last executing test programs: 15m7.854548388s ago: executing program 4 (id=92): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000010) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000e9fe2831b2", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500082402000000140003007866726d30"], 0x58}}, 0x0) 15m4.353394353s ago: executing program 4 (id=102): socket$netlink(0x10, 0x3, 0xe) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r1 = syz_open_dev$loop(0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d85, 0x4000, 0x0, 0x132}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0xf, 0x6b, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)="00000000000045e94cb755b692d5a5", &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x25, 0x8, @val=@iter={0x0}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 14m57.899781578s ago: executing program 4 (id=111): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x401870cb, &(0x7f0000000040)) 14m56.770794576s ago: executing program 4 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") 14m56.271966011s ago: executing program 4 (id=116): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000800000/0x800000)=nil) 14m55.928092503s ago: executing program 4 (id=117): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80020, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 14m54.851118965s ago: executing program 32 (id=117): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80020, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 13m52.923118536s ago: executing program 0 (id=279): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xd, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x3, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x61, 0x25a049f4d060172d]}}, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 13m52.567055318s ago: executing program 0 (id=282): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000f000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x20a83, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 13m49.488788336s ago: executing program 0 (id=287): socket$packet(0x11, 0x2, 0x300) 13m49.220515855s ago: executing program 0 (id=288): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0xb18}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000080)="74a9c99f857d984e53", 0x9) sendfile(r5, r4, 0x0, 0x3ffff) 13m45.556248468s ago: executing program 0 (id=292): r0 = shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x500c) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(r0) 13m44.218897494s ago: executing program 0 (id=294): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 13m43.548322952s ago: executing program 33 (id=294): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 11m50.284022116s ago: executing program 5 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 11m50.01598842s ago: executing program 5 (id=589): socket$netlink(0x10, 0x3, 0xe) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r1 = syz_open_dev$loop(0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d85, 0x4000, 0x0, 0x132}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0xf, 0x6b, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)="00000000000045e94cb755b692d5a5", &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x8, @val=@iter={0x0}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 11m48.888752328s ago: executing program 5 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x200}, 0x8) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x1000000, @empty}, 0x1c) close(r0) 11m48.548021083s ago: executing program 5 (id=599): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) 11m47.610379506s ago: executing program 5 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x28658000) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 11m46.024070962s ago: executing program 5 (id=609): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) shutdown(r3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0xfffffffffffffc00, 0x0, [0x4, 0x4, 0x5, 0x7, 0x8], [0x6, 0x106a, 0x1, 0xb4, 0x1ff, 0xffffffffffffff25, 0x8, 0x4000000000, 0x8, 0x7fff, 0x2, 0xb, 0x1, 0x8, 0x8278, 0x7, 0x7, 0x101, 0x400000000000000, 0x2, 0x5, 0x6, 0x4, 0x9, 0x5, 0xfffffffffffffa75, 0xfffffffeffffffff, 0xfffffffffffffff0, 0x0, 0x2, 0xfffffffffffffffa, 0x5, 0xfffffffeffffffff, 0x9, 0xf, 0xfff, 0x1, 0x7fffffff, 0x401, 0x9, 0x2, 0xc7e8, 0x9, 0x5, 0x7, 0x5, 0x7, 0x3b2, 0x6, 0xffff, 0x2, 0x7, 0x2, 0xfffffffffb68596c, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x85, 0x200, 0x1000, 0xff, 0x5, 0xffffffff, 0x6, 0x10001000000000, 0x45a, 0x2, 0x3ff, 0x2, 0x4b, 0x3760000, 0x8000, 0x5a, 0x9, 0x8000, 0x5, 0x4, 0xffff, 0x0, 0x8, 0xd01, 0x6, 0x6, 0x7a72, 0x7f, 0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9, 0xd, 0x1, 0x0, 0x6, 0x1, 0x72, 0x3, 0x8, 0xc00000000000000, 0x6000000000000, 0x8, 0x359, 0x2, 0x1, 0x0, 0xfffffffffffff634, 0x10000000000, 0x0, 0x9, 0x4000000000000000, 0x80, 0x80000000, 0x1, 0x7, 0x10001, 0xe57e, 0x6]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000010c0)={r4, 0xc, 0x1, [0x4, 0x1, 0x30, 0x6, 0x1], [0x5, 0xfffffffffffffff7, 0x8e4, 0x8000000000000000, 0xd20, 0x4, 0xf, 0x1, 0xffffffffffffffff, 0xfffffffffffff83c, 0xf1, 0xffffffff, 0x5, 0x9, 0x200, 0x1, 0x12, 0x0, 0x33, 0x7, 0x9df3, 0x9, 0x7, 0xfffffffffffffffb, 0xf, 0x2, 0x7, 0xfff, 0x5, 0x7c9, 0x40, 0x9, 0x9, 0x1c942a13, 0xb030, 0x8, 0x400, 0x1, 0xffffffff, 0x2, 0x7, 0x8, 0x4, 0x30cf, 0x5, 0x8, 0x188, 0x81, 0x4e7, 0xffffffff, 0xfff, 0x0, 0x0, 0x4a, 0x3, 0x3, 0xe1c2, 0xd667, 0xd, 0x401, 0x5, 0x1, 0x7, 0x8, 0x6, 0x4, 0x1, 0x0, 0x4, 0xfffffffffffffffc, 0xffff, 0x8, 0x2, 0x8, 0x5, 0x8000000000000000, 0x4, 0x10000, 0x100000001, 0x2f9, 0xc7, 0x0, 0xfff, 0x5, 0x6, 0x200, 0x5, 0x2, 0x1, 0x2, 0x0, 0x0, 0x5, 0x14, 0x5, 0xcc91, 0x9, 0x3, 0x4, 0x7, 0xff, 0x0, 0x4, 0x5, 0x7, 0x4, 0x81, 0xe, 0xfffffffffffffbb4, 0x6, 0x100000001, 0xc84, 0x0, 0x6ff, 0xa27, 0x8, 0x4, 0x3, 0x7, 0x0, 0x7]}) recvmmsg(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f0000005740)={0x0, 0x3938700}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x6, 0x2001) 11m45.26103293s ago: executing program 34 (id=609): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) shutdown(r3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0xfffffffffffffc00, 0x0, [0x4, 0x4, 0x5, 0x7, 0x8], [0x6, 0x106a, 0x1, 0xb4, 0x1ff, 0xffffffffffffff25, 0x8, 0x4000000000, 0x8, 0x7fff, 0x2, 0xb, 0x1, 0x8, 0x8278, 0x7, 0x7, 0x101, 0x400000000000000, 0x2, 0x5, 0x6, 0x4, 0x9, 0x5, 0xfffffffffffffa75, 0xfffffffeffffffff, 0xfffffffffffffff0, 0x0, 0x2, 0xfffffffffffffffa, 0x5, 0xfffffffeffffffff, 0x9, 0xf, 0xfff, 0x1, 0x7fffffff, 0x401, 0x9, 0x2, 0xc7e8, 0x9, 0x5, 0x7, 0x5, 0x7, 0x3b2, 0x6, 0xffff, 0x2, 0x7, 0x2, 0xfffffffffb68596c, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x85, 0x200, 0x1000, 0xff, 0x5, 0xffffffff, 0x6, 0x10001000000000, 0x45a, 0x2, 0x3ff, 0x2, 0x4b, 0x3760000, 0x8000, 0x5a, 0x9, 0x8000, 0x5, 0x4, 0xffff, 0x0, 0x8, 0xd01, 0x6, 0x6, 0x7a72, 0x7f, 0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9, 0xd, 0x1, 0x0, 0x6, 0x1, 0x72, 0x3, 0x8, 0xc00000000000000, 0x6000000000000, 0x8, 0x359, 0x2, 0x1, 0x0, 0xfffffffffffff634, 0x10000000000, 0x0, 0x9, 0x4000000000000000, 0x80, 0x80000000, 0x1, 0x7, 0x10001, 0xe57e, 0x6]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000010c0)={r4, 0xc, 0x1, [0x4, 0x1, 0x30, 0x6, 0x1], [0x5, 0xfffffffffffffff7, 0x8e4, 0x8000000000000000, 0xd20, 0x4, 0xf, 0x1, 0xffffffffffffffff, 0xfffffffffffff83c, 0xf1, 0xffffffff, 0x5, 0x9, 0x200, 0x1, 0x12, 0x0, 0x33, 0x7, 0x9df3, 0x9, 0x7, 0xfffffffffffffffb, 0xf, 0x2, 0x7, 0xfff, 0x5, 0x7c9, 0x40, 0x9, 0x9, 0x1c942a13, 0xb030, 0x8, 0x400, 0x1, 0xffffffff, 0x2, 0x7, 0x8, 0x4, 0x30cf, 0x5, 0x8, 0x188, 0x81, 0x4e7, 0xffffffff, 0xfff, 0x0, 0x0, 0x4a, 0x3, 0x3, 0xe1c2, 0xd667, 0xd, 0x401, 0x5, 0x1, 0x7, 0x8, 0x6, 0x4, 0x1, 0x0, 0x4, 0xfffffffffffffffc, 0xffff, 0x8, 0x2, 0x8, 0x5, 0x8000000000000000, 0x4, 0x10000, 0x100000001, 0x2f9, 0xc7, 0x0, 0xfff, 0x5, 0x6, 0x200, 0x5, 0x2, 0x1, 0x2, 0x0, 0x0, 0x5, 0x14, 0x5, 0xcc91, 0x9, 0x3, 0x4, 0x7, 0xff, 0x0, 0x4, 0x5, 0x7, 0x4, 0x81, 0xe, 0xfffffffffffffbb4, 0x6, 0x100000001, 0xc84, 0x0, 0x6ff, 0xa27, 0x8, 0x4, 0x3, 0x7, 0x0, 0x7]}) recvmmsg(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f0000005740)={0x0, 0x3938700}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x6, 0x2001) 11m37.52412168s ago: executing program 6 (id=635): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) 11m37.371308153s ago: executing program 6 (id=636): unshare(0x20000400) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa040, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[]) 11m37.182057664s ago: executing program 6 (id=637): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x2, 0x9, 0x4, 0x8, 0x7f, "cdb1114e0aaa374e87fb21004e0d8bce9470a8", 0xbcfd, 0x3}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 11m34.888016636s ago: executing program 6 (id=640): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRESHEX], 0x1, 0x2b7, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1b, 0x10, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a3110697e4298d1e14ef01060000e9009600fdff0000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x3]}) write$hidraw(r0, &(0x7f00000002c0)="85", 0x1) 11m34.015631933s ago: executing program 6 (id=643): open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) 11m32.618847666s ago: executing program 6 (id=649): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x1e9, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500050800000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 11m32.123495246s ago: executing program 35 (id=649): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x1e9, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500050800000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2.698264513s ago: executing program 8 (id=4101): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0), 0x0, 0xc) 2.528300603s ago: executing program 8 (id=4105): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'virt_wifi0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getroute={0x14, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008900) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501000000959cfe49db43ecd9e5c1cc7b27dd3ea0269ddc7e0ab9ef402e183fd70fbc30d790d81140829956d3a94cb14eef53d99e61c72b8f8a98750adb44e5cfa551d718db35ccf072"], 0x14}}, 0x0) 2.3611975s ago: executing program 1 (id=4108): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d6163767461700014000280", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.335726258s ago: executing program 8 (id=4110): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 2.226572725s ago: executing program 7 (id=4112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000001600)=""/117, 0x75}, {&(0x7f0000003c40)=""/4084, 0xff4}, {&(0x7f0000000380)=""/158, 0x9e}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008022, 0x0) 2.173392116s ago: executing program 8 (id=4113): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) 2.115056054s ago: executing program 1 (id=4115): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0), 0x0, 0xc) 2.10078349s ago: executing program 8 (id=4116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 1.988113418s ago: executing program 8 (id=4117): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d87213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc775510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c30540e0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000001340)=[{&(0x7f0000000a40)='e', 0x1}], 0x2) 1.924254648s ago: executing program 1 (id=4119): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac093296", 0x4}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.88216026s ago: executing program 3 (id=4120): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 1.85680427s ago: executing program 1 (id=4121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.7627667s ago: executing program 3 (id=4123): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.656073797s ago: executing program 2 (id=4124): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1.655606026s ago: executing program 3 (id=4125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f00000008c0)=""/117, 0x75}, {&(0x7f0000000940)=""/250, 0xfa}], 0x5}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000c40)=""/238, 0xee}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/232, 0xe8}, {&(0x7f0000001f00)=""/162, 0xa2}, {&(0x7f0000001fc0)=""/109, 0x6d}], 0x6}}], 0x2, 0x10000, 0x0) 1.603394029s ago: executing program 2 (id=4126): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.586488132s ago: executing program 3 (id=4127): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 1.524573235s ago: executing program 2 (id=4128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="88"], 0x88}}], 0x1, 0x44040) 1.398364962s ago: executing program 2 (id=4129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 1.311533526s ago: executing program 7 (id=4130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000000002, 0xa, 0xfffffffffffffffd, 0x0, 0x2000000000000, 0x0, 0x0, 0xffff, 0x0, 0x9, 0x20000000000001, 0x0, 0x3, 0x5}}) 1.296059236s ago: executing program 2 (id=4131): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206e1bad96f1749d657dfb5754e8006b7c25481977cc75ee836abe8aa102770dd0a340bba816df8f0b72d8d2d587bd219e706514d6cd3d5e81e"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) 1.292411378s ago: executing program 3 (id=4132): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000040)=""/88, 0x0, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) rseq(0x0, 0x0, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8004) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.244404887s ago: executing program 7 (id=4133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r2, 0x0) ftruncate(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x0, 0xfff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0xce, 0x23b) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r8 = io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x302, 0x20, 0x1, 0x1, 0x0, r5}) syz_init_net_socket$rose(0xb, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) close_range(r8, 0xffffffffffffffff, 0x0) 231.197566ms ago: executing program 7 (id=4134): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={r2}, &(0x7f0000000600)=0x8) 193.679119ms ago: executing program 1 (id=4135): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007682800029bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538a", 0x78}], 0x1}, 0x24000082) 169.468729ms ago: executing program 2 (id=4136): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x26020480) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 104.026024ms ago: executing program 7 (id=4137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "83"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 75.692242ms ago: executing program 3 (id=4138): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 22.150018ms ago: executing program 7 (id=4139): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="88"], 0x88}}], 0x1, 0x44040) 0s ago: executing program 1 (id=4140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) kernel console output (not intermixed with test programs): 7] team_slave_1: left allmulticast mode [ 801.390105][T13747] team_slave_0: left promiscuous mode [ 801.395652][T13747] team_slave_1: left promiscuous mode [ 801.450888][T13749] netlink: 'syz.3.2458': attribute type 4 has an invalid length. [ 801.458806][T13749] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2458'. [ 802.929836][T13777] loop2: detected capacity change from 0 to 512 [ 803.721795][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2475'. [ 803.793735][T13789] macsec1: entered allmulticast mode [ 803.812808][T13789] team0: entered allmulticast mode [ 803.873344][T13789] team0: left allmulticast mode [ 805.939733][T13840] netlink: 'syz.1.2498': attribute type 2 has an invalid length. [ 806.010557][T13840] þ`Ì: entered promiscuous mode [ 806.096708][T13843] lo speed is unknown, defaulting to 1000 [ 806.552532][T13858] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2505'. [ 807.615281][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2520'. [ 808.701547][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.708012][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.685781][T13910] x_tables: ip_tables: osf match: only valid for protocol 6 [ 811.143956][T13927] Cannot find add_set index 0 as target [ 811.951003][T13932] loop7: detected capacity change from 0 to 512 [ 812.050073][T13933] lo speed is unknown, defaulting to 1000 [ 812.118643][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'. [ 812.162099][T13938] batadv0: entered promiscuous mode [ 812.175725][T13938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 812.197630][T13938] batadv0: left promiscuous mode [ 813.065268][T13957] syzkaller0: entered allmulticast mode [ 813.763842][T13957] syzkaller0 (unregistering): left allmulticast mode [ 815.335021][T13976] loop2: detected capacity change from 0 to 512 [ 815.354038][T13976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 815.387057][T13983] lo speed is unknown, defaulting to 1000 [ 815.407477][T13976] EXT4-fs (loop2): 1 truncate cleaned up [ 815.429985][T13994] loop8: detected capacity change from 0 to 512 [ 815.431861][T13976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.511143][T13996] trusted_key: syz.7.2557 sent an empty control message without MSG_MORE. [ 815.905426][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.653617][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 818.960024][T14024] lo speed is unknown, defaulting to 1000 [ 819.312499][T14038] loop7: detected capacity change from 0 to 512 [ 819.325082][T14038] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 819.354512][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2572'. [ 819.364510][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 819.398827][T14038] EXT4-fs (loop7): 1 truncate cleaned up [ 819.407154][T14038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.657768][T14053] loop3: detected capacity change from 0 to 512 [ 819.739010][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.793684][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 821.844141][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 822.108195][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c8fc00: rx timeout, send abort [ 822.180572][T14094] lo speed is unknown, defaulting to 1000 [ 822.608326][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c8f000: rx timeout, send abort [ 822.626430][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c8fc00: abort rx timeout. Force session deactivation [ 822.922672][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2593'. [ 822.951919][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2593'. [ 823.116649][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c8f000: abort rx timeout. Force session deactivation [ 825.713671][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 825.746967][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 825.762217][T14153] loop2: detected capacity change from 0 to 512 [ 825.858296][T14157] loop8: detected capacity change from 0 to 512 [ 825.878416][T14157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 825.906822][T14157] EXT4-fs (loop8): orphan cleanup on readonly fs [ 825.915385][T14157] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2612: bg 0: block 248: padding at end of block bitmap is not set [ 825.937086][T14157] Quota error (device loop8): write_blk: dquota write failed [ 825.944677][T14157] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 825.954872][T14157] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2612: Failed to acquire dquot type 1 [ 825.969002][T14157] EXT4-fs (loop8): 1 truncate cleaned up [ 825.977252][T14157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 826.045430][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2613'. [ 826.092125][T14157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.690423][T14191] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 827.756532][T14191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.452346][T14197] loop1: detected capacity change from 0 to 512 [ 828.569472][T14197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 828.603237][T14197] EXT4-fs (loop1): orphan cleanup on readonly fs [ 828.618889][T14197] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2626: bg 0: block 248: padding at end of block bitmap is not set [ 828.637250][T14197] Quota error (device loop1): write_blk: dquota write failed [ 828.645300][T14197] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 828.655611][T14197] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2626: Failed to acquire dquot type 1 [ 828.678495][T14197] EXT4-fs (loop1): 1 truncate cleaned up [ 829.123856][T14197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 829.438349][T14191] bond1: (slave veth3): Enslaving as an active interface with a down link [ 829.503582][T14207] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2629'. [ 829.533757][T14199] vlan2: entered allmulticast mode [ 829.558373][T14199] bond1: entered allmulticast mode [ 829.565616][T14199] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 829.647666][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2628'. [ 829.798970][T14197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.924623][T14215] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2630'. [ 830.303975][T14223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2632'. [ 830.725590][T14232] loop1: detected capacity change from 0 to 512 [ 830.807404][T14227] loop7: detected capacity change from 0 to 512 [ 830.816962][T14227] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 830.884270][T14227] EXT4-fs (loop7): 1 truncate cleaned up [ 830.894454][T14227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.040506][T14247] netlink: 'syz.8.2640': attribute type 4 has an invalid length. [ 832.068168][T14245] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 832.166701][T14247] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2640'. [ 832.284977][T14245] bond2: entered promiscuous mode [ 832.304115][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.367554][T14245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.444223][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2641'. [ 833.427777][T14271] loop2: detected capacity change from 0 to 512 [ 833.515546][T14271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 833.617972][T14271] EXT4-fs (loop2): orphan cleanup on readonly fs [ 833.657160][T14271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2647: bg 0: block 248: padding at end of block bitmap is not set [ 833.688537][T14271] Quota error (device loop2): write_blk: dquota write failed [ 833.697430][T14271] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 833.708399][T14271] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2647: Failed to acquire dquot type 1 [ 833.741192][T14271] EXT4-fs (loop2): 1 truncate cleaned up [ 833.775565][T14271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 834.239017][T14271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.686728][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 835.170384][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 835.191867][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 835.870130][T14311] loop2: detected capacity change from 0 to 512 [ 835.901406][T14311] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 836.239557][T14311] EXT4-fs (loop2): 1 truncate cleaned up [ 836.255708][T14311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.701867][T14319] netlink: 'syz.8.2664': attribute type 4 has an invalid length. [ 836.745197][T14319] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2664'. [ 837.797064][T14328] loop7: detected capacity change from 0 to 512 [ 837.905085][T14328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 837.919115][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.989376][T14328] EXT4-fs (loop7): orphan cleanup on readonly fs [ 838.009412][T14328] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2669: bg 0: block 248: padding at end of block bitmap is not set [ 838.027050][T14328] Quota error (device loop7): write_blk: dquota write failed [ 838.035060][T14328] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 838.045617][T14328] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2669: Failed to acquire dquot type 1 [ 838.068206][T14328] EXT4-fs (loop7): 1 truncate cleaned up [ 838.092375][T14328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 838.348198][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.393880][T14333] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 838.536309][T14333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.089735][T14343] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.447775][T14343] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.549290][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2676'. [ 839.562646][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2676'. [ 839.679806][T14343] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.769694][T14343] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.126027][T14343] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.794582][T14343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.969286][T14343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.027350][T14343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.081244][T14377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2687'. [ 841.194328][T14382] netlink: 'syz.7.2683': attribute type 4 has an invalid length. [ 841.223441][T14382] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2683'. [ 841.246616][T14386] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 841.670584][T14394] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2693'. [ 842.709605][T14409] netlink: 'syz.8.2698': attribute type 1 has an invalid length. [ 842.897604][T14414] netlink: zone id is out of range [ 842.912459][T14414] netlink: zone id is out of range [ 842.930882][T14414] netlink: zone id is out of range [ 842.986270][T14414] netlink: set zone limit has 4 unknown bytes [ 842.993730][T14409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.744338][T14446] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2712'. [ 843.750701][T14445] netlink: 'syz.2.2709': attribute type 4 has an invalid length. [ 843.785220][T14445] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2709'. [ 844.870513][T14455] netlink: 'syz.8.2715': attribute type 2 has an invalid length. [ 844.916930][T14455] þ`Ì: entered promiscuous mode [ 844.989282][T14457] netlink: 'syz.3.2716': attribute type 1 has an invalid length. [ 845.060675][T14457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.783087][T14487] netlink: 'syz.8.2728': attribute type 2 has an invalid length. [ 845.895972][T14493] netlink: 'syz.7.2731': attribute type 1 has an invalid length. [ 845.931453][T14493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.165278][T14500] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2733'. [ 846.540272][T14510] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2737'. [ 847.433993][T14519] netlink: 'syz.3.2740': attribute type 2 has an invalid length. [ 847.479158][T14519] þ`Ì: entered promiscuous mode [ 847.666458][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2745'. [ 847.694091][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 847.694622][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2745'. [ 847.969613][T14543] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2751'. [ 849.317475][T14575] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2763'. [ 849.520707][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2765'. [ 850.445289][T14593] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2770'. [ 850.687608][T14588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.823316][T14588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.969912][T14588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.044711][T14588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.150656][T14588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.172974][T14588] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.197358][T14588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.242555][T14588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.648322][T14633] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 852.911767][T14640] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2787'. [ 853.174435][T14643] lo speed is unknown, defaulting to 1000 [ 853.798462][T14646] openvswitch: netlink: Message has 8 unknown bytes. [ 853.824407][T14646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.854817][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2790'. [ 854.023182][T14653] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2793'. [ 854.222183][T14657] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.353432][T14657] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.413882][T14657] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.464777][T14657] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.634923][T14657] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.657669][T14657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.681045][T14657] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.727478][T14657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.980127][T14681] openvswitch: netlink: Message has 8 unknown bytes. [ 854.988633][T14681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.658973][T14736] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2821'. [ 857.675163][T14766] Cannot find del_set index 1 as target [ 857.930889][T14776] netlink: zone id is out of range [ 857.991850][T14776] netlink: set zone limit has 4 unknown bytes [ 858.454512][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2853'. [ 858.521142][T14810] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2855'. [ 858.722061][T14814] netlink: zone id is out of range [ 858.813540][T14814] netlink: set zone limit has 4 unknown bytes [ 859.813036][T14832] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2862'. [ 859.840531][T14834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2864'. [ 861.382442][T14875] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2878'. [ 861.955303][T14890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 861.970882][T14890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 861.984764][T14890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 862.013315][T14890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 862.127414][T14890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 862.209925][T14888] lo speed is unknown, defaulting to 1000 [ 862.349572][T14896] x_tables: ip_tables: osf match: only valid for protocol 6 [ 863.184624][T14906] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2889'. [ 863.953466][T14930] loop8: detected capacity change from 0 to 512 [ 864.002292][T14930] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 864.090235][T14930] EXT4-fs (loop8): 1 truncate cleaned up [ 864.105955][T14930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.218123][T14890] Bluetooth: hci5: command tx timeout [ 864.493793][T14888] chnl_net:caif_netlink_parms(): no params data found [ 865.729990][ T8315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.808645][T14937] netlink: 46 bytes leftover after parsing attributes in process `syz.3.2899'. [ 866.233530][T14888] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.256646][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.287902][T14888] bridge_slave_0: entered allmulticast mode [ 866.321606][T14888] bridge_slave_0: entered promiscuous mode [ 866.383693][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.397535][T14890] Bluetooth: hci5: command tx timeout [ 866.416468][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.436733][T14888] bridge_slave_1: entered allmulticast mode [ 866.455250][T14888] bridge_slave_1: entered promiscuous mode [ 866.702328][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.767341][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.009389][T14888] team0: Port device team_slave_0 added [ 867.083871][T14888] team0: Port device team_slave_1 added [ 867.333251][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.365427][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.420994][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.434933][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.442133][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.489686][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.659714][T14888] hsr_slave_0: entered promiscuous mode [ 867.666630][T14888] hsr_slave_1: entered promiscuous mode [ 867.767202][T14970] loop7: detected capacity change from 0 to 512 [ 867.818380][T14970] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 867.862189][T14970] EXT4-fs (loop7): 1 truncate cleaned up [ 867.877454][T14970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.456345][T14890] Bluetooth: hci5: command tx timeout [ 869.550551][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.585327][T14888] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.731494][T14888] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.874794][T14888] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.922234][T15021] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2931'. [ 869.965741][T14888] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.156349][ T5951] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 870.164555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.174322][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.373586][T15032] loop1: detected capacity change from 0 to 512 [ 870.618658][T14890] Bluetooth: hci5: command tx timeout [ 871.224804][T15032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 871.247168][ T5951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.263548][T15032] EXT4-fs (loop1): 1 truncate cleaned up [ 871.267571][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 871.274165][T15032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.144494][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 872.154686][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 872.169780][ T5951] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 872.180395][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.189456][ T5951] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 872.242340][ T5951] usb 8-1: Manufacturer: syz [ 872.267795][ T5951] usb 8-1: config 0 descriptor?? [ 872.501907][T14888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 872.552334][T14888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 872.626742][T14888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 872.642659][T14888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 872.647536][ T5951] rc_core: IR keymap rc-hauppauge not found [ 872.672810][ T5951] Registered IR keymap rc-empty [ 872.706918][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 872.742975][T15053] futex_wake_op: syz.8.2932 tries to shift op by -33; fix this program [ 872.766085][T15053] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 872.985237][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.258207][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 873.289475][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input23 [ 873.359904][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.398769][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.447049][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.475652][T14888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.486880][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.516435][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.539318][T14888] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.548390][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.570552][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.577815][ T9983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.606761][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.629836][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.637086][ T9983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.648518][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.677191][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.706775][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 873.737969][ T5951] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 873.765426][ T5951] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 873.841335][ T5951] usb 8-1: USB disconnect, device number 11 [ 874.718086][T15073] xt_CT: No such helper "netbios-ns" [ 876.277083][T15087] loop8: detected capacity change from 0 to 512 [ 876.295746][T15087] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 877.138805][T15087] EXT4-fs (loop8): 1 truncate cleaned up [ 877.146444][T15087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.460844][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.741196][T14888] veth0_vlan: entered promiscuous mode [ 877.864019][T14888] veth1_vlan: entered promiscuous mode [ 878.208861][ T8315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.238491][T14888] veth0_macvtap: entered promiscuous mode [ 878.317844][T14888] veth1_macvtap: entered promiscuous mode [ 878.422065][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.479755][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.493386][T15117] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2958'. [ 878.524347][T14888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.568878][T14888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.587411][T14888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.599104][T14888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.878057][ T2864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.934319][ T2864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.002430][ T9983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.054225][ T9983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.069402][T15128] futex_wake_op: syz.7.2954 tries to shift op by -33; fix this program [ 879.235388][T15128] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 879.507902][ T5949] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 879.754770][ T5949] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.802344][ T5949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 879.843686][ T5949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 879.882756][ T5949] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 879.979832][ T5949] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.993544][ T5949] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.024373][ T5949] usb 9-1: Manufacturer: syz [ 880.051139][ T5949] usb 9-1: config 0 descriptor?? [ 880.526559][ T5949] rc_core: IR keymap rc-hauppauge not found [ 880.552983][ T5949] Registered IR keymap rc-empty [ 880.563277][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 880.618698][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 880.650108][ T5949] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 882.023354][ T5949] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 882.112539][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 882.201133][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 882.276321][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 882.299331][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.310000][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.318316][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.330997][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.339431][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.606421][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 882.723153][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 882.921038][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.229449][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.286491][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.326937][T15173] lo speed is unknown, defaulting to 1000 [ 883.341856][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.406314][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.451263][ T5949] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 883.490768][ T5949] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 883.553140][ T5949] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 883.603906][ T5949] usb 9-1: USB disconnect, device number 11 [ 883.966498][ T5914] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 884.067299][T15206] loop7: detected capacity change from 0 to 512 [ 884.083628][T15206] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 884.149435][T15206] EXT4-fs (loop7): 1 truncate cleaned up [ 884.165184][T15206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.616748][T14890] Bluetooth: hci0: command tx timeout [ 885.917357][ T5914] usb 4-1: device descriptor read/all, error -71 [ 886.240688][T15173] chnl_net:caif_netlink_parms(): no params data found [ 886.697967][T14890] Bluetooth: hci0: command tx timeout [ 887.285948][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.682736][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.715408][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.727540][T15248] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2998'. [ 887.746527][T15173] bridge_slave_0: entered allmulticast mode [ 887.758197][T15173] bridge_slave_0: entered promiscuous mode [ 887.802373][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.811827][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.820745][T15173] bridge_slave_1: entered allmulticast mode [ 887.830192][T15173] bridge_slave_1: entered promiscuous mode [ 887.955453][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.024644][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.046239][T14890] Bluetooth: hci0: command tx timeout [ 889.065045][T15173] team0: Port device team_slave_0 added [ 889.084362][T15173] team0: Port device team_slave_1 added [ 889.699378][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.729923][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.799700][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.826390][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.835604][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.872540][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.965137][T15272] loop8: detected capacity change from 0 to 512 [ 890.826397][T15272] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 890.854701][T15272] EXT4-fs (loop8): 1 truncate cleaned up [ 890.868237][T15272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.096581][T14890] Bluetooth: hci0: command tx timeout [ 892.125000][T15282] loop2: detected capacity change from 0 to 512 [ 892.133593][T15282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 892.172572][T15173] hsr_slave_0: entered promiscuous mode [ 892.184106][T15282] EXT4-fs (loop2): orphan cleanup on readonly fs [ 892.198593][T15282] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3009: bg 0: block 248: padding at end of block bitmap is not set [ 892.218177][T15282] Quota error (device loop2): write_blk: dquota write failed [ 892.225885][T15282] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 892.236826][T15282] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3009: Failed to acquire dquot type 1 [ 892.263687][T15282] EXT4-fs (loop2): 1 truncate cleaned up [ 892.280146][T15282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 892.331610][ T8315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.385566][T15173] hsr_slave_1: entered promiscuous mode [ 892.527655][T15173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.555868][T15173] Cannot create hsr debugfs directory [ 892.596946][T15282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.027929][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3014'. [ 893.050010][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3015'. [ 893.169216][T15298] macvtap1: entered promiscuous mode [ 893.175002][T15298] macvtap1: entered allmulticast mode [ 893.224647][T15300] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 893.329902][T15300] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 894.336466][ T5888] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 894.438659][T15173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.655031][T15173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 896.069940][T15173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 896.132009][T15173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 896.321881][T15338] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3029'. [ 896.525133][T15342] futex_wake_op: syz.8.3020 tries to shift op by -33; fix this program [ 896.539309][T15342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 896.677563][T15173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.780439][T15173] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.796758][T15348] netlink: 'syz.3.3030': attribute type 4 has an invalid length. [ 896.810054][T15348] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3030'. [ 896.848887][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.856095][ T9054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.934349][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.941620][ T9054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.850670][T15373] netlink: zone id is out of range [ 897.873066][T15373] netlink: zone id is out of range [ 897.889812][T15373] netlink: zone id is out of range [ 898.057525][T15173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.125042][T15373] netlink: set zone limit has 4 unknown bytes [ 898.243123][T15173] veth0_vlan: entered promiscuous mode [ 898.290285][T15173] veth1_vlan: entered promiscuous mode [ 898.419520][T15173] veth0_macvtap: entered promiscuous mode [ 898.453242][T15173] veth1_macvtap: entered promiscuous mode [ 898.613868][T15377] loop2: detected capacity change from 0 to 512 [ 898.629127][T15377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 898.639030][T15173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.665170][T15173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.684029][T15377] EXT4-fs (loop2): 1 truncate cleaned up [ 898.691648][T15377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.743507][T15173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.801600][T15173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.810888][T15173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.820838][T15173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.033260][ T9983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.062215][ T9983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.106754][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3044'. [ 899.153593][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.169456][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.193511][T14888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.681868][T15410] rdma_rxe: rxe_newlink: failed to add lo [ 900.827031][T15421] netlink: 'syz.7.3052': attribute type 4 has an invalid length. [ 900.891256][T15421] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3052'. [ 901.440685][T15426] futex_wake_op: syz.2.3049 tries to shift op by -33; fix this program [ 901.454072][T15426] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 901.471588][T15426] netdevsim netdevsim2: Direct firmware load for . [ 901.471588][T15426] failed with error -2 [ 901.482721][T15426] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 901.482721][T15426] [ 901.664040][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 901.676496][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 901.684833][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 901.700016][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 901.708700][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 901.875722][T15429] lo speed is unknown, defaulting to 1000 [ 902.058628][ T9983] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.391245][T15435] loop8: detected capacity change from 0 to 512 [ 902.402428][ T9983] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.464483][T15435] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 902.519634][T15435] EXT4-fs (loop8): 1 truncate cleaned up [ 902.531106][T15435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.693666][ T9983] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.737704][ T8315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.820709][ T9983] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.623129][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3066'. [ 903.859301][ T5845] Bluetooth: hci3: command tx timeout [ 905.362900][ T9983] bond0 (unregistering): Released all slaves [ 905.558563][ T9983] bond1 (unregistering): (slave veth3): Releasing active interface [ 905.575029][ T9983] bond1 (unregistering): Released all slaves [ 905.782040][ T9983] bond2 (unregistering): Released all slaves [ 905.903272][ T5845] Bluetooth: hci3: command tx timeout [ 906.067412][ T9983] bond3 (unregistering): Released all slaves [ 906.291528][ T9983] bond4 (unregistering): Released all slaves [ 906.475944][T15469] netlink: 46 bytes leftover after parsing attributes in process `syz.2.3069'. [ 906.595837][T15429] chnl_net:caif_netlink_parms(): no params data found [ 906.675159][T15471] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3070'. [ 906.945278][T15475] netlink: zone id is out of range [ 906.970621][T15475] netlink: zone id is out of range [ 906.975875][T15475] netlink: zone id is out of range [ 907.026261][ T9983] þ`Ì: left promiscuous mode [ 907.032753][T15473] loop7: detected capacity change from 0 to 512 [ 907.041123][T15473] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 907.076693][T15473] EXT4-fs (loop7): 1 truncate cleaned up [ 907.085518][T15473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.281509][T15475] netlink: set zone limit has 4 unknown bytes [ 907.461819][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.541366][T15489] netlink: 'syz.1.3074': attribute type 4 has an invalid length. [ 907.602001][T15489] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3074'. [ 907.981788][ T5845] Bluetooth: hci3: command tx timeout [ 907.988878][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.996100][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.035041][T15429] bridge_slave_0: entered allmulticast mode [ 908.063434][T15429] bridge_slave_0: entered promiscuous mode [ 908.228562][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.235804][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.914922][T15429] bridge_slave_1: entered allmulticast mode [ 908.932557][T15429] bridge_slave_1: entered promiscuous mode [ 909.137086][T15491] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 909.305804][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.365846][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.057214][ T5845] Bluetooth: hci3: command tx timeout [ 910.427235][T15519] netlink: 46 bytes leftover after parsing attributes in process `syz.8.3083'. [ 910.482776][T15429] team0: Port device team_slave_0 added [ 910.527428][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3085'. [ 910.567718][T15429] team0: Port device team_slave_1 added [ 910.604134][ T9983] hsr_slave_0: left promiscuous mode [ 910.638832][ T9983] hsr_slave_1: left promiscuous mode [ 910.742840][ T9983] veth1_macvtap: left promiscuous mode [ 910.775877][ T9983] veth0_macvtap: left promiscuous mode [ 910.816559][ T9983] veth1_vlan: left promiscuous mode [ 910.822031][ T9983] veth0_vlan: left promiscuous mode [ 911.165254][T15527] rdma_rxe: rxe_newlink: failed to add lo [ 912.276314][ T5923] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 912.448745][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 912.486062][ T5923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 912.510251][ T9983] pimreg (unregistering): left allmulticast mode [ 912.521379][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 912.566250][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.591859][T15529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 912.603217][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.876036][ T5923] usb 3-1: USB disconnect, device number 30 [ 913.560357][T15539] xt_CT: No such helper "netbios-ns" [ 915.716511][ T61] smc: removing ib device sz1 [ 915.734710][T15525] macsec1: entered allmulticast mode [ 916.132886][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 916.166079][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.174448][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.300966][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.346895][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.353904][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.374152][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 916.399582][T15570] netlink: 'syz.7.3098': attribute type 2 has an invalid length. [ 916.447357][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.561559][T15570] : entered promiscuous mode [ 917.398824][T15576] xt_CT: No such helper "netbios-ns" [ 917.907721][T15584] loop7: detected capacity change from 0 to 512 [ 917.917290][T15584] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 917.967282][T15584] EXT4-fs (loop7): 1 truncate cleaned up [ 917.985573][T15584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.999769][T15580] rdma_rxe: rxe_newlink: failed to add lo [ 918.244996][ T8166] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.378131][T15429] hsr_slave_0: entered promiscuous mode [ 918.413985][T15429] hsr_slave_1: entered promiscuous mode [ 918.437539][T15429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.445153][T15429] Cannot create hsr debugfs directory [ 918.789338][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3111'. [ 918.914016][T15612] macvtap2: entered promiscuous mode [ 918.936583][T15612] macvtap2: entered allmulticast mode [ 918.973547][T15616] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.220287][T15616] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.462317][T15626] loop7: detected capacity change from 0 to 512 [ 919.478660][T15626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 919.506646][T15626] EXT4-fs (loop7): orphan cleanup on readonly fs [ 919.521926][T15626] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3114: bg 0: block 248: padding at end of block bitmap is not set [ 919.541232][T15626] Quota error (device loop7): write_blk: dquota write failed [ 919.549930][T15626] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 919.560985][T15626] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3114: Failed to acquire dquot type 1 [ 919.593547][T15626] EXT4-fs (loop7): 1 truncate cleaned up [ 919.622107][T15626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 921.456466][T15616] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.810172][T15635] loop2: detected capacity change from 0 to 512 [ 921.823606][T15626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.841622][T15635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 921.904254][T15635] EXT4-fs (loop2): 1 truncate cleaned up [ 921.926999][T15635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.023676][T15616] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.431401][T14888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.470765][T15616] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.643753][T15616] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.793935][T15616] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.482826][T15616] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.756549][T15429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 925.398521][T15664] netlink: 46 bytes leftover after parsing attributes in process `syz.2.3125'. [ 925.730919][T15429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 925.996897][T15669] loop8: detected capacity change from 0 to 512 [ 926.058921][T15669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 926.103513][T15669] EXT4-fs (loop8): orphan cleanup on readonly fs [ 926.131899][T15669] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3128: bg 0: block 248: padding at end of block bitmap is not set [ 926.149868][T15669] Quota error (device loop8): write_blk: dquota write failed [ 926.157968][T15669] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 926.168325][T15669] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3128: Failed to acquire dquot type 1 [ 926.189099][T15669] EXT4-fs (loop8): 1 truncate cleaned up [ 926.215102][T15669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 926.439362][T15429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 926.520336][T15429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 926.559366][T15669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.080091][T15682] loop1: detected capacity change from 0 to 512 [ 927.092171][T15682] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 927.189934][T15682] EXT4-fs (loop1): 1 truncate cleaned up [ 927.197637][T15682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.393680][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.568105][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.660059][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.667325][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.792623][T15173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.827622][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.834902][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.816502][T15691] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 929.981905][T15711] netlink: 46 bytes leftover after parsing attributes in process `syz.8.3138'. [ 930.666352][ T5888] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 930.840258][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.871650][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 930.929091][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 930.998766][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 931.049107][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.166281][ T5888] usb 3-1: string descriptor 0 read error: -71 [ 931.172550][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 931.239356][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.297743][ T5888] usb 3-1: config 0 descriptor?? [ 931.334989][T15429] veth0_vlan: entered promiscuous mode [ 931.351735][ T5888] usb 3-1: can't set config #0, error -71 [ 931.381080][ T5888] usb 3-1: USB disconnect, device number 31 [ 931.419479][T15429] veth1_vlan: entered promiscuous mode [ 931.583385][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.590146][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.632327][T15429] veth0_macvtap: entered promiscuous mode [ 931.731773][T15429] veth1_macvtap: entered promiscuous mode [ 931.826983][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.861347][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.890336][T15429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.921796][T15429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.943495][T15429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.954674][T15429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.125771][ T2864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.155442][ T2864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.269972][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.293148][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.493328][T15760] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3153'. [ 933.616764][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 933.817312][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 933.948069][T15769] syz_tun: entered promiscuous mode [ 933.984527][T15769] macvtap1: entered promiscuous mode [ 934.015178][T15769] macvtap1: entered allmulticast mode [ 934.048510][T15769] syz_tun: entered allmulticast mode [ 934.114884][T15768] syz_tun: left allmulticast mode [ 934.153234][T15768] syz_tun: left promiscuous mode [ 934.768736][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 935.131164][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 935.141299][T15808] bond0: entered promiscuous mode [ 935.146566][T15808] bond_slave_0: entered promiscuous mode [ 935.157030][T15808] bond_slave_1: entered promiscuous mode [ 935.163597][T15808] bond0: entered allmulticast mode [ 935.169366][T15808] bond_slave_0: entered allmulticast mode [ 935.175303][T15808] bond_slave_1: entered allmulticast mode [ 935.827422][T15826] loop2: detected capacity change from 0 to 512 [ 935.848035][T15826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 935.865749][T15826] EXT4-fs (loop2): 1 truncate cleaned up [ 935.873348][T15826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.163672][T14888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.753697][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3188'. [ 937.052931][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 938.415284][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3207'. [ 938.456932][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3207'. [ 938.473041][T15898] loop2: detected capacity change from 0 to 512 [ 938.480981][T15898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 938.517217][T15898] EXT4-fs (loop2): 1 truncate cleaned up [ 938.524767][T15898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.542469][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3208'. [ 938.774526][T14888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.498616][T15926] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3213'. [ 939.637474][T15915] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.742834][T15915] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.870908][T15915] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.006312][T15915] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.104099][T15942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3221'. [ 940.247498][T15915] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.338486][T15915] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.494342][T15915] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.603439][T15915] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.014235][T15962] futex_wake_op: syz.1.3218 tries to shift op by -33; fix this program [ 941.343546][T15967] netdevsim netdevsim1: Direct firmware load for . [ 941.343546][T15967] failed with error -2 [ 941.356929][T15962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 941.368048][T15967] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 941.368048][T15967] [ 944.220748][T16005] netlink: 'syz.1.3242': attribute type 10 has an invalid length. [ 944.253737][T16005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3242'. [ 944.370187][T16005] team0: Port device geneve0 added [ 944.705105][T16017] overlayfs: failed to resolve './file1': -2 [ 944.797059][T16018] lo speed is unknown, defaulting to 1000 [ 944.814465][T16018] lo speed is unknown, defaulting to 1000 [ 944.827098][T16018] lo speed is unknown, defaulting to 1000 [ 945.502501][T16018] infiniband sz1: set down [ 945.507126][T16018] infiniband sz1: added lo [ 945.520399][ T5949] lo speed is unknown, defaulting to 1000 [ 945.556943][T16018] RDS/IB: sz1: added [ 945.561047][T16018] smc: adding ib device sz1 with port count 1 [ 945.569001][T16018] smc: ib device sz1 port 1 has pnetid [ 945.586209][T16018] lo speed is unknown, defaulting to 1000 [ 945.701939][ T5949] lo speed is unknown, defaulting to 1000 [ 945.768377][T16030] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 945.933932][T16030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 945.946209][ T5949] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 945.953926][T16018] lo speed is unknown, defaulting to 1000 [ 945.965100][T16038] netlink: 'syz.7.3252': attribute type 1 has an invalid length. [ 946.213689][T16038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.263673][T16018] lo speed is unknown, defaulting to 1000 [ 946.506875][T16018] lo speed is unknown, defaulting to 1000 [ 946.647450][ T5949] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 946.659225][ T5949] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 946.765660][T16018] lo speed is unknown, defaulting to 1000 [ 946.804458][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3259'. [ 947.000805][T16018] lo speed is unknown, defaulting to 1000 [ 947.131016][T16063] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3262'. [ 947.237099][T16018] lo speed is unknown, defaulting to 1000 [ 947.392495][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 947.489102][T16066] ip6gretap0: entered promiscuous mode [ 947.523869][T16066] macvtap1: entered promiscuous mode [ 947.546632][T16066] macvtap1: entered allmulticast mode [ 947.590875][T16066] ip6gretap0: entered allmulticast mode [ 947.606355][ T5949] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 947.626166][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.647580][ T5949] usb 9-1: can't set config #27, error -71 [ 947.656437][ T5949] usb 9-1: USB disconnect, device number 12 [ 947.727825][T16070] ip6gretap0: left allmulticast mode [ 947.752804][T16070] ip6gretap0: left promiscuous mode [ 947.838837][T16074] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.954457][T16074] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.152707][T16074] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.231732][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3271'. [ 948.271034][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3271'. [ 948.298120][T16089] lo speed is unknown, defaulting to 1000 [ 948.674463][T16074] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.943719][T16111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3275'. [ 948.995668][T16074] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.068683][T16074] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.148316][T16074] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.209674][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3279'. [ 949.257137][T16074] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.314544][T16119] ip6gretap0: entered promiscuous mode [ 949.324198][T16119] macvtap2: entered promiscuous mode [ 949.335182][T16119] macvtap2: entered allmulticast mode [ 949.341093][T16119] ip6gretap0: entered allmulticast mode [ 949.370409][T16121] ip6gretap0: left allmulticast mode [ 949.377617][T16121] ip6gretap0: left promiscuous mode [ 949.741255][T16126] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3281'. [ 950.454261][T16132] lo speed is unknown, defaulting to 1000 [ 951.237542][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3292'. [ 952.147064][T16170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3295'. [ 952.158509][T16142] lo speed is unknown, defaulting to 1000 [ 952.327056][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3298'. [ 952.380690][T16177] ip6gretap0: entered promiscuous mode [ 952.449181][T16177] macvtap3: entered promiscuous mode [ 952.498739][T16177] macvtap3: entered allmulticast mode [ 952.516308][T16177] ip6gretap0: entered allmulticast mode [ 952.558762][T16179] ip6gretap0: left allmulticast mode [ 952.564293][T16179] ip6gretap0: left promiscuous mode [ 952.572789][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.581793][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.590534][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.604660][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.613631][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.622196][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.666519][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.695134][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.713496][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.722764][T16183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.890984][T16192] netlink: 'syz.8.3303': attribute type 1 has an invalid length. [ 953.049683][T16193] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3303'. [ 953.184752][T16192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.636818][T16208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3308'. [ 955.019024][T16221] lo speed is unknown, defaulting to 1000 [ 955.133934][T16227] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 955.194647][T16233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3316'. [ 955.247480][T16227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.512666][T16241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3321'. [ 955.654712][T16244] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3323'. [ 955.664155][ T5914] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 955.837943][ T5914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.884281][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 955.930028][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 955.970113][ T5914] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 956.020005][ T5914] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 956.058971][ T5914] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 956.093384][ T5914] usb 9-1: Manufacturer: syz [ 956.120774][ T5914] usb 9-1: config 0 descriptor?? [ 956.145797][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 956.172148][T16262] netlink: 'syz.7.3332': attribute type 1 has an invalid length. [ 956.198520][T16258] ip6gretap0: entered promiscuous mode [ 956.204678][T16258] macvtap2: entered promiscuous mode [ 956.220670][T16258] macvtap2: entered allmulticast mode [ 956.233626][T16258] ip6gretap0: entered allmulticast mode [ 956.284941][T16267] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3332'. [ 956.340676][T16262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 956.352155][T16263] ip6gretap0: left allmulticast mode [ 956.363741][T16263] ip6gretap0: left promiscuous mode [ 956.496363][ T5914] rc_core: IR keymap rc-hauppauge not found [ 956.498550][T16274] lo speed is unknown, defaulting to 1000 [ 956.502322][ T5914] Registered IR keymap rc-empty [ 956.502496][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.583267][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.647145][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 956.702862][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input25 [ 956.731325][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.766422][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.798873][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.807148][T16282] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3338'. [ 956.833199][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.856674][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.886431][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.927179][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 956.976780][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 957.016750][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 957.036537][ T5914] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 957.068562][ T5914] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 957.098332][ T5914] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 957.159186][ T5914] usb 9-1: USB disconnect, device number 13 [ 957.583110][ T5973] net_ratelimit: 736 callbacks suppressed [ 957.583132][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.778469][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.780380][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.950299][T16316] rdma_rxe: rxe_newlink: failed to add lo [ 958.511498][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.651024][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.795754][T16323] lo speed is unknown, defaulting to 1000 [ 958.858496][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.525742][T16353] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.636864][ T5951] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 960.226880][T16353] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.329600][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.341691][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.381968][T16353] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.500210][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.518146][T16353] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.521600][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 960.656720][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.672232][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 960.687059][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 960.696210][ T5951] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 960.704257][ T5951] usb 3-1: Manufacturer: syz [ 960.712121][ T5951] usb 3-1: config 0 descriptor?? [ 960.801999][T16353] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.826537][T16353] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.859381][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.867446][T16353] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.899618][T16353] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.036210][ T5951] rc_core: IR keymap rc-hauppauge not found [ 961.042198][ T5951] Registered IR keymap rc-empty [ 961.062606][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.110256][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.155779][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 961.189963][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 961.220314][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.246524][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.299221][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.350143][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.396956][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.446495][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.476298][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.507147][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.598371][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.809104][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.883825][T16396] netlink: 'syz.7.3381': attribute type 1 has an invalid length. [ 962.070940][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 962.139144][T16398] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3381'. [ 962.178276][ T5951] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 962.230408][ T5951] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 962.269036][ T5951] usb 3-1: USB disconnect, device number 32 [ 962.277308][T16396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 962.323602][T16405] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3384'. [ 962.557526][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3389'. [ 962.603663][T16417] macvtap3: entered promiscuous mode [ 962.611039][T16417] macvtap3: entered allmulticast mode [ 962.629853][T16415] lo speed is unknown, defaulting to 1000 [ 962.989155][T16436] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3397'. [ 963.156325][ T5951] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 963.342017][ T5951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.372149][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 963.403436][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.434064][T16359] net_ratelimit: 6 callbacks suppressed [ 963.434086][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.449561][T16445] netlink: 'syz.8.3399': attribute type 1 has an invalid length. [ 963.468504][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 963.491890][ T5951] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 963.502097][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.516418][ T5951] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 963.526766][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3399'. [ 963.543538][ T5951] usb 8-1: Manufacturer: syz [ 963.551400][ T5951] usb 8-1: config 0 descriptor?? [ 963.657626][T16445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 963.897768][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.956522][ T5951] rc_core: IR keymap rc-hauppauge not found [ 963.972299][ T5951] Registered IR keymap rc-empty [ 963.986948][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.044419][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.126720][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 964.150675][T16456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.176329][T16456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.189228][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input27 [ 964.220650][T14709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.232973][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.241725][T14709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.246597][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.280454][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.356320][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.377571][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.416460][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.438898][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.446936][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3405'. [ 964.471073][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.504536][T16464] bridge0: entered promiscuous mode [ 964.511649][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.520175][T16464] macvtap4: entered promiscuous mode [ 964.525866][T16464] macvtap4: entered allmulticast mode [ 964.531425][T16464] bridge0: entered allmulticast mode [ 964.540587][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.557224][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'. [ 964.578733][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.596624][T16467] bridge0: left allmulticast mode [ 964.601888][T16467] bridge0: left promiscuous mode [ 964.607760][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.671407][T16466] team_slave_0: entered promiscuous mode [ 964.677236][T16466] team_slave_1: entered promiscuous mode [ 964.683539][T16466] macsec1: entered allmulticast mode [ 964.713864][T16466] team0: entered allmulticast mode [ 964.724220][T16466] team_slave_0: entered allmulticast mode [ 964.744418][T16466] team_slave_1: entered allmulticast mode [ 964.831937][ T5951] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 964.844865][T16466] team0: left allmulticast mode [ 964.855697][T16466] team_slave_0: left allmulticast mode [ 964.868687][ T5951] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 964.873645][T16466] team_slave_1: left allmulticast mode [ 964.883551][T16466] team_slave_0: left promiscuous mode [ 964.889073][T16466] team_slave_1: left promiscuous mode [ 964.895179][ T5951] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.957548][ T5951] usb 8-1: USB disconnect, device number 12 [ 965.316045][T16470] xt_CT: No such helper "netbios-ns" [ 965.691793][T16491] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3417'. [ 965.937338][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'. [ 966.018918][T16500] ip6gretap0: entered promiscuous mode [ 966.024688][T16500] macvtap1: entered promiscuous mode [ 966.034039][T16500] macvtap1: entered allmulticast mode [ 966.039555][T16500] ip6gretap0: entered allmulticast mode [ 966.058957][T16506] ip6gretap0: left allmulticast mode [ 966.064585][T16506] ip6gretap0: left promiscuous mode [ 966.076819][T16501] lo speed is unknown, defaulting to 1000 [ 966.194880][T16512] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 966.316362][ T5951] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 966.479721][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.504934][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 966.525171][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.535020][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 966.597351][ T5951] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.616953][ T5951] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.646992][ T5951] usb 4-1: Manufacturer: syz [ 966.683699][ T5951] usb 4-1: config 0 descriptor?? [ 966.733022][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 966.774120][T16521] team_slave_0: entered promiscuous mode [ 966.779978][T16521] team_slave_1: entered promiscuous mode [ 966.787667][T16521] macsec1: entered allmulticast mode [ 966.793151][T16521] team0: entered allmulticast mode [ 966.826402][T16521] team_slave_0: entered allmulticast mode [ 966.848728][T16521] team_slave_1: entered allmulticast mode [ 966.879474][T16521] team0: left allmulticast mode [ 966.894658][T16521] team_slave_0: left allmulticast mode [ 966.921175][T16521] team_slave_1: left allmulticast mode [ 966.941405][T16521] team_slave_0: left promiscuous mode [ 966.946924][T16521] team_slave_1: left promiscuous mode [ 966.996265][ T5951] rc_core: IR keymap rc-hauppauge not found [ 967.004000][ T5951] Registered IR keymap rc-empty [ 967.013603][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.038088][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.127191][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 967.203329][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 967.244764][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.297360][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.341519][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.382632][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.406650][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.443019][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.486273][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.486641][T16542] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3438'. [ 967.516765][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.566389][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.606980][ T5951] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.639587][ T5951] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 967.656753][ T5951] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 967.669593][ T5951] usb 4-1: USB disconnect, device number 16 [ 967.685222][T16548] lo speed is unknown, defaulting to 1000 [ 968.755001][T16586] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3457'. [ 968.777076][ T5888] net_ratelimit: 384 callbacks suppressed [ 968.777095][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.794169][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.941314][T16589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 969.101904][T16597] lo speed is unknown, defaulting to 1000 [ 969.201938][T16603] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3463'. [ 969.816658][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.987664][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.209544][T16633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.391358][T16633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.653488][T16633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.840701][T16633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.869600][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.512177][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3494'. [ 971.524512][T16633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.557420][T16633] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.599563][T16679] macsec1: entered allmulticast mode [ 971.661157][T16633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.698642][T16633] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.859146][T16691] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3498'. [ 971.896953][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.899001][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 971.998440][T16695] bridge0: entered promiscuous mode [ 972.006011][T16700] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3501'. [ 972.036509][T16695] macvtap3: entered promiscuous mode [ 972.049959][T16695] macvtap3: entered allmulticast mode [ 972.055493][T16695] bridge0: entered allmulticast mode [ 972.207360][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 972.534609][ T30] audit: type=1800 audit(1750098458.844:92): pid=16717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3509" name="memory.events" dev="tmpfs" ino=2966 res=0 errno=0 [ 972.701717][T16721] lo speed is unknown, defaulting to 1000 [ 972.946819][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.026688][T14709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.381943][T14890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 973.391939][T14890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 973.400156][T14890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.426354][T14890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.435469][T14890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 973.754458][T16757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.763658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.874719][T16745] lo speed is unknown, defaulting to 1000 [ 973.977014][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.457059][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.656451][T16781] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 974.890154][T16791] bridge_slave_0: left allmulticast mode [ 974.906440][T16791] bridge_slave_0: left promiscuous mode [ 974.912379][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.003122][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.004264][T16791] bridge_slave_1: left allmulticast mode [ 975.012597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.039657][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.067471][T16791] bridge_slave_1: left promiscuous mode [ 975.073306][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.114479][T16791] bond0: (slave bond_slave_0): Releasing backup interface [ 975.178227][T16791] bond0: (slave bond_slave_1): Releasing backup interface [ 975.260359][T16791] team0: Failed to send options change via netlink (err -105) [ 975.280884][T16791] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 975.295953][T16791] team0: Port device team_slave_0 removed [ 975.326414][T16791] team0: Failed to send options change via netlink (err -105) [ 975.343610][T16791] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 975.354335][T16791] team0: Port device team_slave_1 removed [ 975.364271][T16791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.373224][T16791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.387675][T16791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.405701][T16791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.509551][ T5845] Bluetooth: hci1: command tx timeout [ 975.534045][ T5923] syz1: Port: 1 Link DOWN [ 975.602625][T16745] chnl_net:caif_netlink_parms(): no params data found [ 976.009321][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.033044][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.050085][T16745] bridge_slave_0: entered allmulticast mode [ 976.057510][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.065670][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.073211][T16745] bridge_slave_0: entered promiscuous mode [ 976.088747][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.096071][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.103681][T16745] bridge_slave_1: entered allmulticast mode [ 976.131096][T16745] bridge_slave_1: entered promiscuous mode [ 976.292801][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.329777][T16844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.331448][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.339063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.438485][T16745] team0: Port device team_slave_0 added [ 976.444685][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3553'. [ 976.462256][T16745] team0: Port device team_slave_1 added [ 976.626042][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.645067][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.689596][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.711822][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.719444][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.772159][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.972113][T16745] hsr_slave_0: entered promiscuous mode [ 976.993244][T16745] hsr_slave_1: entered promiscuous mode [ 977.014782][T16745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.026633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.056328][T16745] Cannot create hsr debugfs directory [ 977.357736][T16876] sz1: rxe_newlink: already configured on lo [ 977.997621][ T5845] Bluetooth: hci1: command tx timeout [ 978.336405][ T5949] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 978.516312][ T5949] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 978.617689][ T5949] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 978.666667][ T5949] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.702666][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.735339][T16878] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 978.750181][ T5949] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 978.959329][ T5951] usb 9-1: USB disconnect, device number 14 [ 979.049144][T16745] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.096754][ T5949] net_ratelimit: 4 callbacks suppressed [ 979.096775][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.131311][T16745] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.190494][T16745] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.261586][T16745] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.514915][T16745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 979.529204][T16745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 979.543113][T16745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 979.559382][T16745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 979.657080][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.747499][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.783117][T16902] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 979.794333][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.885569][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.892906][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.904004][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.911235][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.023642][T16907] tipc: Enabling of bearer rejected, failed to enable media [ 980.066611][ T5845] Bluetooth: hci1: command tx timeout [ 980.526264][T16914] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3574'. [ 981.348199][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.743693][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.147139][T14709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.158719][ T5845] Bluetooth: hci1: command tx timeout [ 982.385713][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.412364][T16745] veth0_vlan: entered promiscuous mode [ 982.447146][T16745] veth1_vlan: entered promiscuous mode [ 982.535779][T16745] veth0_macvtap: entered promiscuous mode [ 982.570605][T16745] veth1_macvtap: entered promiscuous mode [ 982.643880][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.701601][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.729953][T16745] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.760178][T16745] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.799966][T16745] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.846854][T16745] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.090254][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.109794][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.190190][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.226131][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.424378][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.535145][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.640957][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.752905][T17000] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 984.856452][T14890] Bluetooth: hci5: command 0x0406 tx timeout [ 985.176567][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.196492][T17012] loop7: detected capacity change from 0 to 512 [ 985.204265][T17012] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 985.222788][T17018] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3611'. [ 985.234067][T17012] EXT4-fs (loop7): 1 truncate cleaned up [ 985.241942][T17012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.500534][T16745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.584845][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.756547][T14890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.767079][T14890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.775953][T14890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.784873][T14890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.792724][T14890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.801945][T17058] loop7: detected capacity change from 0 to 512 [ 986.811947][T17058] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 986.822387][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.870285][T17058] EXT4-fs (loop7): 1 truncate cleaned up [ 986.877835][T17058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.278290][T17054] lo speed is unknown, defaulting to 1000 [ 987.323095][T16745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.790241][T17090] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.857042][T17090] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.898677][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.962795][T17090] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.014861][T17090] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.144362][T17090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.182744][T17090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.192322][T17062] lo speed is unknown, defaulting to 1000 [ 988.204194][T17090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.216951][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.336721][T17090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.936724][T14890] Bluetooth: hci2: command tx timeout [ 988.938701][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.937037][T17062] chnl_net:caif_netlink_parms(): no params data found [ 989.977929][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.132716][T17138] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 990.294954][T17062] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.333161][T17062] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.355786][T17062] bridge_slave_0: entered allmulticast mode [ 990.408423][T17062] bridge_slave_0: entered promiscuous mode [ 990.425811][T17062] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.444514][T17062] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.452230][T17062] bridge_slave_1: entered allmulticast mode [ 990.472951][T17062] bridge_slave_1: entered promiscuous mode [ 990.610256][T17062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.655911][T17062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.813579][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3655'. [ 991.010037][T17062] team0: Port device team_slave_0 added [ 991.016303][T14890] Bluetooth: hci2: command tx timeout [ 991.016982][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.067748][T17062] team0: Port device team_slave_1 added [ 991.218116][T17062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.249466][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.279765][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.326543][T17062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.368797][T17062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.383883][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.415623][T17062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.611512][T17062] hsr_slave_0: entered promiscuous mode [ 991.628579][T17062] hsr_slave_1: entered promiscuous mode [ 991.655936][T17062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.672306][T17062] Cannot create hsr debugfs directory [ 991.944938][T17166] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 992.049948][T17168] lo speed is unknown, defaulting to 1000 [ 992.057234][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.353508][T17062] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.483610][T17062] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.594810][T17062] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.684552][T17062] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.032842][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.053828][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.096945][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.105459][T14890] Bluetooth: hci2: command tx timeout [ 993.128036][T17196] xt_ecn: cannot match TCP bits for non-tcp packets [ 993.349587][T17062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 993.399514][T17062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 993.448311][T17205] Bluetooth: MGMT ver 1.23 [ 993.522619][T17062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 993.589000][T17062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 993.655044][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'. [ 993.670818][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.714839][T17209] team_slave_0: entered promiscuous mode [ 993.720752][T17209] team_slave_1: entered promiscuous mode [ 993.726516][T17209] geneve0: entered promiscuous mode [ 993.732731][T17209] macsec1: entered allmulticast mode [ 993.741164][T17209] team0: entered allmulticast mode [ 993.748724][T17209] team_slave_0: entered allmulticast mode [ 993.757875][T17209] team_slave_1: entered allmulticast mode [ 993.763850][T17209] geneve0: entered allmulticast mode [ 993.775625][T17209] team0: left allmulticast mode [ 993.783286][T17209] team_slave_0: left allmulticast mode [ 993.789192][T17209] team_slave_1: left allmulticast mode [ 993.795957][T17209] geneve0: left allmulticast mode [ 993.802553][T17209] team_slave_0: left promiscuous mode [ 993.808122][T17209] team_slave_1: left promiscuous mode [ 993.813745][T17209] geneve0: left promiscuous mode [ 993.825877][T17218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.834493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.136821][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.140479][T17062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.229327][T17232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.249667][T17062] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.284281][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.291532][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.340047][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.347343][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.593441][T17242] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3688'. [ 995.177395][T14890] Bluetooth: hci2: command tx timeout [ 995.185381][ T5914] net_ratelimit: 5 callbacks suppressed [ 995.185400][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.244497][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.655783][T17276] netlink: 'syz.7.3700': attribute type 72 has an invalid length. [ 996.129056][T17062] veth0_vlan: entered promiscuous mode [ 996.174327][T17062] veth1_vlan: entered promiscuous mode [ 996.218975][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.295158][T17062] veth0_macvtap: entered promiscuous mode [ 996.327384][T17062] veth1_macvtap: entered promiscuous mode [ 996.384126][T17062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.414058][T17062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.434467][T17062] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.449491][T17062] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.463230][T17062] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.481542][T17062] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.679287][T17309] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3713'. [ 996.729133][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.747808][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.850774][ T9054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.873608][ T9054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.937714][T17317] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3717'. [ 997.258260][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.307434][T17334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3724'. [ 997.360219][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.576797][T17346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.585969][T17346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.628426][T17346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.688144][T17345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.714876][T17345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.886948][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'. [ 997.944025][T17353] team_slave_0: entered promiscuous mode [ 997.949843][T17353] team_slave_1: entered promiscuous mode [ 997.958066][T17353] macsec1: entered allmulticast mode [ 997.963977][T17353] team0: entered allmulticast mode [ 997.983102][T17353] team_slave_0: entered allmulticast mode [ 997.994521][T17353] team_slave_1: entered allmulticast mode [ 998.017113][T17353] team0: left allmulticast mode [ 998.022157][T17353] team_slave_0: left allmulticast mode [ 998.029623][T17353] team_slave_1: left allmulticast mode [ 998.041547][T17353] team_slave_0: left promiscuous mode [ 998.047129][T17353] team_slave_1: left promiscuous mode [ 998.138052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.176305][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3737'. [ 998.496919][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3744'. [ 999.007733][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3753'. [ 999.064979][T17396] team_slave_0: entered promiscuous mode [ 999.070748][T17396] team_slave_1: entered promiscuous mode [ 999.085902][T17396] macsec1: entered allmulticast mode [ 999.091629][T17396] team0: entered allmulticast mode [ 999.104764][T17396] team_slave_0: entered allmulticast mode [ 999.112644][T17396] team_slave_1: entered allmulticast mode [ 999.145479][T17396] team0: left allmulticast mode [ 999.151573][T17396] team_slave_0: left allmulticast mode [ 999.160807][T17396] team_slave_1: left allmulticast mode [ 999.171060][T17396] team_slave_0: left promiscuous mode [ 999.176572][T17396] team_slave_1: left promiscuous mode [ 999.617750][T17414] futex_wake_op: syz.3.3750 tries to shift op by -33; fix this program [ 999.628310][T17414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 999.645791][T17414] netdevsim netdevsim3: Direct firmware load for . [ 999.645791][T17414] failed with error -2 [ 999.659414][T17414] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 999.659414][T17414] [ 1000.377342][ T5914] net_ratelimit: 3 callbacks suppressed [ 1000.377360][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.543531][ T33] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 1000.753991][T17439] loop8: detected capacity change from 0 to 512 [ 1000.763407][T17439] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1000.785821][T17439] EXT4-fs (loop8): 1 truncate cleaned up [ 1000.793638][T17439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.923335][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.932634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.088236][T17062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.177045][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.339441][T17460] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3780'. [ 1001.371626][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3778'. [ 1001.419048][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.470209][T17459] syzkaller0: entered promiscuous mode [ 1001.493157][T17459] syzkaller0: entered allmulticast mode [ 1001.911202][T17478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.919685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.245179][T17487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.459521][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.729873][T17506] xt_ecn: cannot match TCP bits for non-tcp packets [ 1003.058847][T17518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1003.261334][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.343964][T17524] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1005.337042][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.514273][T17553] loop2: detected capacity change from 0 to 512 [ 1005.515734][T17562] net_ratelimit: 4 callbacks suppressed [ 1005.515753][T17562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.538244][T17553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1005.554117][T17553] EXT4-fs (loop2): 1 truncate cleaned up [ 1005.563722][T17553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.578659][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.935949][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3828'. [ 1005.959316][T14888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.096989][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3833'. [ 1006.133876][T17584] team_slave_0: entered promiscuous mode [ 1006.139697][T17584] team_slave_1: entered promiscuous mode [ 1006.167337][T17584] macsec1: entered allmulticast mode [ 1006.174412][T17584] team0: entered allmulticast mode [ 1006.180411][T17584] team_slave_0: entered allmulticast mode [ 1006.193129][T17584] team_slave_1: entered allmulticast mode [ 1006.225077][T17584] team0: left allmulticast mode [ 1006.236251][T17584] team_slave_0: left allmulticast mode [ 1006.249398][T17584] team_slave_1: left allmulticast mode [ 1006.275537][T17584] team_slave_0: left promiscuous mode [ 1006.281117][T17584] team_slave_1: left promiscuous mode [ 1006.822535][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.863885][T17607] loop3: detected capacity change from 0 to 512 [ 1006.871998][T17607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1006.923010][T17607] EXT4-fs (loop3): 1 truncate cleaned up [ 1006.930647][T17607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.075714][T17625] lo speed is unknown, defaulting to 1000 [ 1007.161856][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1007.239508][T17632] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3847'. [ 1007.316260][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.341670][T15429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.467591][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3851'. [ 1007.494057][T17635] ipvlan1: entered promiscuous mode [ 1007.500008][T17635] ipvlan1: entered allmulticast mode [ 1007.504714][T17639] xt_ecn: cannot match TCP bits for non-tcp packets [ 1007.505625][T17635] veth0_vlan: entered allmulticast mode [ 1007.929301][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.055369][T17660] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3857'. [ 1008.930370][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.946476][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.979043][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.989099][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.140577][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.193560][T17669] netlink: 'syz.3.3861': attribute type 4 has an invalid length. [ 1009.247340][T17669] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1009.629373][T17684] lo speed is unknown, defaulting to 1000 [ 1010.274020][T17697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.386890][T17701] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1010.509551][T17697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.662509][T17697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.918456][T17697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.023625][ T5914] net_ratelimit: 4 callbacks suppressed [ 1011.023645][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.207033][T17697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.292718][T17697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.343688][T17697] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.434985][T17697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.582442][T17725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1011.909857][T17743] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1012.000202][T17744] lo speed is unknown, defaulting to 1000 [ 1012.060002][T16359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.168846][T17750] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1012.217507][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.244522][T17750] netlink: 'syz.1.3893': attribute type 21 has an invalid length. [ 1012.282783][T17750] netlink: 'syz.1.3893': attribute type 1 has an invalid length. [ 1012.805170][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1013.228409][T17771] loop8: detected capacity change from 0 to 512 [ 1013.301892][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.310732][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.505976][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.518250][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.539875][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.549040][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.378360][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.977784][T17795] xt_CT: No such helper "netbios-ns" [ 1015.068003][T17794] lo speed is unknown, defaulting to 1000 [ 1015.696997][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1016.456477][ T5914] net_ratelimit: 4 callbacks suppressed [ 1016.456496][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.745946][T17863] netlink: 46 bytes leftover after parsing attributes in process `syz.8.3936'. [ 1018.057630][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.065975][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.638584][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1019.062294][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.118642][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.257965][ T3010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.307426][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.316209][T14709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.616892][T17890] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3949'. [ 1020.137274][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.577021][T17925] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3963'. [ 1021.097108][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.505884][T17941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.885027][T15320] net_ratelimit: 1 callbacks suppressed [ 1022.885048][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.957822][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1022.977043][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1023.487275][T17978] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1023.867012][T17991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3984'. [ 1023.897145][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.710932][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.938929][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.948411][T18006] futex_wake_op: syz.3.3980 tries to shift op by -33; fix this program [ 1024.960931][T18006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1024.976851][T18006] netdevsim netdevsim3: Direct firmware load for . [ 1024.976851][T18006] failed with error -2 [ 1024.988062][T18006] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1024.988062][T18006] [ 1025.114492][T18010] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3993'. [ 1025.826412][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.977707][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.036254][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.748009][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.056480][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.750082][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.758957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.779921][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.861134][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.937339][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.956282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.969817][T18084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.978502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.987571][T18089] loop7: detected capacity change from 0 to 512 [ 1029.015737][T18089] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1029.043001][T18089] EXT4-fs (loop7): 1 truncate cleaned up [ 1029.050124][T18089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.096725][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.615819][T18104] netlink: 788 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1029.672606][T16745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.000905][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1031.294081][T18147] team_slave_0: entered promiscuous mode [ 1031.299983][T18147] team_slave_1: entered promiscuous mode [ 1031.346502][T18147] macsec2: entered allmulticast mode [ 1031.352927][T18147] team0: entered allmulticast mode [ 1031.408247][T18147] team_slave_0: entered allmulticast mode [ 1031.430795][T18147] team_slave_1: entered allmulticast mode [ 1031.503634][T18147] team0: left allmulticast mode [ 1031.530974][T18147] team_slave_0: left allmulticast mode [ 1031.563726][T18147] team_slave_1: left allmulticast mode [ 1031.731931][T18147] team_slave_0: left promiscuous mode [ 1031.737897][T18147] team_slave_1: left promiscuous mode [ 1032.623726][T18184] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4058'. [ 1032.643549][T18184] netlink: 'syz.3.4058': attribute type 21 has an invalid length. [ 1032.684634][T18184] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 1032.966310][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4063'. [ 1033.019052][T18193] team_slave_0: entered promiscuous mode [ 1033.024773][T18193] team_slave_1: entered promiscuous mode [ 1033.049444][T18193] macsec1: entered allmulticast mode [ 1033.055206][T18193] team0: entered allmulticast mode [ 1033.060759][T18193] team_slave_0: entered allmulticast mode [ 1033.069878][T18193] team_slave_1: entered allmulticast mode [ 1033.084318][T18193] team0: left allmulticast mode [ 1033.091711][T18193] team_slave_0: left allmulticast mode [ 1033.100562][T18193] team_slave_1: left allmulticast mode [ 1033.110351][T18193] team_slave_0: left promiscuous mode [ 1033.115847][T18193] team_slave_1: left promiscuous mode [ 1033.337494][ T5914] net_ratelimit: 6 callbacks suppressed [ 1033.337515][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.452573][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.472126][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.501521][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.510290][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.561957][T18224] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1033.562348][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.583272][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.594164][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.605087][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.614277][T18218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.690269][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1033.729951][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1034.382482][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4092'. [ 1034.416215][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4092'. [ 1034.824417][T18280] netlink: 788 bytes leftover after parsing attributes in process `syz.7.4104'. [ 1035.056931][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'. [ 1035.081120][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 1035.491959][T18317] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1035.757958][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1035.803295][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4127'. [ 1035.828666][T18332] team_slave_0: entered promiscuous mode [ 1035.834508][T18332] team_slave_1: entered promiscuous mode [ 1035.840953][T18332] macsec2: entered allmulticast mode [ 1035.846494][T18332] team0: entered allmulticast mode [ 1035.855101][T18332] team_slave_0: entered allmulticast mode [ 1035.861966][T18332] team_slave_1: entered allmulticast mode [ 1035.871203][T18332] team0: left allmulticast mode [ 1035.876339][T18332] team_slave_0: left allmulticast mode [ 1035.884404][T18332] team_slave_1: left allmulticast mode [ 1035.890262][T18332] team_slave_0: left promiscuous mode [ 1035.895753][T18332] team_slave_1: left promiscuous mode [ 1037.401650][T18362] netlink: 46 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1038.468832][ T5923] net_ratelimit: 1026 callbacks suppressed [ 1038.468847][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.952161][ C1] ------------[ cut here ]------------ [ 1038.957729][ C1] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#1: syz.1.4140/18359 [ 1038.968477][ C1] Modules linked in: [ 1038.972673][ C1] CPU: 1 UID: 0 PID: 18359 Comm: syz.1.4140 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 1038.984267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.994365][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 1039.000743][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 1039.020448][ C1] RSP: 0000:ffffc90000a089f8 EFLAGS: 00010246 [ 1039.026565][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888033858000 [ 1039.034558][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.042566][ C1] RBP: 0000000000000000 R08: ffff888033858000 R09: 0000000000000003 [ 1039.050586][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a95a500 [ 1039.058612][ C1] R13: dffffc0000000000 R14: ffff88805a95a9d0 R15: ffff8880524f3c24 [ 1039.066618][ C1] FS: 0000555573d39500(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000 [ 1039.075562][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1039.082197][ C1] CR2: 0000001b2f319ff8 CR3: 00000000525ae000 CR4: 00000000003526f0 [ 1039.090211][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1039.098223][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1039.106238][ C1] Call Trace: [ 1039.109529][ C1] [ 1039.112387][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1039.118018][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1039.123524][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1039.129656][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1039.135240][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1039.142504][ C1] __iterate_interfaces+0x2a8/0x590 [ 1039.147763][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1039.153879][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1039.161214][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1039.167335][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1039.174378][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 1039.179623][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1039.185457][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1039.190722][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1039.196507][ C1] ? read_tsc+0x9/0x20 [ 1039.200603][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1039.206460][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1039.211592][ C1] handle_softirqs+0x283/0x870 [ 1039.216407][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1039.221211][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1039.226567][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1039.231190][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1039.236449][ C1] irq_exit_rcu+0x9/0x30 [ 1039.240719][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1039.246412][ C1] [ 1039.249357][ C1] [ 1039.252306][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.258410][ C1] RIP: 0010:irqentry_exit_to_user_mode+0x51/0x120 [ 1039.264861][ C1] Code: 07 85 c0 0f 85 c3 00 00 00 e8 8b 4d 41 f6 65 4c 8b 34 25 08 00 9e 92 49 8b 3e f7 c7 1e 30 02 00 74 53 49 89 ff e8 7f 4c 41 f6 <4c> 89 f8 a8 18 74 08 e8 73 0f 01 00 4c 89 f8 a9 00 10 00 00 74 0b [ 1039.284527][ C1] RSP: 0000:ffffc9000e1aff38 EFLAGS: 00000286 [ 1039.290652][ C1] RAX: fc3f607e031bc900 RBX: ffffc9000e1aff58 RCX: fc3f607e031bc900 [ 1039.298662][ C1] RDX: 0000000000000000 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 1039.306681][ C1] RBP: 0000000000000000 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 1039.314685][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: 0000000000000000 [ 1039.322701][ C1] R13: 0000000000000000 R14: ffff888033858000 R15: 0000000000000008 [ 1039.330758][ C1] ? irqentry_exit_to_user_mode+0x51/0x120 [ 1039.336623][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1039.342112][ C1] RIP: 0033:0x7f52f366e941 [ 1039.346570][ C1] Code: 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 30 4c 89 f0 49 03 14 ca 80 3d 6d 92 34 00 00 49 89 d6 48 89 d5 <74> 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed [ 1039.366215][ C1] RSP: 002b:00007ffe197cf6a0 EFLAGS: 00000202 [ 1039.372302][ C1] RAX: ffffffff81b93a65 RBX: 00007f52f44e5720 RCX: 00000000000061fd [ 1039.380321][ C1] RDX: ffffffff81b97445 RSI: ffffffff81b93b6f RDI: 0000000000000010 [ 1039.388350][ C1] RBP: ffffffff81b97445 R08: 00007f52f39b61f8 R09: 00007f52f39a2000 [ 1039.396390][ C1] R10: 00007f52f25fb008 R11: 0000000000000010 R12: 0000000000000010 [ 1039.404386][ C1] R13: 0000000000000000 R14: ffffffff81b97445 R15: 00000000000061fd [ 1039.412425][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.418131][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.423789][ C1] ? css_rstat_updated+0x1a5/0xca0 [ 1039.428978][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.434643][ C1] ? css_rstat_updated+0x2af/0xca0 [ 1039.439808][ C1] [ 1039.442858][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1039.450158][ C1] CPU: 1 UID: 0 PID: 18359 Comm: syz.1.4140 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 1039.461714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1039.471784][ C1] Call Trace: [ 1039.475166][ C1] [ 1039.478038][ C1] dump_stack_lvl+0x99/0x250 [ 1039.482674][ C1] ? __asan_memcpy+0x40/0x70 [ 1039.487302][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1039.492554][ C1] ? __pfx__printk+0x10/0x10 [ 1039.497177][ C1] panic+0x2db/0x790 [ 1039.501108][ C1] ? __pfx_panic+0x10/0x10 [ 1039.505538][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.511169][ C1] __warn+0x334/0x4c0 [ 1039.515152][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1039.520881][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1039.526635][ C1] report_bug+0x2be/0x4f0 [ 1039.530989][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1039.536730][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 1039.542480][ C1] ? __ieee80211_beacon_get+0x125f/0x1630 [ 1039.548231][ C1] handle_bug+0x84/0x160 [ 1039.552516][ C1] exc_invalid_op+0x1a/0x50 [ 1039.557062][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1039.561943][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 1039.568309][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 1039.587961][ C1] RSP: 0000:ffffc90000a089f8 EFLAGS: 00010246 [ 1039.594081][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888033858000 [ 1039.602101][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.610101][ C1] RBP: 0000000000000000 R08: ffff888033858000 R09: 0000000000000003 [ 1039.618096][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a95a500 [ 1039.626096][ C1] R13: dffffc0000000000 R14: ffff88805a95a9d0 R15: ffff8880524f3c24 [ 1039.634089][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1039.639670][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 1039.645416][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 1039.651155][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 1039.656763][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1039.662277][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1039.668381][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1039.673955][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1039.681196][ C1] __iterate_interfaces+0x2a8/0x590 [ 1039.686444][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1039.692544][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1039.699766][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1039.705853][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1039.712915][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 1039.718154][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1039.724016][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1039.729257][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1039.734994][ C1] ? read_tsc+0x9/0x20 [ 1039.739058][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1039.744885][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1039.750008][ C1] handle_softirqs+0x283/0x870 [ 1039.754777][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1039.759549][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1039.764848][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1039.769461][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1039.774703][ C1] irq_exit_rcu+0x9/0x30 [ 1039.778971][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1039.784606][ C1] [ 1039.787532][ C1] [ 1039.790455][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.796456][ C1] RIP: 0010:irqentry_exit_to_user_mode+0x51/0x120 [ 1039.802906][ C1] Code: 07 85 c0 0f 85 c3 00 00 00 e8 8b 4d 41 f6 65 4c 8b 34 25 08 00 9e 92 49 8b 3e f7 c7 1e 30 02 00 74 53 49 89 ff e8 7f 4c 41 f6 <4c> 89 f8 a8 18 74 08 e8 73 0f 01 00 4c 89 f8 a9 00 10 00 00 74 0b [ 1039.822536][ C1] RSP: 0000:ffffc9000e1aff38 EFLAGS: 00000286 [ 1039.828611][ C1] RAX: fc3f607e031bc900 RBX: ffffc9000e1aff58 RCX: fc3f607e031bc900 [ 1039.836588][ C1] RDX: 0000000000000000 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 1039.844666][ C1] RBP: 0000000000000000 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 1039.852640][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: 0000000000000000 [ 1039.860610][ C1] R13: 0000000000000000 R14: ffff888033858000 R15: 0000000000000008 [ 1039.868601][ C1] ? irqentry_exit_to_user_mode+0x51/0x120 [ 1039.874417][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1039.879881][ C1] RIP: 0033:0x7f52f366e941 [ 1039.884297][ C1] Code: 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 30 4c 89 f0 49 03 14 ca 80 3d 6d 92 34 00 00 49 89 d6 48 89 d5 <74> 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed [ 1039.903901][ C1] RSP: 002b:00007ffe197cf6a0 EFLAGS: 00000202 [ 1039.910003][ C1] RAX: ffffffff81b93a65 RBX: 00007f52f44e5720 RCX: 00000000000061fd [ 1039.918021][ C1] RDX: ffffffff81b97445 RSI: ffffffff81b93b6f RDI: 0000000000000010 [ 1039.925994][ C1] RBP: ffffffff81b97445 R08: 00007f52f39b61f8 R09: 00007f52f39a2000 [ 1039.933953][ C1] R10: 00007f52f25fb008 R11: 0000000000000010 R12: 0000000000000010 [ 1039.941938][ C1] R13: 0000000000000000 R14: ffffffff81b97445 R15: 00000000000061fd [ 1039.949910][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.955546][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.961301][ C1] ? css_rstat_updated+0x1a5/0xca0 [ 1039.966441][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 1039.972081][ C1] ? css_rstat_updated+0x2af/0xca0 [ 1039.977218][ C1] [ 1039.980685][ C1] Kernel Offset: disabled [ 1039.985029][ C1] Rebooting in 86400 seconds..