x3, 0x0) 539.672402ms ago: executing program 9 (id=3045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 437.365755ms ago: executing program 9 (id=3046): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x11}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 437.164855ms ago: executing program 7 (id=3047): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x4070bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 376.862617ms ago: executing program 9 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 0s ago: executing program 9 (id=3049): sendmsg(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000200)="255a4015b87327c3f7fa6aff3bda8c49100d1eba9c9de82951de", 0x1a}], 0x1}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x5b, &(0x7f00000001c0)}, 0x10) kernel console output (not intermixed with test programs): avoid problems! [ 1040.028857][T17744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.147473][T17744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.204559][T17744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.234227][T17744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.264277][T17744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.293299][T17744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.331693][T17744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.359233][T17744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.429963][T17819] veth0_macvtap: entered promiscuous mode [ 1040.552878][T17744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.575228][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.579399][T17744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.594781][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.603012][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.619333][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.620820][T17744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.638482][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1040.638673][T17744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.657025][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1040.747077][T17819] veth1_macvtap: entered promiscuous mode [ 1041.392095][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.434269][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.464291][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.494211][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.549288][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.572539][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.600117][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.624379][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.651207][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.694231][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.723166][T17819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.841017][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.860872][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.871306][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.895564][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.917383][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.950300][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.974198][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.008899][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.033487][T17819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.088913][T17819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.111799][T17819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.141356][T17819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.164202][T17819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.347738][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.414330][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.582349][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.627751][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.706547][T16967] Bluetooth: hci0: command tx timeout [ 1042.730942][T16967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1042.752885][T16967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1042.763044][T16967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1042.774384][T16967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1042.788379][T16967] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1042.806728][T16967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1042.981294][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.026824][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.382531][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.421829][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.611687][T18021] chnl_net:caif_netlink_parms(): no params data found [ 1044.104931][T13102] hsr_slave_0: left promiscuous mode [ 1044.130463][T13102] hsr_slave_1: left promiscuous mode [ 1044.166876][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.189629][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.209642][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.217512][T13102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.236182][T13102] bridge_slave_1: left allmulticast mode [ 1044.242840][T13102] bridge_slave_1: left promiscuous mode [ 1044.249544][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.280117][T13102] bridge_slave_0: left allmulticast mode [ 1044.320203][T13102] bridge_slave_0: left promiscuous mode [ 1044.344489][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.606020][T13102] veth1_macvtap: left promiscuous mode [ 1044.612046][T13102] veth0_macvtap: left promiscuous mode [ 1044.625052][T13102] veth1_vlan: left promiscuous mode [ 1044.640944][T13102] veth0_vlan: left promiscuous mode [ 1044.948721][ T5776] Bluetooth: hci0: command tx timeout [ 1044.948777][T16967] Bluetooth: hci1: command tx timeout [ 1046.440625][T13102] team0 (unregistering): Port device team_slave_1 removed [ 1046.498975][T13102] team0 (unregistering): Port device team_slave_0 removed [ 1046.562313][T13102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.633633][T13102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.024688][T16967] Bluetooth: hci1: command tx timeout [ 1047.034608][T16967] Bluetooth: hci0: command tx timeout [ 1047.166389][T13102] bond0 (unregistering): Released all slaves [ 1047.482498][T18021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.527016][T18021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.558867][T18021] bridge_slave_0: entered allmulticast mode [ 1047.587151][T18021] bridge_slave_0: entered promiscuous mode [ 1047.618961][T18021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.641961][T18021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.650454][T18021] bridge_slave_1: entered allmulticast mode [ 1047.663005][T18021] bridge_slave_1: entered promiscuous mode [ 1047.679900][T18050] chnl_net:caif_netlink_parms(): no params data found [ 1047.900316][T18021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.048737][T18021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.312402][T18021] team0: Port device team_slave_0 added [ 1048.340425][T18021] team0: Port device team_slave_1 added [ 1048.348866][T18050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.369579][T18050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.378577][T18050] bridge_slave_0: entered allmulticast mode [ 1048.392782][T18050] bridge_slave_0: entered promiscuous mode [ 1048.448139][T18050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.474769][T18050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.485921][T18050] bridge_slave_1: entered allmulticast mode [ 1048.499651][T18050] bridge_slave_1: entered promiscuous mode [ 1048.551754][T18021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.571452][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.667020][T18021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.750032][T18021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.770089][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.824517][T18021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.926979][T18050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.953999][T18021] hsr_slave_0: entered promiscuous mode [ 1049.005086][T18021] hsr_slave_1: entered promiscuous mode [ 1049.018570][T18021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.051101][T18021] Cannot create hsr debugfs directory [ 1049.100437][T18050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.110194][T16967] Bluetooth: hci0: command tx timeout [ 1049.110244][T12880] Bluetooth: hci1: command tx timeout [ 1049.213277][T16967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1049.234437][T16967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1049.245813][T16967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1049.255734][T16967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1049.263546][T16967] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1049.271839][T16967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1049.413519][T13102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.489495][T18050] team0: Port device team_slave_0 added [ 1049.512454][T18050] team0: Port device team_slave_1 added [ 1049.615517][T13102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.807937][T13102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.853323][T18050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.867409][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.896297][T12880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.900240][T12880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.923728][T12880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.925340][T18050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.943574][T12880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.947854][T18050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.951255][T12880] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1049.959912][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.965992][T12880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1050.008974][T18050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.078084][T13102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.224977][T18050] hsr_slave_0: entered promiscuous mode [ 1050.239047][T18050] hsr_slave_1: entered promiscuous mode [ 1050.247607][T18050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.256511][T18050] Cannot create hsr debugfs directory [ 1050.783474][T13102] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.963212][T13102] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.096314][T13102] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.193743][T12880] Bluetooth: hci1: command tx timeout [ 1051.195308][T13102] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.270166][T18110] chnl_net:caif_netlink_parms(): no params data found [ 1051.356692][T12880] Bluetooth: hci2: command tx timeout [ 1051.582253][T18114] chnl_net:caif_netlink_parms(): no params data found [ 1051.673708][T18021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1051.795960][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.804404][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.812731][T18110] bridge_slave_0: entered allmulticast mode [ 1051.821688][T18110] bridge_slave_0: entered promiscuous mode [ 1051.831781][T18021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1051.850849][T18021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1051.980392][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.986278][T12880] Bluetooth: hci3: command tx timeout [ 1052.006701][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.017061][T18110] bridge_slave_1: entered allmulticast mode [ 1052.026198][T18110] bridge_slave_1: entered promiscuous mode [ 1052.051664][T18021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1052.243287][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.292448][T13102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.389889][T13102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.439967][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.617074][T13102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.685765][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.692923][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.760729][T18114] bridge_slave_0: entered allmulticast mode [ 1052.775854][T18114] bridge_slave_0: entered promiscuous mode [ 1052.803936][T18110] team0: Port device team_slave_0 added [ 1052.822133][T18110] team0: Port device team_slave_1 added [ 1052.883293][T13102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.912632][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.932944][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.941607][T18114] bridge_slave_1: entered allmulticast mode [ 1052.961069][T18114] bridge_slave_1: entered promiscuous mode [ 1053.167144][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.185350][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.220378][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.243105][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.253509][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.295372][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.341996][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.373131][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.424797][T12880] Bluetooth: hci2: command tx timeout [ 1053.439284][T18050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.520851][T18110] hsr_slave_0: entered promiscuous mode [ 1053.549970][T18110] hsr_slave_1: entered promiscuous mode [ 1053.556468][T18110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.564040][T18110] Cannot create hsr debugfs directory [ 1053.581028][T18050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1053.625377][T18114] team0: Port device team_slave_0 added [ 1053.670079][T18050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1053.698790][T18114] team0: Port device team_slave_1 added [ 1053.740073][T18050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1053.859870][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.867200][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.925170][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.989826][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.004846][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.041252][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.064812][T12880] Bluetooth: hci3: command tx timeout [ 1054.553698][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.569865][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.663629][T18114] hsr_slave_0: entered promiscuous mode [ 1054.683504][T18114] hsr_slave_1: entered promiscuous mode [ 1054.693108][T18114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.715266][T18114] Cannot create hsr debugfs directory [ 1054.839250][T18021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.242203][T18021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.489937][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.498012][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.506623][T12880] Bluetooth: hci2: command tx timeout [ 1055.753210][T18110] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.027192][T18110] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.144506][T12880] Bluetooth: hci3: command tx timeout [ 1056.194482][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.201671][T16629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.270021][T18110] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.508086][T18110] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.684678][T18050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.911558][T18050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.001514][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.008737][T16629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.049296][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.056515][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.316151][T18050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.556339][T18110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1057.585036][T12880] Bluetooth: hci2: command tx timeout [ 1057.630784][T18114] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.719872][T18110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1057.824221][T18110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1057.840472][T18110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1057.900287][T18114] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.028195][T18114] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.103769][T18021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.199868][T18114] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.226285][T12880] Bluetooth: hci3: command tx timeout [ 1058.343541][T13102] hsr_slave_0: left promiscuous mode [ 1058.375709][T13102] hsr_slave_1: left promiscuous mode [ 1058.395643][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.403105][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.424374][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.433016][T13102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.442520][T13102] bridge_slave_1: left allmulticast mode [ 1058.450918][T13102] bridge_slave_1: left promiscuous mode [ 1058.459498][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.473955][T13102] bridge_slave_0: left allmulticast mode [ 1058.481129][T13102] bridge_slave_0: left promiscuous mode [ 1058.488476][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.519438][T13102] hsr_slave_0: left promiscuous mode [ 1058.530250][T13102] hsr_slave_1: left promiscuous mode [ 1058.539174][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.555220][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.564277][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.573649][T13102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.584527][T13102] bridge_slave_1: left allmulticast mode [ 1058.591168][T13102] bridge_slave_1: left promiscuous mode [ 1058.598584][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.618184][T13102] bridge_slave_0: left allmulticast mode [ 1058.626007][T13102] bridge_slave_0: left promiscuous mode [ 1058.632727][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.661895][T13102] hsr_slave_0: left promiscuous mode [ 1058.676294][T13102] hsr_slave_1: left promiscuous mode [ 1058.691632][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.702355][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.710945][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.741556][T13102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.752277][T13102] bridge_slave_1: left allmulticast mode [ 1058.777074][T13102] bridge_slave_1: left promiscuous mode [ 1058.782813][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.816849][T13102] bridge_slave_0: left allmulticast mode [ 1058.822548][T13102] bridge_slave_0: left promiscuous mode [ 1058.846107][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.040737][T13102] veth1_macvtap: left promiscuous mode [ 1059.048078][T13102] veth0_macvtap: left promiscuous mode [ 1059.053722][T13102] veth1_vlan: left promiscuous mode [ 1059.059306][T13102] veth0_vlan: left promiscuous mode [ 1059.067038][T13102] veth1_macvtap: left promiscuous mode [ 1059.072582][T13102] veth0_macvtap: left promiscuous mode [ 1059.078257][T13102] veth1_vlan: left promiscuous mode [ 1059.083585][T13102] veth0_vlan: left promiscuous mode [ 1059.091578][T13102] veth1_macvtap: left promiscuous mode [ 1059.097330][T13102] veth0_macvtap: left promiscuous mode [ 1059.102970][T13102] veth1_vlan: left promiscuous mode [ 1059.110032][T13102] veth0_vlan: left promiscuous mode [ 1060.261527][T13102] team0 (unregistering): Port device team_slave_1 removed [ 1060.336268][T13102] team0 (unregistering): Port device team_slave_0 removed [ 1060.398508][T13102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.463378][T13102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.977808][T13102] bond0 (unregistering): Released all slaves [ 1061.898986][T13102] team0 (unregistering): Port device team_slave_1 removed [ 1061.972744][T13102] team0 (unregistering): Port device team_slave_0 removed [ 1062.036297][T13102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.100507][T13102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.657808][T13102] bond0 (unregistering): Released all slaves [ 1063.576831][T13102] team0 (unregistering): Port device team_slave_1 removed [ 1063.648351][T13102] team0 (unregistering): Port device team_slave_0 removed [ 1063.729990][T13102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.800593][T13102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.349391][T13102] bond0 (unregistering): Released all slaves [ 1064.539677][T18050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.961473][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.133959][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.272755][T18114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1065.327951][T18114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1065.399637][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.406851][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.495041][T18114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1065.544648][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.553134][T16629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.628920][T18114] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1065.776114][T18021] veth0_vlan: entered promiscuous mode [ 1065.890130][T18021] veth1_vlan: entered promiscuous mode [ 1065.927812][T18050] veth0_vlan: entered promiscuous mode [ 1066.058902][T18050] veth1_vlan: entered promiscuous mode [ 1066.251519][T18021] veth0_macvtap: entered promiscuous mode [ 1066.322850][T18050] veth0_macvtap: entered promiscuous mode [ 1066.365312][T18021] veth1_macvtap: entered promiscuous mode [ 1066.406254][T18050] veth1_macvtap: entered promiscuous mode [ 1066.482143][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.496818][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.508553][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.521527][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.538076][T18021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.596700][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.609526][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.627344][T18021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.669717][T18021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.680566][T18021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.691582][T18021] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.701695][T18021] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.716078][T18050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.727984][T18050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.739405][T18050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.749918][T18050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.760346][T18050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.771214][T18050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.782633][T18050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.800528][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.825095][T18050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.838506][T18050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.851936][T18050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.862850][T18050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.875674][T18050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.909945][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.960515][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.990324][T18050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.008253][T18050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.019429][T18050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.030043][T18050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.148693][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.155916][T16629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.282757][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.290836][T16629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.456312][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.471294][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.585777][T13102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.593715][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.607436][T13102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.615877][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.707510][T13102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.740472][T13102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.828222][T18110] veth0_vlan: entered promiscuous mode [ 1067.899635][T18110] veth1_vlan: entered promiscuous mode [ 1068.023981][T18110] veth0_macvtap: entered promiscuous mode [ 1068.061309][T18110] veth1_macvtap: entered promiscuous mode [ 1068.116207][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.142024][T18263] loop4: detected capacity change from 0 to 512 [ 1068.155302][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.167075][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.179735][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.191864][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.193127][T18263] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1068.204271][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.237433][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.253435][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.272087][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.327766][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.390535][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.419847][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.441775][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.453104][T18110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.523358][T18110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.543172][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.583628][T18110] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.601054][T18110] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.610975][T18110] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.620380][T18110] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.844034][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.027280][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.063495][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.208267][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.248405][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.699598][T18287] loop4: detected capacity change from 0 to 128 [ 1069.889296][T18287] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1069.987578][T18287] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.286643][T18114] veth0_vlan: entered promiscuous mode [ 1070.318746][T18114] veth1_vlan: entered promiscuous mode [ 1070.450348][T18114] veth0_macvtap: entered promiscuous mode [ 1070.471915][T18050] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.499517][T18114] veth1_macvtap: entered promiscuous mode [ 1070.579365][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.604268][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.634566][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.675206][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.694786][T18297] loop0: detected capacity change from 0 to 7 [ 1070.702461][T18297] loop0: [ 1070.714675][T18297] loop0: partition table partially beyond EOD, truncated [ 1070.722331][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.795570][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.847061][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.914444][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.949007][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.989880][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.019003][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.067874][T18300] loop9: detected capacity change from 0 to 512 [ 1071.078476][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.110350][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.249128][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.263663][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.276983][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.287811][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.291879][T18300] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1071.299155][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.299173][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.300794][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.370884][T18300] EXT4-fs (loop9): 1 truncate cleaned up [ 1071.423430][T18300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.539672][T18114] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.620834][T18114] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.671450][T18114] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.743404][T18114] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.965808][T18110] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.271834][T16629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.320760][T16629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.447212][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.483070][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.964747][T18350] process 'syz.8.2344' launched './file1' with NULL argv: empty string added [ 1074.067718][T18355] loop6: detected capacity change from 0 to 512 [ 1074.133993][T18355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1074.207696][T18355] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1074.269760][T18355] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2346: invalid indirect mapped block 4294967295 (level 1) [ 1074.417575][T18355] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2346: invalid indirect mapped block 4294967295 (level 1) [ 1074.523506][T18355] EXT4-fs (loop6): 2 truncates cleaned up [ 1074.599734][T18355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1074.714380][T14983] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1074.798550][T18355] EXT4-fs: Ignoring removed orlov option [ 1074.834899][T18355] EXT4-fs: Ignoring removed orlov option [ 1074.862487][T18355] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1074.915461][T14983] usb 10-1: device descriptor read/64, error -71 [ 1074.921598][T18355] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1075.081866][T18021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.204294][T14983] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1075.226249][T18383] syz.8.2354: attempt to access beyond end of device [ 1075.226249][T18383] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1075.243878][T18383] 9pnet_fd: Insufficient options for proto=fd [ 1075.464312][T14983] usb 10-1: device descriptor read/64, error -71 [ 1075.650537][T18382] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1075.710266][T14983] usb usb10-port1: attempt power cycle [ 1076.043918][T18382] bond1: (slave lo): Enslaving as an active interface with an up link [ 1076.077131][T18382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1076.184353][T14983] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1076.264400][T14983] usb 10-1: device descriptor read/8, error -71 [ 1076.534421][T14983] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1076.585669][T14983] usb 10-1: device descriptor read/8, error -71 [ 1076.711560][T14983] usb usb10-port1: unable to enumerate USB device [ 1077.153903][T18408] loop8: detected capacity change from 0 to 2048 [ 1077.306917][T18408] loop8: p2 p3 p7 [ 1077.992622][T18422] syz.4.2364: attempt to access beyond end of device [ 1077.992622][T18422] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1078.036794][T18422] 9pnet_fd: Insufficient options for proto=fd [ 1079.853939][T18298] udevd[18298]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 1079.859106][T18239] udevd[18239]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1079.898556][T18283] udevd[18283]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1080.031261][T18434] loop4: detected capacity change from 0 to 128 [ 1081.093962][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.275772][T18455] syz.9.2377: attempt to access beyond end of device [ 1081.275772][T18455] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1081.323194][T18455] 9pnet_fd: Insufficient options for proto=fd [ 1082.979926][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.162260][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.214517][T18465] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2380'. [ 1083.539467][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.734728][ T5836] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1083.964631][ T5836] usb 9-1: Using ep0 maxpacket: 32 [ 1083.978889][ T5836] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1084.078250][ T5836] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1084.134312][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1084.171803][ T5836] usb 9-1: Product: syz [ 1084.203848][ T5836] usb 9-1: Manufacturer: syz [ 1084.216012][ T5836] usb 9-1: SerialNumber: syz [ 1084.240672][T16967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1084.243004][ T5836] usb 9-1: config 0 descriptor?? [ 1084.274708][T16967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1084.284423][T16967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1084.301474][T18471] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1084.334708][T16967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1084.344579][T16967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1084.354408][T16967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1084.626662][ T5836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1084.801133][T18491] netlink: 'syz.9.2385': attribute type 11 has an invalid length. [ 1085.404606][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 1086.130432][ T5836] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.317849][ T8933] usb 9-1: USB disconnect, device number 10 [ 1086.410446][T12880] Bluetooth: hci0: command tx timeout [ 1086.421616][ T5836] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.491977][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1086.510510][ T5836] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1086.524383][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.546664][ T5836] usb 5-1: config 0 descriptor?? [ 1086.898997][T18501] 9pnet_virtio: no channels available for device syz [ 1087.152926][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 1087.174552][ T5836] usbhid: probe of 5-1:0.0 failed with error -71 [ 1087.206083][ T5836] usb 5-1: USB disconnect, device number 17 [ 1087.488475][T18514] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2389' sets config #8192 [ 1087.752725][T18482] chnl_net:caif_netlink_parms(): no params data found [ 1087.956011][T18528] random: crng reseeded on system resumption [ 1088.470372][T12880] Bluetooth: hci0: command tx timeout [ 1088.562237][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.613130][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.644806][T18482] bridge_slave_0: entered allmulticast mode [ 1088.679259][T18482] bridge_slave_0: entered promiscuous mode [ 1088.871392][ T49] hsr_slave_0: left promiscuous mode [ 1088.918449][ T49] hsr_slave_1: left promiscuous mode [ 1088.967986][T18547] fuse: Bad value for 'fd' [ 1088.979138][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.049340][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.075740][T18548] netlink: 'syz.4.2393': attribute type 11 has an invalid length. [ 1089.180934][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.308341][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.430935][ T49] bridge_slave_1: left allmulticast mode [ 1089.495292][ T49] bridge_slave_1: left promiscuous mode [ 1089.559969][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.681583][T18552] loop9: detected capacity change from 0 to 512 [ 1089.690044][ T49] bridge_slave_0: left allmulticast mode [ 1089.700867][ T49] bridge_slave_0: left promiscuous mode [ 1089.715796][T18552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1089.740340][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.787400][T18552] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1089.798268][ T49] veth1_macvtap: left promiscuous mode [ 1089.835098][T18552] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2394: invalid indirect mapped block 4294967295 (level 1) [ 1089.861579][ T49] veth0_macvtap: left promiscuous mode [ 1089.874748][ T49] veth1_vlan: left promiscuous mode [ 1089.881309][ T49] veth0_vlan: left promiscuous mode [ 1089.894590][T18552] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2394: invalid indirect mapped block 4294967295 (level 1) [ 1089.943991][T18552] EXT4-fs (loop9): 2 truncates cleaned up [ 1089.973493][T18552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1090.099810][T18552] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1090.133711][T18552] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1090.158629][T18552] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1090.256727][T18110] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.406865][T18561] 9pnet_virtio: no channels available for device syz [ 1090.560763][T12880] Bluetooth: hci0: command tx timeout [ 1092.291249][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1092.378471][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1092.562069][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.624684][T12880] Bluetooth: hci0: command tx timeout [ 1092.651738][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.692437][T18605] 9pnet_virtio: no channels available for device syz [ 1093.261971][ T49] bond0 (unregistering): Released all slaves [ 1093.385354][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.392679][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.400047][T18482] bridge_slave_1: entered allmulticast mode [ 1093.407842][T18482] bridge_slave_1: entered promiscuous mode [ 1093.471694][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2404'. [ 1093.556920][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.629047][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.810777][T18482] team0: Port device team_slave_0 added [ 1093.841349][T18482] team0: Port device team_slave_1 added [ 1094.003240][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.020488][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.128996][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.150614][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.159661][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.188165][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.366734][T18482] hsr_slave_0: entered promiscuous mode [ 1094.382027][T18482] hsr_slave_1: entered promiscuous mode [ 1094.393593][T18482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.402884][T18482] Cannot create hsr debugfs directory [ 1095.005239][T18637] 9pnet_virtio: no channels available for device syz [ 1095.484778][T18642] netlink: 'syz.4.2412': attribute type 11 has an invalid length. [ 1097.356866][ T27] audit: type=1326 audit(1780478583.544:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.429836][ T27] audit: type=1326 audit(1780478583.574:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.535815][ T27] audit: type=1326 audit(1780478583.574:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.566092][ T27] audit: type=1326 audit(1780478583.574:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.724502][ T27] audit: type=1326 audit(1780478583.574:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.803256][ T27] audit: type=1326 audit(1780478583.574:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1097.913343][T18667] : renamed from bond_slave_0 (while UP) [ 1098.396819][ T27] audit: type=1326 audit(1780478583.574:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1098.729573][ T27] audit: type=1326 audit(1780478583.574:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1098.927463][ T27] audit: type=1326 audit(1780478583.574:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1099.189015][ T27] audit: type=1326 audit(1780478583.574:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.8.2415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a4f9ce59 code=0x7ffc0000 [ 1100.137352][T18482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1100.219029][T18482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1100.306016][T18482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1100.343011][T18482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1101.084018][T18687] netlink: 'syz.8.2421': attribute type 11 has an invalid length. [ 1102.642770][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.971793][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.133474][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.140681][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.223823][T18696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1105.247343][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.255799][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.549203][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1106.168302][T18482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.765798][T18727] loop4: detected capacity change from 0 to 512 [ 1106.816606][T18727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1106.891468][T18727] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1106.921158][T18727] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2429: invalid indirect mapped block 4294967295 (level 1) [ 1106.942308][T18727] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2429: invalid indirect mapped block 4294967295 (level 1) [ 1106.957898][T18727] EXT4-fs (loop4): 2 truncates cleaned up [ 1106.969420][T18727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1107.039717][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.140702][T18050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.335554][T18482] veth0_vlan: entered promiscuous mode [ 1107.413207][T18482] veth1_vlan: entered promiscuous mode [ 1107.580272][T18745] syz.8.2433: attempt to access beyond end of device [ 1107.580272][T18745] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1107.605145][T18745] 9pnet_fd: Insufficient options for proto=fd [ 1110.703377][T18482] veth0_macvtap: entered promiscuous mode [ 1110.811971][T18482] veth1_macvtap: entered promiscuous mode [ 1110.849789][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.863302][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.875724][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.887685][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.899205][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.915235][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.930867][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.968777][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.024231][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.065410][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.119619][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.169264][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.208715][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.241411][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.275528][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.405399][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.535229][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 1111.755263][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.765354][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.776298][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.280756][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.461014][T18482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.513121][T18482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.534538][T18482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.559713][T18482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.918968][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.959750][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.057640][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.106673][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.118470][T18770] loop4: detected capacity change from 0 to 8192 [ 1114.201148][T18782] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2447'. [ 1114.263965][T18782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.272623][T18782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.379069][T18786] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2447'. [ 1115.132041][T18804] loop4: detected capacity change from 0 to 1024 [ 1115.163053][T18806] loop7: detected capacity change from 0 to 4 [ 1115.165892][T18804] EXT4-fs: Ignoring removed bh option [ 1115.299526][T18804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.333375][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.502974][T18804] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1115.591179][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1115.591193][ T27] audit: type=1800 audit(1780478601.774:107): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2449" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1115.626638][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.821179][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.832021][T18050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.007178][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.018017][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.158383][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.237804][T12880] Bluetooth: hci3: link tx timeout [ 1116.244948][T12880] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1118.199060][T18853] 9pnet_fd: Insufficient options for proto=fd [ 1118.487010][T12880] Bluetooth: hci3: command 0x0406 tx timeout [ 1119.126489][T18855] 9pnet_virtio: no channels available for device syz [ 1119.509366][T12880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.523914][T12880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.553661][T12880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.574608][T12880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.583321][T12880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1119.591962][T12880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1121.110329][T18885] 9pnet_virtio: no channels available for device syz [ 1121.537017][T18889] veth0_macvtap: entered allmulticast mode [ 1121.545787][T18889] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1121.665371][T16967] Bluetooth: hci0: command tx timeout [ 1123.245480][T18917] input: syz1 as /devices/virtual/input/input38 [ 1123.252606][T18917] input: failed to attach handler leds to device input38, error: -6 [ 1124.207069][T16967] Bluetooth: hci0: command tx timeout [ 1124.421637][T18916] fuse: Bad value for 'fd' [ 1124.490535][T18920] 9pnet_virtio: no channels available for device syz [ 1124.772684][T18925] io-wq is not configured for unbound workers [ 1124.880065][T18859] chnl_net:caif_netlink_parms(): no params data found [ 1125.073969][ T11] hsr_slave_0: left promiscuous mode [ 1125.108511][ T11] hsr_slave_1: left promiscuous mode [ 1125.155660][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.184301][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.226020][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.254689][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.297718][ T11] bridge_slave_1: left allmulticast mode [ 1125.314289][ T11] bridge_slave_1: left promiscuous mode [ 1125.321267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.343062][T18944] loop8: detected capacity change from 0 to 256 [ 1125.359349][ T11] bridge_slave_0: left allmulticast mode [ 1125.375207][ T11] bridge_slave_0: left promiscuous mode [ 1125.396871][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.582776][ T11] veth1_macvtap: left promiscuous mode [ 1125.600659][ T11] veth0_macvtap: left promiscuous mode [ 1125.624681][ T11] veth1_vlan: left promiscuous mode [ 1125.631072][ T11] veth0_vlan: left promiscuous mode [ 1126.338363][T16967] Bluetooth: hci0: command tx timeout [ 1128.391587][T16967] Bluetooth: hci0: command tx timeout [ 1128.413148][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1128.499682][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1128.631569][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.834960][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.365058][ T11] bond0 (unregistering): Released all slaves [ 1129.958587][T18859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.000540][T18859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.059073][T18859] bridge_slave_0: entered allmulticast mode [ 1130.188549][T18859] bridge_slave_0: entered promiscuous mode [ 1130.297237][T18859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.408412][T18859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.479051][T18859] bridge_slave_1: entered allmulticast mode [ 1130.579283][T18859] bridge_slave_1: entered promiscuous mode [ 1130.829384][T15030] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1130.952653][T18859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.002899][T18859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.064266][T15030] usb 5-1: Using ep0 maxpacket: 8 [ 1131.106588][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.159877][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.214372][T15030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1131.236947][T18859] team0: Port device team_slave_0 added [ 1131.252452][T19022] netlink: 'syz.8.2502': attribute type 19 has an invalid length. [ 1131.260402][T15030] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1131.288178][T19022] netlink: 14552 bytes leftover after parsing attributes in process `syz.8.2502'. [ 1131.305481][T15030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.359380][T15030] usb 5-1: config 0 descriptor?? [ 1131.442928][T18859] team0: Port device team_slave_1 added [ 1131.566713][T18859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.573721][T18859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.606587][T18859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.624392][T18859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.647295][T18859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.781267][T18859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.830941][T19041] netlink: 'syz.8.2503': attribute type 29 has an invalid length. [ 1131.914865][T19041] netlink: 'syz.8.2503': attribute type 29 has an invalid length. [ 1131.948950][T15030] usbhid 5-1:0.0: can't add hid device: -71 [ 1131.955070][T15030] usbhid: probe of 5-1:0.0 failed with error -71 [ 1131.995749][T15030] usb 5-1: USB disconnect, device number 18 [ 1132.001776][T19044] netlink: 'syz.8.2503': attribute type 29 has an invalid length. [ 1132.034519][T19041] netlink: 'syz.8.2503': attribute type 29 has an invalid length. [ 1132.071395][T19046] netlink: 'syz.8.2503': attribute type 29 has an invalid length. [ 1132.097416][T18859] hsr_slave_0: entered promiscuous mode [ 1132.129549][T18859] hsr_slave_1: entered promiscuous mode [ 1132.146715][T18859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1132.166096][T18859] Cannot create hsr debugfs directory [ 1132.202044][T19048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1133.170414][T19075] sctp: [Deprecated]: syz.9.2510 (pid 19075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1133.170414][T19075] Use struct sctp_sack_info instead [ 1134.026353][T18859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1134.155308][T15030] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1134.348174][T15030] usb 5-1: Using ep0 maxpacket: 8 [ 1134.356432][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.391159][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.405650][T15030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1134.412303][T15030] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1134.440489][T18859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1134.457693][T15030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.495457][T15030] usb 5-1: config 0 descriptor?? [ 1134.507433][T18859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1134.594961][T18859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1134.686388][T19100] loop8: detected capacity change from 0 to 128 [ 1134.759501][T19100] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1134.846900][T19100] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.004667][T15030] usbhid 5-1:0.0: can't add hid device: -71 [ 1135.047078][T15030] usbhid: probe of 5-1:0.0 failed with error -71 [ 1135.088836][T18859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.116788][T15030] usb 5-1: USB disconnect, device number 19 [ 1135.173640][T18859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.216761][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.223921][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.286309][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.293481][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.432390][T19114] netlink: 'syz.9.2519': attribute type 29 has an invalid length. [ 1135.476477][T18114] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1135.478923][T19114] netlink: 'syz.9.2519': attribute type 29 has an invalid length. [ 1135.513210][T19114] netlink: 'syz.9.2519': attribute type 29 has an invalid length. [ 1135.546935][T19114] netlink: 'syz.9.2519': attribute type 29 has an invalid length. [ 1136.086582][T18859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.214046][T19134] loop4: detected capacity change from 0 to 256 [ 1137.874466][ T5809] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1138.074425][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 1138.096978][ T5809] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.129191][ T5809] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.158751][T18859] veth0_vlan: entered promiscuous mode [ 1138.174548][ T5809] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1138.224335][T18859] veth1_vlan: entered promiscuous mode [ 1138.225071][ T5809] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1138.298554][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.353900][T18859] veth0_macvtap: entered promiscuous mode [ 1138.354658][ T5809] usb 9-1: config 0 descriptor?? [ 1138.405511][T18859] veth1_macvtap: entered promiscuous mode [ 1138.460988][T19174] 9pnet_virtio: no channels available for device syz [ 1138.481455][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.502598][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.523425][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.554238][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.576862][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.621859][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.650749][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.671851][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.694169][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.721071][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.746498][T18859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.786944][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.799284][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.812053][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.827051][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.838909][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.851421][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.863164][T18859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.901701][T18859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.972605][T18859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.056180][ T5809] usbhid 9-1:0.0: can't add hid device: -71 [ 1139.062220][ T5809] usbhid: probe of 9-1:0.0 failed with error -71 [ 1139.064459][T18859] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.106767][T18859] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.117632][T18859] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.128529][T18859] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.132802][ T5809] usb 9-1: USB disconnect, device number 11 [ 1139.461465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.530900][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.691790][T13102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.725226][T13102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.651915][T19257] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2562'. [ 1141.684102][T19257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.691823][T19257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.758790][T19258] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2562'. [ 1142.287718][T19271] loop7: detected capacity change from 0 to 256 [ 1144.507561][T19305] netlink: 'syz.8.2576': attribute type 11 has an invalid length. [ 1144.801204][T19307] validate_nla: 1 callbacks suppressed [ 1144.801220][T19307] netlink: 'syz.9.2578': attribute type 21 has an invalid length. [ 1144.814771][T19307] netlink: 'syz.9.2578': attribute type 1 has an invalid length. [ 1144.823749][T19307] netlink: 16090 bytes leftover after parsing attributes in process `syz.9.2578'. [ 1146.831931][T19339] netlink: 'syz.7.2589': attribute type 11 has an invalid length. [ 1148.302960][T19361] fuse: Bad value for 'fd' [ 1148.666207][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2596'. [ 1151.009486][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2610'. [ 1152.399571][T19422] loop8: detected capacity change from 0 to 256 [ 1152.716997][T19430] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input39 [ 1153.194805][T19432] syz.9.2618 (19432): drop_caches: 2 [ 1154.414527][T15030] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1154.629365][T15030] usb 5-1: Using ep0 maxpacket: 8 [ 1154.665782][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.714306][T15030] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.762148][T15030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1154.799349][T15030] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1154.828160][T15030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.878232][T15030] usb 5-1: config 0 descriptor?? [ 1155.302495][T19468] sctp: [Deprecated]: syz.8.2632 (pid 19468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1155.302495][T19468] Use struct sctp_sack_info instead [ 1155.329967][T15030] usbhid 5-1:0.0: can't add hid device: -71 [ 1155.352636][T15030] usbhid: probe of 5-1:0.0 failed with error -71 [ 1155.400896][T15030] usb 5-1: USB disconnect, device number 20 [ 1156.095593][T19492] netlink: 'syz.4.2641': attribute type 2 has an invalid length. [ 1156.103376][T19492] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2641'. [ 1156.379039][T19501] sctp: [Deprecated]: syz.9.2642 (pid 19501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1156.379039][T19501] Use struct sctp_sack_info instead [ 1156.462478][T19507] veth0_macvtap: entered allmulticast mode [ 1157.069159][T19521] Illegal XDP return value 4294967274 on prog (id 96) dev N/A, expect packet loss! [ 1157.255589][T13394] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1157.517960][T13394] usb 9-1: Using ep0 maxpacket: 8 [ 1157.553751][T13394] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.568115][T19536] loop9: detected capacity change from 0 to 256 [ 1157.585235][T13394] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.645106][T13394] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1157.652853][T13394] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1157.672601][T13394] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.748257][T13394] usb 9-1: config 0 descriptor?? [ 1158.551589][T13394] usbhid 9-1:0.0: can't add hid device: -71 [ 1158.600292][T13394] usbhid: probe of 9-1:0.0 failed with error -71 [ 1158.708528][T13394] usb 9-1: USB disconnect, device number 12 [ 1158.734392][T15030] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1158.951271][T15030] usb 8-1: Using ep0 maxpacket: 8 [ 1158.973230][T15030] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1159.004299][T15030] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1159.035656][T15030] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1159.054872][T19558] syz_tun: refused to change device tx_queue_len [ 1159.084857][T15030] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1159.109395][T15030] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.160204][T15030] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1159.196646][T15030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.473496][T15030] usb 8-1: GET_CAPABILITIES returned 0 [ 1159.499506][T15030] usbtmc 8-1:16.0: can't read capabilities [ 1159.710256][ T5829] usb 8-1: USB disconnect, device number 8 [ 1159.764277][T19578] loop9: detected capacity change from 0 to 256 [ 1161.265756][ T5829] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1161.494369][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 1161.512919][ T5829] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.554623][ T5829] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.612820][ T5829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1161.631793][ T5829] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1161.670771][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.711673][ T5829] usb 5-1: config 0 descriptor?? [ 1161.765223][T19613] loop7: detected capacity change from 0 to 256 [ 1162.194787][ T8933] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1162.315265][ T5829] usbhid 5-1:0.0: can't add hid device: -71 [ 1162.324330][ T5829] usbhid: probe of 5-1:0.0 failed with error -71 [ 1162.340881][ T5829] usb 5-1: USB disconnect, device number 21 [ 1162.407170][ T8933] usb 9-1: Using ep0 maxpacket: 8 [ 1162.588041][ T8933] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1162.686456][ T8933] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1162.794258][ T8933] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1162.896629][ T8933] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1162.940970][ T8933] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.028398][ T8933] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1163.042252][ T8933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.424408][ T8933] usb 9-1: GET_CAPABILITIES returned 0 [ 1163.441224][ T8933] usbtmc 9-1:16.0: can't read capabilities [ 1163.478705][T19643] random: crng reseeded on system resumption [ 1163.733179][T15030] usb 9-1: USB disconnect, device number 13 [ 1165.128664][T19661] loop8: detected capacity change from 0 to 256 [ 1166.024431][ T5830] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1166.274693][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 1166.291664][ T5830] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.344844][ T5830] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.383416][ T5830] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1166.427625][ T5830] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1166.448819][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.488635][ T5830] usb 8-1: config 0 descriptor?? [ 1166.706021][T19695] loop4: detected capacity change from 0 to 256 [ 1167.036727][ T5830] usbhid 8-1:0.0: can't add hid device: -71 [ 1167.048002][ T5830] usbhid: probe of 8-1:0.0 failed with error -71 [ 1167.091189][ T5830] usb 8-1: USB disconnect, device number 9 [ 1168.033116][T19713] 9pnet_virtio: no channels available for device syz [ 1168.717205][T19740] loop9: detected capacity change from 0 to 256 [ 1168.725182][ T5809] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1168.894443][T15030] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1168.944033][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.156395][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.167250][ T5809] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1169.176681][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.191743][ T5809] usb 8-1: config 0 descriptor?? [ 1169.605271][T12880] Bluetooth: hci1: command 0x0406 tx timeout [ 1169.795331][T15030] usb 9-1: Using ep0 maxpacket: 16 [ 1169.807704][T15030] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1169.935068][T15030] usb 9-1: config 0 has no interface number 0 [ 1169.941664][T15030] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1169.952355][T15030] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1169.975947][T15030] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1170.006944][T15030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.053001][T15030] usb 9-1: Product: syz [ 1170.078930][T15030] usb 9-1: Manufacturer: syz [ 1170.083600][T15030] usb 9-1: SerialNumber: syz [ 1170.127485][T15030] usb 9-1: config 0 descriptor?? [ 1170.145321][T19735] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1170.152756][T19735] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1170.199109][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.227263][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.270097][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.291893][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.354429][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.361478][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.381496][T19735] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1170.412321][T19735] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1170.440398][ T5809] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1170.481836][ T5809] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1170.519559][T19762] 9pnet_virtio: no channels available for device syz [ 1170.597357][ T5809] cp2112 0003:10C4:EA90.0013: error requesting version [ 1170.656736][ T5809] cp2112: probe of 0003:10C4:EA90.0013 failed with error -71 [ 1170.684447][T15030] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1170.752711][ T5809] usb 8-1: USB disconnect, device number 10 [ 1170.842868][T19763] fido_id[19763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1170.925334][T16967] Bluetooth: hci0: link tx timeout [ 1170.955159][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1170.970750][T16967] Bluetooth: hci0: link tx timeout [ 1170.978998][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1170.986836][T16967] Bluetooth: hci0: link tx timeout [ 1170.992211][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1171.000029][T16967] Bluetooth: hci0: link tx timeout [ 1171.005284][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.017225][T16967] Bluetooth: hci0: link tx timeout [ 1171.026869][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1171.036098][T16967] Bluetooth: hci0: link tx timeout [ 1171.042946][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.050923][T16967] Bluetooth: hci0: link tx timeout [ 1171.058695][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1171.072526][T16967] Bluetooth: hci0: link tx timeout [ 1171.078623][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.090444][T16967] Bluetooth: hci0: link tx timeout [ 1171.099834][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1171.114808][T16967] Bluetooth: hci0: link tx timeout [ 1171.120086][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.135802][T16967] Bluetooth: hci0: link tx timeout [ 1171.141032][T16967] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1171.149115][T16967] Bluetooth: hci0: link tx timeout [ 1171.154636][T16967] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.727884][T15030] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1171.805460][T15030] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1171.877069][T15030] asix: probe of 9-1:0.34 failed with error -71 [ 1171.938880][T15030] usb 9-1: USB disconnect, device number 14 [ 1172.540910][T19796] 9pnet_virtio: no channels available for device syz [ 1172.988584][ T5829] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1173.024647][T19791] Bluetooth: hci0: command 0x0406 tx timeout [ 1173.234923][ T5829] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1173.281881][ T5829] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1173.363279][ T5829] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.431500][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.477436][T19822] syz.9.2740: attempt to access beyond end of device [ 1173.477436][T19822] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1173.495204][T19822] 9pnet_fd: Insufficient options for proto=fd [ 1173.547931][ T5829] usb 8-1: Product: syz [ 1173.571094][ T5829] usb 8-1: Manufacturer: syz [ 1173.636256][ T5829] usb 8-1: SerialNumber: syz [ 1174.394360][T19791] Bluetooth: hci2: command 0x0406 tx timeout [ 1174.402972][T19827] 9pnet_virtio: no channels available for device syz [ 1174.825156][ T27] audit: type=1326 audit(1780478661.014:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.4.2745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff598b9ce59 code=0x0 [ 1175.003602][ T5829] cdc_ncm 8-1:1.0: bind() failure [ 1175.041199][ T5829] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1175.049074][ T5829] cdc_ncm 8-1:1.1: bind() failure [ 1175.194837][T16967] Bluetooth: hci0: command 0x0406 tx timeout [ 1175.212821][ T5829] usb 8-1: USB disconnect, device number 11 [ 1175.993161][T19865] syz.9.2751: attempt to access beyond end of device [ 1175.993161][T19865] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1176.026326][T19865] 9pnet_fd: Insufficient options for proto=fd [ 1177.446847][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.453198][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.729864][T19873] 9pnet_virtio: no channels available for device syz [ 1179.075375][T19891] input: syz0 as /devices/virtual/input/input40 [ 1179.221843][T19895] loop9: detected capacity change from 0 to 256 [ 1179.563867][T19906] syz.7.2766: attempt to access beyond end of device [ 1179.563867][T19906] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1179.579767][T19906] 9pnet_fd: Insufficient options for proto=fd [ 1180.857192][T19921] binder: 19919:19921 ioctl c0306201 200000000080 returned -14 [ 1180.888777][T19921] binder: 19919:19921 ioctl c0306201 2000000003c0 returned -14 [ 1180.952020][T19923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3900367894 (7800735788 ns) > initial count (3752635704 ns). Using initial count to start timer. [ 1181.601042][T19942] loop8: detected capacity change from 0 to 256 [ 1184.009508][T19986] netlink: 'syz.8.2788': attribute type 11 has an invalid length. [ 1188.095479][T20032] loop9: detected capacity change from 0 to 256 [ 1191.522712][T20059] loop4: detected capacity change from 0 to 256 [ 1192.715266][T20079] binder: 20070:20079 ioctl c0306201 200000000680 returned -14 [ 1193.104313][T20085] 9pnet_fd: Insufficient options for proto=fd [ 1193.188701][T20073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1193.297130][T20073] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1193.485710][T20089] fuse: Bad value for 'fd' [ 1193.943625][T20090] netlink: 'syz.4.2812': attribute type 11 has an invalid length. [ 1194.642523][T20093] fuse: Bad value for 'fd' [ 1195.264223][T12880] Bluetooth: hci1: command 0x0406 tx timeout [ 1195.296165][T20096] fuse: Bad value for 'fd' [ 1195.582037][T20073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1195.593468][T20073] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1195.605567][T20073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.637401][T20073] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1195.739120][T20073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1195.761219][T20083] syz.8.2811: attempt to access beyond end of device [ 1195.761219][T20083] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1196.424574][ T5829] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1196.634254][ T5829] usb 9-1: Using ep0 maxpacket: 8 [ 1196.650431][ T5829] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1196.668115][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.695814][T20119] can0: slcan on ttyS3. [ 1196.718949][ T5829] usb 9-1: Product: syz [ 1196.759647][ T5829] usb 9-1: Manufacturer: syz [ 1196.778775][ T5829] usb 9-1: SerialNumber: syz [ 1197.016170][ T5830] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1197.072821][ T5829] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1197.153397][T20130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1197.177823][ T5829] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1197.324370][T20136] syz.9.2823: attempt to access beyond end of device [ 1197.324370][T20136] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1197.344663][T12880] Bluetooth: hci1: command 0x0406 tx timeout [ 1197.368245][T20136] 9pnet_fd: Insufficient options for proto=fd [ 1197.427160][ T5830] usb 5-1: config 0 has no interfaces? [ 1197.444439][ T5829] usb 9-1: USB disconnect, device number 15 [ 1197.484701][ T5830] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1197.570916][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.584293][T12880] Bluetooth: hci2: command 0x0406 tx timeout [ 1197.591795][T16629] hsr_slave_0: left promiscuous mode [ 1197.592974][T18844] udevd[18844]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.631218][T16629] hsr_slave_1: left promiscuous mode [ 1197.664228][T12880] Bluetooth: hci3: command 0x0406 tx timeout [ 1197.744289][T12880] Bluetooth: hci0: command 0x0406 tx timeout [ 1197.788149][T13394] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1197.829467][ T5830] usb 5-1: config 0 descriptor?? [ 1198.784939][T13394] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.834920][T16629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.864441][T13394] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1198.891122][T13394] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1198.894423][T16629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.902716][T13394] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1198.917792][T13394] usb 8-1: SerialNumber: syz [ 1198.985451][T16629] bridge_slave_1: left allmulticast mode [ 1198.992112][T16629] bridge_slave_1: left promiscuous mode [ 1199.054895][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.080231][T16629] bridge_slave_0: left allmulticast mode [ 1199.087190][T16629] bridge_slave_0: left promiscuous mode [ 1199.101252][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.155283][T13394] usb 8-1: 0:2 : does not exist [ 1199.290974][T20149] netlink: 'syz.8.2824': attribute type 11 has an invalid length. [ 1199.387586][T16629] veth1_macvtap: left promiscuous mode [ 1199.460336][T16629] veth0_macvtap: left promiscuous mode [ 1199.501706][T13394] usb 8-1: USB disconnect, device number 12 [ 1199.525613][T16629] veth1_vlan: left promiscuous mode [ 1199.664246][T12880] Bluetooth: hci2: command 0x0406 tx timeout [ 1199.744330][T12880] Bluetooth: hci3: command 0x0406 tx timeout [ 1200.002533][T18844] udevd[18844]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.397146][T20159] sctp: [Deprecated]: syz.7.2827 (pid 20159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.397146][T20159] Use struct sctp_sack_info instead [ 1200.741689][T16629] team0 (unregistering): Port device vlan0 removed [ 1201.372138][T16629] team0 (unregistering): Port device team_slave_1 removed [ 1201.460767][T16629] team0 (unregistering): Port device team_slave_0 removed [ 1201.535459][T16629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.606613][T16629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.644251][T13394] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1201.844641][T13394] usb 10-1: Using ep0 maxpacket: 32 [ 1201.865222][T13394] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1201.873669][T13394] usb 10-1: config 0 has no interface number 0 [ 1201.901394][T13394] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1201.925966][T13394] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.934076][T13394] usb 10-1: Product: syz [ 1201.947092][T13394] usb 10-1: Manufacturer: syz [ 1201.951815][T13394] usb 10-1: SerialNumber: syz [ 1201.961540][T13394] usb 10-1: config 0 descriptor?? [ 1201.971164][T13394] smsc95xx v2.0.0 [ 1202.096081][T20184] sctp: [Deprecated]: syz.7.2838 (pid 20184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.096081][T20184] Use struct sctp_sack_info instead [ 1202.348884][T16629] bond0 (unregistering): Released all slaves [ 1202.587065][T20119] can0 (unregistered): slcan off ttyS3. [ 1202.709077][ T5809] usb 5-1: USB disconnect, device number 22 [ 1203.031460][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1203.067154][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1203.102032][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1203.164371][T13394] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 1203.215646][T13394] usb 10-1: USB disconnect, device number 25 [ 1203.443475][T20219] sctp: [Deprecated]: syz.7.2847 (pid 20219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.443475][T20219] Use struct sctp_sack_info instead [ 1203.849928][T20232] netlink: 'syz.7.2850': attribute type 11 has an invalid length. [ 1205.254298][ T5836] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1205.463061][T20277] sctp: [Deprecated]: syz.9.2859 (pid 20277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1205.463061][T20277] Use struct sctp_sack_info instead [ 1205.507111][ T5836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.524344][ T5836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.535788][ T5836] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.583937][ T5836] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.604280][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.663852][ T5836] usb 9-1: config 0 descriptor?? [ 1205.700309][T20286] netlink: 'syz.7.2861': attribute type 11 has an invalid length. [ 1206.456307][ T5836] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 1206.557358][ T5836] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1206.736613][T20299] loop9: detected capacity change from 0 to 256 [ 1207.200909][ T8933] usb 9-1: USB disconnect, device number 16 [ 1208.024324][T20331] sctp: [Deprecated]: syz.9.2871 (pid 20331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.024324][T20331] Use struct sctp_sack_info instead [ 1208.074554][ T5829] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1208.114645][T20333] netlink: 'syz.8.2872': attribute type 11 has an invalid length. [ 1209.061257][T20342] loop4: detected capacity change from 0 to 256 [ 1209.134458][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 1209.146727][ T5829] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1209.174464][ T5829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.218395][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.254650][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.291711][ T5829] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.348265][ T5829] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1209.367843][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.592139][T20357] loop9: detected capacity change from 0 to 256 [ 1209.609699][ T5829] usb 8-1: GET_CAPABILITIES returned 0 [ 1209.630548][ T5829] usbtmc 8-1:16.0: can't read capabilities [ 1210.533036][T15030] usb 8-1: USB disconnect, device number 13 [ 1210.551902][T20364] fuse: Bad value for 'fd' [ 1210.562854][T20364] netlink: 'syz.8.2881': attribute type 11 has an invalid length. [ 1210.834489][T20376] sctp: [Deprecated]: syz.8.2883 (pid 20376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1210.834489][T20376] Use struct sctp_sack_info instead [ 1211.215520][T15030] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1211.432767][T15030] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.461420][T15030] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1211.498967][T15030] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1211.541011][T15030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.554199][T15030] usb 5-1: Product: syz [ 1211.558399][T15030] usb 5-1: Manufacturer: syz [ 1211.577040][T15030] usb 5-1: SerialNumber: syz [ 1211.823330][T20412] fuse: Bad value for 'fd' [ 1211.848048][T20412] netlink: 'syz.9.2891': attribute type 11 has an invalid length. [ 1212.092933][T20413] loop7: detected capacity change from 0 to 256 [ 1212.730073][ T5829] usb 5-1: USB disconnect, device number 23 [ 1213.024281][ T5836] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1213.164433][ T5809] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1213.214560][ T5836] usb 10-1: Using ep0 maxpacket: 8 [ 1213.222785][ T5836] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.251366][ T5836] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1213.273717][ T5836] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1213.280772][ T5836] usb 10-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 1213.296907][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.311355][ T5836] usb 10-1: config 0 descriptor?? [ 1213.374271][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 1213.398698][ T5809] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1213.425981][ T5809] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.469283][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.493355][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.534351][ T5809] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.600051][ T5809] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1213.676400][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.778257][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x3 [ 1213.812746][T20446] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2898'. [ 1213.826603][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.833512][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.879364][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.896735][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.908936][ T5809] usb 9-1: GET_CAPABILITIES returned 0 [ 1213.924588][ T5809] usbtmc 9-1:16.0: can't read capabilities [ 1213.928709][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.967381][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1213.980755][ T5836] wacom 0003:056A:003F.0015: unknown main item tag 0x0 [ 1214.034618][ T5836] wacom 0003:056A:003F.0015: hidraw0: USB HID v0.04 Device [HID 056a:003f] on usb-dummy_hcd.9-1/input0 [ 1214.100069][ T5836] usb 10-1: USB disconnect, device number 26 [ 1214.199323][T14996] usb 9-1: USB disconnect, device number 17 [ 1214.222934][T20461] fido_id[20461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1214.364367][T13394] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1214.577802][T13394] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1214.590787][T13394] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1214.615188][T13394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.635205][T13394] usb 5-1: config 0 descriptor?? [ 1214.953047][T20486] syz.8.2907: attempt to access beyond end of device [ 1214.953047][T20486] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1214.971210][T20486] 9pnet_fd: Insufficient options for proto=fd [ 1215.000079][ T5836] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1215.182110][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x6 [ 1215.282925][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 1215.370045][ T5836] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.386947][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 1215.453791][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 1215.467531][ T5836] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1215.523416][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 1215.598178][ T5836] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.617221][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 1215.690920][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.700190][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x4 [ 1215.753016][T13394] sony 0003:054C:0268.0016: unknown main item tag 0x5 [ 1215.794299][ T5836] usb 10-1: Product: syz [ 1215.798583][ T5836] usb 10-1: Manufacturer: syz [ 1215.803273][ T5836] usb 10-1: SerialNumber: syz [ 1215.813118][T13394] sony 0003:054C:0268.0016: global environment stack underflow [ 1215.863502][T13394] sony 0003:054C:0268.0016: item 0 0 1 11 parsing failed [ 1215.930480][T13394] sony 0003:054C:0268.0016: parse failed [ 1215.960541][T13394] sony: probe of 0003:054C:0268.0016 failed with error -22 [ 1216.008452][T20494] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2909'. [ 1216.018752][T13394] usb 5-1: USB disconnect, device number 24 [ 1216.364666][T20477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.373458][T20477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.427335][T20477] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1216.455069][T14717] usb 10-1: USB disconnect, device number 27 [ 1216.464393][ T5829] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1216.656335][ T5829] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1216.672048][ T5829] usb 9-1: config 0 has no interface number 0 [ 1216.679789][ T5829] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1216.693300][ T5829] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1216.703418][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.711792][ T5829] usb 9-1: Product: syz [ 1216.716312][ T5829] usb 9-1: Manufacturer: syz [ 1216.721004][ T5829] usb 9-1: SerialNumber: syz [ 1216.729168][ T5829] usb 9-1: config 0 descriptor?? [ 1216.744478][T15030] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1216.924662][T15030] usb 8-1: Using ep0 maxpacket: 8 [ 1216.932154][T15030] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1216.949034][T15030] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1216.970684][T15030] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1216.981454][T15030] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1217.019573][T15030] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1217.054488][T15030] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1217.063565][T15030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.313256][T15030] usb 8-1: GET_CAPABILITIES returned 0 [ 1217.324385][T15030] usbtmc 8-1:16.0: can't read capabilities [ 1217.504342][ T5830] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1217.562346][ T5829] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1217.598997][T13394] usb 8-1: USB disconnect, device number 14 [ 1217.706946][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 1217.721306][ T5830] usb 5-1: config 7 has an invalid interface number: 215 but max is 0 [ 1217.754546][ T5830] usb 5-1: config 7 has no interface number 0 [ 1217.760668][ T5830] usb 5-1: config 7 interface 215 has no altsetting 0 [ 1217.783759][ T5830] usb 5-1: New USB device found, idVendor=0403, idProduct=eeec, bcdDevice=1d.28 [ 1217.799974][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.824599][ T5830] usb 5-1: Product: syz [ 1217.830795][ T5830] usb 5-1: Manufacturer: syz [ 1217.835687][ T5830] usb 5-1: SerialNumber: syz [ 1217.882645][T20563] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.2919'. [ 1218.096058][ T5830] usb-storage 5-1:7.215: USB Mass Storage device detected [ 1218.208802][ T5830] ftdi_sio 5-1:7.215: FTDI USB Serial Device converter detected [ 1218.222476][ T5830] ftdi_sio ttyUSB0: unknown device type: 0x1d28 [ 1218.269787][ T5830] usb 5-1: USB disconnect, device number 25 [ 1218.288517][ T5830] ftdi_sio 5-1:7.215: device disconnected [ 1218.808549][ T5829] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1218.826458][ T5829] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1218.840472][ T5829] CoreChips: probe of 9-1:0.41 failed with error -71 [ 1218.860625][ T5829] usb 9-1: USB disconnect, device number 18 [ 1219.134223][ T5830] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1219.346544][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1219.391024][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.437679][ T5830] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1219.466492][ T5830] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1219.517622][ T5830] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1219.584634][ T5830] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1219.624297][ T5830] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1219.645283][ T5830] usb 5-1: string descriptor 0 read error: -22 [ 1219.651991][ T5830] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1219.668805][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.899263][T13394] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1220.090427][T13394] usb 10-1: Using ep0 maxpacket: 8 [ 1220.111526][T13394] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1220.140124][T13394] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1220.154580][T13394] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1220.192856][T13394] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1220.205848][T13394] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.224312][T13394] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1220.250709][T13394] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.479246][T13394] usb 10-1: GET_CAPABILITIES returned 0 [ 1220.489442][T13394] usbtmc 10-1:16.0: can't read capabilities [ 1220.513368][ T5830] usb 5-1: 2:0: failed to get current value for ch 1 (-32) [ 1220.669167][T20665] input: syz0 as /devices/virtual/input/input44 [ 1220.758679][ T5830] usb 10-1: USB disconnect, device number 28 [ 1220.783204][T13394] usb 5-1: USB disconnect, device number 26 [ 1220.924318][T20671] loop8: detected capacity change from 0 to 256 [ 1221.280120][T20680] sctp: [Deprecated]: syz.8.2940 (pid 20680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.280120][T20680] Use struct sctp_sack_info instead [ 1221.485151][T20688] binder: 20687:20688 ioctl 40046205 0 returned -22 [ 1221.939054][T20708] loop4: detected capacity change from 0 to 256 [ 1222.504464][ T5809] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1222.709786][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 1222.717194][ T5809] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1222.744845][ T5809] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1222.768353][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1222.803022][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1222.828382][ T5809] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.861907][ T5809] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1222.906055][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.970503][T20747] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2958'. [ 1222.988831][T20747] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2958'. [ 1223.142822][ T5809] usb 9-1: GET_CAPABILITIES returned 0 [ 1223.154327][ T5809] usbtmc 9-1:16.0: can't read capabilities [ 1223.297415][T20754] loop9: detected capacity change from 0 to 256 [ 1223.404486][ T5809] usb 9-1: USB disconnect, device number 19 [ 1224.031860][T20782] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2967'. [ 1224.093117][T20782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.100907][T20782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.156471][T20786] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2967'. [ 1224.308432][T20797] syz.8.2972: attempt to access beyond end of device [ 1224.308432][T20797] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1224.322403][T20797] 9pnet_fd: Insufficient options for proto=fd [ 1224.674416][T13394] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1224.874210][T13394] usb 10-1: Using ep0 maxpacket: 32 [ 1224.897139][T13394] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1224.913905][T13394] usb 10-1: config 0 has no interface number 0 [ 1224.926683][T13394] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1224.930419][ T5809] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1224.954162][T13394] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.982553][T13394] usb 10-1: Product: syz [ 1224.993965][T13394] usb 10-1: Manufacturer: syz [ 1225.009305][T13394] usb 10-1: SerialNumber: syz [ 1225.026655][T13394] usb 10-1: config 0 descriptor?? [ 1225.047686][T13394] smsc95xx v2.0.0 [ 1225.144588][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 1225.160989][ T5809] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1225.182773][ T5809] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1225.209313][T20827] syz.4.2983: attempt to access beyond end of device [ 1225.209313][T20827] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1225.227393][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1225.228794][T20827] 9pnet_fd: Insufficient options for proto=fd [ 1225.286313][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1225.323984][ T5809] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.404268][ T5809] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1225.448771][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.472964][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1225.522211][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1225.691819][ T5809] usb 9-1: GET_CAPABILITIES returned 0 [ 1225.709789][ T5809] usbtmc 9-1:16.0: can't read capabilities [ 1225.988411][ T5836] usb 9-1: USB disconnect, device number 20 [ 1226.014646][ T5830] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1226.117861][T20855] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1226.127373][T20855] kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 1226.141260][T20855] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 1226.160081][T13394] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1226.164474][T20855] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 1226.174854][T13394] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 1226.190780][T20855] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 1226.199317][T20855] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 1226.208617][T20855] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1226.211664][T13394] usb 10-1: USB disconnect, device number 29 [ 1226.217590][T20855] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 1226.242979][T20855] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 1226.251492][T20855] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1226.254601][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 1226.289640][ T5830] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1226.310113][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.342127][ T5830] usb 5-1: config 0 has no interface number 0 [ 1226.364226][ T5830] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1226.373389][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.381604][ T5830] usb 5-1: Product: syz [ 1226.386217][ T5830] usb 5-1: Manufacturer: syz [ 1226.390845][ T5830] usb 5-1: SerialNumber: syz [ 1226.406797][ T5830] usb 5-1: config 0 descriptor?? [ 1226.624711][ T5830] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 1226.652437][ T5830] usb 5-1: No valid video chain found. [ 1226.686389][ T5830] usb 5-1: USB disconnect, device number 27 [ 1226.715708][T20873] syz.7.2993: attempt to access beyond end of device [ 1226.715708][T20873] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1226.729803][T20873] 9pnet_fd: Insufficient options for proto=fd [ 1227.484348][ T5809] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1227.582216][T20909] syz.4.3003: attempt to access beyond end of device [ 1227.582216][T20909] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1227.596579][T20909] 9pnet_fd: Insufficient options for proto=fd [ 1227.704455][ T5809] usb 8-1: Using ep0 maxpacket: 8 [ 1227.722487][ T5809] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.749410][ T5809] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.792575][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.813188][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.823824][ T5809] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.862947][ T5809] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.894242][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.054654][ T5830] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1228.137072][ T5809] usb 8-1: GET_CAPABILITIES returned 0 [ 1228.152856][ T5809] usbtmc 8-1:16.0: can't read capabilities [ 1228.248308][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 1228.275578][ T5830] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1228.293597][ T5830] usb 5-1: config 0 has no interface number 0 [ 1228.314199][ T5830] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1228.334362][ T5830] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1228.355211][ T5830] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1228.373308][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.404410][ T5830] usb 5-1: Product: syz [ 1228.414522][ T5830] usb 5-1: Manufacturer: syz [ 1228.424643][ T5830] usb 5-1: SerialNumber: syz [ 1228.448747][T13394] usb 8-1: USB disconnect, device number 15 [ 1228.459267][ T5830] usb 5-1: config 0 descriptor?? [ 1228.487606][T20913] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1228.863227][T20951] syz.8.3012: attempt to access beyond end of device [ 1228.863227][T20951] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1228.877567][T20951] 9pnet_fd: Insufficient options for proto=fd [ 1229.118773][ T27] audit: type=1326 audit(1780478715.294:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.9.3013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d22f9ce59 code=0x0 [ 1229.202569][ T5830] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1229.237043][ T5830] ipheth: probe of 5-1:0.196 failed with error -71 [ 1229.280181][ T5830] usb 5-1: USB disconnect, device number 28 [ 1230.013314][T20985] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1230.512425][ T5830] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1230.707090][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 1230.726132][ T5830] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.763467][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1230.770812][ T9038] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1230.788873][ T5830] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1230.816050][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.843993][ T5830] usb 5-1: config 0 descriptor?? [ 1230.869949][ T5830] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1230.984408][ T9038] usb 8-1: Using ep0 maxpacket: 8 [ 1230.992629][ T9038] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1231.001927][ T9038] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.035852][ T9038] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1231.064342][ T9038] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1231.094283][ T9038] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.111743][T21002] kvm: kvm [21001]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x1000000000 [ 1231.134235][ T9038] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1231.147660][T21002] kvm: kvm [21001]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0x1000000000 [ 1231.157071][ T9038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.174425][T21002] kvm: kvm [21001]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0x1000000000 [ 1231.344420][T12880] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1231.344607][T16967] Bluetooth: hci4: command 0x1003 tx timeout [ 1231.407748][ T9038] usb 8-1: GET_CAPABILITIES returned 0 [ 1231.413325][ T9038] usbtmc 8-1:16.0: can't read capabilities [ 1231.748581][T15030] usb 8-1: USB disconnect, device number 16 [ 1232.917856][T15030] usb 5-1: USB disconnect, device number 29 [ 1233.434485][T15030] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1233.636600][T15030] usb 5-1: Using ep0 maxpacket: 8 [ 1233.677642][T15030] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.688865][ T5829] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1233.720324][T15030] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1233.757572][T15030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1233.773443][T15030] usb 5-1: New USB device found, idVendor=0478, idProduct=0138, bcdDevice= 0.00 [ 1233.803847][T15030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.827076][T15030] usb 5-1: config 0 descriptor?? [ 1233.857793][T15030] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 1233.886477][T15030] usbhid 5-1:0.0: can't add hid device: -22 [ 1233.893054][T15030] usbhid: probe of 5-1:0.0 failed with error -22 [ 1233.899874][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 1233.927045][ T5829] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1233.964337][ T5829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1234.028403][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1234.044478][ T9038] usb 5-1: USB disconnect, device number 30 [ 1234.090627][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1234.135214][ T5829] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.157311][ T5829] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1234.187155][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.451061][ T5829] usb 8-1: GET_CAPABILITIES returned 0 [ 1234.465682][ T5829] usbtmc 8-1:16.0: can't read capabilities [ 1234.793016][ T5829] usb 8-1: USB disconnect, device number 17 [ 1236.054733][ T5829] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1236.376421][ T5829] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1236.468097][ T5829] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.577560][ T5829] usb 9-1: config 220 has no interface number 2 [ 1236.583920][ T5829] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1236.637755][ T5829] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1236.660373][ T5829] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1236.754533][ T5829] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1236.825756][ T5829] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1236.884441][T21129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3044'. [ 1236.957405][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.967602][ T5829] usb 9-1: Product: syz [ 1236.971802][ T5829] usb 9-1: Manufacturer: syz [ 1236.994315][ T5829] usb 9-1: SerialNumber: syz [ 1237.049492][ T5812] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1237.104770][T14421] ------------[ cut here ]------------ [ 1237.110909][T14421] WARNING: CPU: 1 PID: 14421 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 1237.120754][T14421] Modules linked in: [ 1237.124741][T14421] CPU: 1 PID: 14421 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 1237.132476][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.142601][T14421] Workqueue: iou_exit io_ring_exit_work [ 1237.148275][T14421] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1237.154031][T14421] Code: 78 23 e8 7c 5f 07 f7 48 8b 7c 24 30 48 8b 74 24 08 e8 bd fa 10 00 48 85 c0 75 1d e8 63 5f 07 f7 e9 b9 fd ff ff e8 59 5f 07 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1237.173810][T14421] RSP: 0018:ffffc9000ce77a40 EFLAGS: 00010293 [ 1237.179954][T14421] RAX: ffffffff8a7fcc37 RBX: ffff88802f316000 RCX: ffff8880296d5a00 [ 1237.189017][T14421] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 1237.197234][T14421] RBP: ffffc9000ce77bb0 R08: ffffc9000ce779c7 R09: 1ffff920019cef38 [ 1237.205464][T14421] R10: dffffc0000000000 R11: fffff520019cef39 R12: dffffc0000000000 [ 1237.213461][T14421] R13: ffff88802f316288 R14: 0000000100016d4c R15: 0000000100016d50 [ 1237.221503][T14421] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1237.230481][T14421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1237.237146][T14421] CR2: 00007f2d23208538 CR3: 0000000068769000 CR4: 00000000003506e0 [ 1237.245169][T14421] Call Trace: [ 1237.248475][T14421] [ 1237.251443][T14421] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1237.257480][T14421] ? _raw_spin_unlock_irq+0x23/0x50 [ 1237.262708][T14421] ? process_scheduled_works+0x96f/0x15d0 [ 1237.268499][T14421] ? process_scheduled_works+0x96f/0x15d0 [ 1237.274287][T14421] process_scheduled_works+0xa5d/0x15d0 [ 1237.279884][T14421] ? worker_attach_to_pool+0x380/0x380 [ 1237.286343][T14421] ? assign_work+0x3d2/0x5d0 [ 1237.290983][T14421] worker_thread+0xa55/0xfc0 [ 1237.295830][T14421] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1237.301757][T14421] ? _raw_spin_unlock+0x40/0x40 [ 1237.306695][T14421] kthread+0x2fa/0x390 [ 1237.310787][T14421] ? pr_cont_work+0x560/0x560 [ 1237.315540][T14421] ? kthread_blkcg+0xd0/0xd0 [ 1237.320149][T14421] ret_from_fork+0x48/0x80 [ 1237.324625][T14421] ? kthread_blkcg+0xd0/0xd0 [ 1237.329242][T14421] ret_from_fork_asm+0x11/0x20 [ 1237.334044][T14421] [ 1237.337118][T14421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1237.344422][T14421] CPU: 1 PID: 14421 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 1237.352131][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.362175][T14421] Workqueue: iou_exit io_ring_exit_work [ 1237.367724][T14421] Call Trace: [ 1237.370998][T14421] [ 1237.373930][T14421] dump_stack_lvl+0x18c/0x250 [ 1237.378607][T14421] ? show_regs_print_info+0x20/0x20 [ 1237.383798][T14421] ? load_image+0x420/0x420 [ 1237.388300][T14421] panic+0x2dc/0x730 [ 1237.392197][T14421] ? bpf_jit_dump+0xd0/0xd0 [ 1237.396700][T14421] ? ret_from_fork_asm+0x11/0x20 [ 1237.401638][T14421] __warn+0x2e0/0x470 [ 1237.405622][T14421] ? io_ring_exit_work+0x3a7/0x820 [ 1237.410735][T14421] ? io_ring_exit_work+0x3a7/0x820 [ 1237.415850][T14421] report_bug+0x2be/0x4f0 [ 1237.420177][T14421] ? io_ring_exit_work+0x3a7/0x820 [ 1237.425292][T14421] ? io_ring_exit_work+0x3a7/0x820 [ 1237.430404][T14421] ? io_ring_exit_work+0x3a9/0x820 [ 1237.435511][T14421] handle_bug+0xcf/0x120 [ 1237.439751][T14421] exc_invalid_op+0x1a/0x50 [ 1237.444249][T14421] asm_exc_invalid_op+0x1a/0x20 [ 1237.449096][T14421] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1237.454813][T14421] Code: 78 23 e8 7c 5f 07 f7 48 8b 7c 24 30 48 8b 74 24 08 e8 bd fa 10 00 48 85 c0 75 1d e8 63 5f 07 f7 e9 b9 fd ff ff e8 59 5f 07 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1237.474417][T14421] RSP: 0018:ffffc9000ce77a40 EFLAGS: 00010293 [ 1237.480481][T14421] RAX: ffffffff8a7fcc37 RBX: ffff88802f316000 RCX: ffff8880296d5a00 [ 1237.488446][T14421] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 1237.496416][T14421] RBP: ffffc9000ce77bb0 R08: ffffc9000ce779c7 R09: 1ffff920019cef38 [ 1237.504380][T14421] R10: dffffc0000000000 R11: fffff520019cef39 R12: dffffc0000000000 [ 1237.512347][T14421] R13: ffff88802f316288 R14: 0000000100016d4c R15: 0000000100016d50 [ 1237.520316][T14421] ? io_ring_exit_work+0x3a7/0x820 [ 1237.525442][T14421] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1237.531257][T14421] ? _raw_spin_unlock_irq+0x23/0x50 [ 1237.536451][T14421] ? process_scheduled_works+0x96f/0x15d0 [ 1237.542164][T14421] ? process_scheduled_works+0x96f/0x15d0 [ 1237.547880][T14421] process_scheduled_works+0xa5d/0x15d0 [ 1237.553442][T14421] ? worker_attach_to_pool+0x380/0x380 [ 1237.558991][T14421] ? assign_work+0x3d2/0x5d0 [ 1237.563585][T14421] worker_thread+0xa55/0xfc0 [ 1237.568170][T14421] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1237.574059][T14421] ? _raw_spin_unlock+0x40/0x40 [ 1237.578929][T14421] kthread+0x2fa/0x390 [ 1237.582994][T14421] ? pr_cont_work+0x560/0x560 [ 1237.587665][T14421] ? kthread_blkcg+0xd0/0xd0 [ 1237.592244][T14421] ret_from_fork+0x48/0x80 [ 1237.596652][T14421] ? kthread_blkcg+0xd0/0xd0 [ 1237.601237][T14421] ret_from_fork_asm+0x11/0x20 [ 1237.606009][T14421] [ 1237.609270][T14421] Kernel Offset: disabled [ 1237.613681][T14421] Rebooting in 86400 seconds..