last executing test programs: 14m34.71002579s ago: executing program 32 (id=274): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x12bb, &(0x7f0000000440)={0x0, 0xc6e8, 0x80, 0x202, 0x3d7, 0x0, r0}, 0x0, &(0x7f0000000180)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffad48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 13m40.489130804s ago: executing program 33 (id=438): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000840)={0x40, 0x8, 0x6d, {0x6d, 0x0, "583c000941fda6ce1fd9a53a5f5ec77424b159581b948ada2ccc23e66203d21535bc9591bbe79b6433ae298811c2ae7c7ab4cf31289a02000000dde03859df7b79def2ce6acf04f87f660d116da2e2b5c6d6f236f4b428e801458103019f2085ad4a521779dcd04ede2891"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40094}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000380)}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13m25.610577884s ago: executing program 34 (id=473): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0xffffffffffffffff) 13m13.821971829s ago: executing program 35 (id=500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000100)=0x8) 11m45.000590973s ago: executing program 36 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="966c1b802aa7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 11m36.576399025s ago: executing program 37 (id=843): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x2, 0x556, &(0x7f0000000580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_other_inode_update_time\x00', r0}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 10m55.39088265s ago: executing program 2 (id=969): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10m38.580107237s ago: executing program 38 (id=969): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10m36.550395246s ago: executing program 39 (id=978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usbip_server_init(0x6) setgroups(0x0, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f0000000240)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000800000000000000000000000a00000178e0cee25f2a38ad24af75156820d7d047dfdbb9d9c32d716c01c2da097b68e4f0d3a6c7a64128e2"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 9m39.664478639s ago: executing program 40 (id=1103): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) write$P9_RVERSION(r3, 0x0, 0x13) 9m19.505311729s ago: executing program 41 (id=1148): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) write$P9_RVERSION(r3, 0x0, 0x13) sendfile(r3, r3, 0x0, 0x7a680000) 9m18.120421405s ago: executing program 42 (id=1152): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r1, 0x0, 0x20040001) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10cc, 0x0, 0x0, 0xc3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$packet(0x11, 0x2, 0x300) 8m43.891365157s ago: executing program 9 (id=1237): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 8m43.576970641s ago: executing program 9 (id=1239): rt_sigaction(0x403e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x5) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 8m41.344036937s ago: executing program 9 (id=1245): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 8m37.361107706s ago: executing program 9 (id=1257): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 8m36.947250687s ago: executing program 9 (id=1258): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES16=0x0, @ANYBLOB="00012200420400000000000000fc1f9ac2928379f7f13cffdbdf25150000b7cfb6aa96e2d605cec8", @ANYRES64=r8, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="0c0b0600010000000200000008001c00745c7c7d530e1246b918408b2a827093d1b1f96ad3356d79ddfaf54c3fafd48cd6e8c71953d4bc5c09f973feacb9fba4096f94bd1802b0f5abfb8d9ab0183596074f96b1229c65f01e7b7dee41b839176fa968549ced655c3d5bfa2e431dbbd710969a02d5c2d10ad837c7038a9e1c163106e2e9c540d02e66fb292f6fdf1de9aec04f0a1ffc86e0f7cd12c68ed46a10634acdc1ee69bb6d1a48ff9225aa703187abfc0a33c96e51a6ca80ac094946bb205faeef32053cb23427d0ff21f0d1616c9360ceb7c7e5e7a0439635", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES8=r8, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r3, @ANYRES16=r3, @ANYRES16=r3, @ANYRES32, @ANYRES16=r3, @ANYRES32, @ANYBLOB], 0x68}}, 0x440040d0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) 8m26.96432762s ago: executing program 9 (id=1279): r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x4b3d, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 8m10.149187458s ago: executing program 43 (id=1279): r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x4b3d, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 7m34.995842299s ago: executing program 2 (id=1328): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 7m34.329693842s ago: executing program 2 (id=1423): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 7m33.450765372s ago: executing program 2 (id=1429): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x80400) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m32.332534644s ago: executing program 2 (id=1434): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r0 = syz_clone(0xc8a02200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x15, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x94, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) setpgid(0x0, r0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xfffe, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, "b14f16b81525ccf0f8b91f7214ea27025100"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xdfcd) landlock_create_ruleset(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7m31.337379942s ago: executing program 2 (id=1444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x80400) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m16.110399872s ago: executing program 44 (id=1444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x80400) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m7.472339195s ago: executing program 5 (id=1559): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x8, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) 7m6.617923528s ago: executing program 5 (id=1562): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000005d80)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@kern={0x10, 0x0, 0x0, 0x40000}, @nfc={0x27, 0x0, 0x1, 0x3}, 0xf28, 0x0, 0x0, 0x0, 0x708d, 0x0, 0x100, 0x4, 0x3}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$ipvs(0xffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000380)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) eventfd2(0x3, 0x0) 7m4.310109863s ago: executing program 5 (id=1569): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000140)={0x0, 0x5, 0x8, 0xe0, 0x3, [], [0xaca, 0x1, 0x4c, 0xf1], [0xd297caf, 0xfffffff7, 0x9, 0x80000001], [0x9, 0x400000000, 0x8001, 0x10000]}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r6, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 7m3.063535792s ago: executing program 5 (id=1571): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x8, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0xc000, 0x0, 0x0, r2, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) 7m2.477485484s ago: executing program 5 (id=1574): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x609, 0x1, 0x3, 0x8, 0x15, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x4, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x802, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x7fff, 0xc86, 0x2, 0x3, 0x8, 0x0}) prlimit64(r1, 0xc, &(0x7f0000000340)={0x101, 0x100}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 6m59.670801199s ago: executing program 5 (id=1581): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xad5, 0x1, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c7ffffffff71dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe0c000000fdea0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c95fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67e18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e73200"}, 0x400}) 6m44.119627482s ago: executing program 45 (id=1581): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xad5, 0x1, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c7ffffffff71dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe0c000000fdea0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c95fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67e18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e73200"}, 0x400}) 5m51.50041692s ago: executing program 1 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 5m50.908999631s ago: executing program 1 (id=1820): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 5m49.626730023s ago: executing program 1 (id=1823): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 5m46.246077382s ago: executing program 1 (id=1834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000580)='}\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00b\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\xd7{\x01vR\x01\x80\x00\x00\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\x00\x00\x00\x00\x10\xfaK\x1f\x96l\v\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13t\xafNx\xc0$\x85\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x94vz\xe1\x84\x99%\xa8\xbc\x18\xb2\xcd\"\x10\xd6\x84\xd0\xf1\x1bWE\x9e\x1d\xaf\v\x95\x80\x86\xaa\x82\x12}\xa1H\xd4e\x9et\'\\\xfa\x81J3N\xaa\xb0]\xb2\xb1\xd3\x14\x82\x875\xd0\xa9\x03\xc8\xb1\xf6\x1d\xf4\x8b\xbd\xbd-\xf9R4\xc4\xc5\x89(\x97\xd8\xd3\xb8-&p\xca\xc6\t\x8f=h\xe2\xdf\x9d\xf5\xb4(\x87\xf2\xa5X\x9f\x92\x06o\x10/\x0f~\xa9Q\xd9\xfd\xcaw\x17db\xfcD\xa0D\x85\x9d!\"/;\x13\xf3\x19\x9d\xe2\x9b\x9b4\xb4jt\xb7\x00'/618, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x2, 0xf, 0x5, 0xfb, 0x9, 0x0, 0xb, 0x0, 0x1, 0x3, 0x6}, {0x4, 0xdddd0000, 0xe, 0x14, 0x1, 0x9, 0x2f, 0xe, 0x40, 0x10, 0x6}, {0x3000, 0x5000, 0x4, 0xd, 0x5, 0x3, 0xc3, 0x16, 0x3, 0x8, 0x5, 0x3}, {0xdddd1000, 0x6000, 0x9, 0xf9, 0x7f, 0x3, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x7}, {0xd000, 0xdddd1000, 0x0, 0xd, 0x3, 0x2d, 0x6, 0xc, 0xfc, 0x0, 0xff, 0xe5}, {0x2, 0x10000, 0x8, 0x5, 0x6, 0x28, 0x3, 0x1, 0xbf, 0x98, 0x2, 0x4}, {0x5000, 0x8000000, 0x3, 0x9, 0xf6, 0xb, 0xb, 0x3, 0x4, 0x0, 0x4, 0x9}, {0xdddd0000, 0x1, 0xf, 0x4, 0x3, 0xff, 0x0, 0xf9, 0xa1, 0x8, 0x0, 0xfe}, {0xffff1000, 0xcb}, {0xffff1000, 0x17}, 0x0, 0x0, 0xdddd0000, 0x0, 0x7, 0x1000, 0xdddd1000, [0x2, 0x7, 0x9, 0x7]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x141, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m43.700040343s ago: executing program 1 (id=1838): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) 5m42.904596558s ago: executing program 1 (id=1840): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xb}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5m27.639632956s ago: executing program 46 (id=1840): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xb}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3m44.210577682s ago: executing program 6 (id=2407): sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'netdevsim0\x00', 0x3}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}, @jmp={0x5, 0x0, 0x6, 0x4, 0x0, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x43, 0x0, &(0x7f0000000880)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETS(r6, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x80, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 3m43.486372209s ago: executing program 6 (id=2415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="95", 0x1}], 0x1}}], 0x2, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0xc) 3m43.12252706s ago: executing program 6 (id=2416): openat$cachefiles(0xffffff9c, 0x0, 0x80400, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 3m42.850868981s ago: executing program 6 (id=2419): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r5, 0x0, 0x5d) 3m39.979892829s ago: executing program 6 (id=2428): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x80010, 0xffffffffffffffff, 0xb3584000) 3m39.283814574s ago: executing program 6 (id=2433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x482480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 3m24.009859608s ago: executing program 47 (id=2433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x482480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 35.666733795s ago: executing program 8 (id=3031): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x1411, 0x1, 0x0, 0x20000}, 0x10}}, 0x0) 35.547295479s ago: executing program 8 (id=3032): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'ipvlan1\x00'}}, 0xfffffffffffffef3) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {r2, r3+10000000}}, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001800010000000000009c25f1e1d69b9c188249aee70000000a00200000000004001100000c0009008100000314fe97fe4b2ba2425cac65436eb26ea65d3be3d6504cfe94e647aefcce76ee3c670f4694929828bb3fe743c3df96692b9f0766ef068fb10b5d426e526b68a064093b6236a37486a0e734a50c9cd5328ee3c513c558c8", @ANYRES32=0x0, @ANYBLOB="2159d7b940d4bca73491c5f2d3bfe02d3a5a87773e21e21731187e2faaabce7ff575535b036d24509c75d63037d35a33299a05a50d4f67c04f6b2e4aa0665e76a9f7852683b3fbf84eb4e2ad9e289c44ea8b87b21f1f73767afd2078c4310dca9662"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x1b, 0x26, 0x12, 0xf, 0xb, 0x64, 0x4, 0x89}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @local, 0x2}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) 32.0517419s ago: executing program 8 (id=3043): quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) 31.640047356s ago: executing program 8 (id=3045): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 30.424094936s ago: executing program 8 (id=3050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x0, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x0, 0x8, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x80, 0x5, 0x8}}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) 28.845697055s ago: executing program 8 (id=3052): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) 13.141799895s ago: executing program 48 (id=3052): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) 9.10416635s ago: executing program 3 (id=3109): memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x0, r0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.785512105s ago: executing program 3 (id=3116): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f00000004c0)=""/59, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000580)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 6.237923206s ago: executing program 3 (id=3117): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="03000000", 0x4}], 0x1) 5.580746238s ago: executing program 3 (id=3121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x0, 0x8, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x80, 0x5, 0x8}}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) 5.487885233s ago: executing program 7 (id=3123): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000700, 0x0, 0x0, 0x8cffffff00000000) 4.859103836s ago: executing program 4 (id=3124): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000308000a40000000000900020073797a310000000009"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) 4.380167517s ago: executing program 3 (id=3125): memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x0, r0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 4.018365371s ago: executing program 7 (id=3126): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000580)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 4.004416154s ago: executing program 4 (id=3127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 3.543224642s ago: executing program 4 (id=3128): socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0x40008) 3.383995995s ago: executing program 7 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x7f}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) fdatasync(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r7, 0x2, 0x0, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000140)={0x1, 0x18, [0x100, 0x200, 0x8000, 0x9a9c], &(0x7f0000000100)=[0x0, 0x0, 0x0]}) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 3.26815444s ago: executing program 0 (id=3130): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="030000000002", 0x6}], 0x1) 2.856097837s ago: executing program 0 (id=3131): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)={0x32c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x31b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x23c, 0x64, 0x0, 0x1, [@nested={0xd9, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @uid}, @nested={0x4d, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f"]}]}, @nested={0x15c, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b163633", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0xc, 0x19, 0x0, 0x0, @u64}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb64"]}]}, 0x32c}], 0x1}, 0x0) 2.832982993s ago: executing program 4 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x814}, 0x0) 2.302436903s ago: executing program 3 (id=3133): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb997, &(0x7f0000023400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x1000000000000002, 0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 2.083834158s ago: executing program 4 (id=3134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x0, 0x8, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x80, 0x5, 0x8}}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) 2.047097627s ago: executing program 0 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.607780755s ago: executing program 7 (id=3136): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000308000a40000000000900020073797a310000000009"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) 1.220043983s ago: executing program 0 (id=3137): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 749.588077ms ago: executing program 7 (id=3138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000580)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 505.477028ms ago: executing program 4 (id=3139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4}) epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 447.912924ms ago: executing program 0 (id=3140): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="030000000002", 0x6}], 0x1) 63.904673ms ago: executing program 0 (id=3141): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 7 (id=3142): memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0xfffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x0, r0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): tdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.338916][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.464746][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.675302][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.810842][T11759] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1955'. [ 893.199099][T11775] fuse: Bad value for 'fd' [ 895.830387][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1970'. [ 897.299489][T11824] kvm: kvm [11822]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 897.444308][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.452310][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.493064][T10227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.501299][T10227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.320682][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1982'. [ 898.790749][T11844] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 898.799060][T11844] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1984'. [ 900.379087][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.387076][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.378454][T11912] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 902.386777][T11912] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2012'. [ 903.542496][T11934] kvm: kvm [11933]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 906.394134][T11973] kvm: kvm [11969]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 907.600700][T11991] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 907.674632][T11987] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2039'. [ 909.300938][T12010] kvm: kvm [12009]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 910.598269][T12026] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2052'. [ 911.444095][T12045] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 911.452108][T12045] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2061'. [ 913.628989][T12084] netlink: 'syz.7.2075': attribute type 1 has an invalid length. [ 913.637753][T12084] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2075'. [ 914.069448][T12089] kvm: kvm [12088]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 915.542993][T12105] binder: 12104:12105 ioctl 4018620d 0 returned -22 [ 916.363747][T12117] netlink: 'syz.6.2087': attribute type 1 has an invalid length. [ 916.371831][T12117] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2087'. [ 916.966815][T12124] kvm: kvm [12123]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 917.057068][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2090'. [ 918.425763][T12139] binder: 12138:12139 ioctl 4018620d 0 returned -22 [ 918.743172][T12145] fuse: Bad value for 'group_id' [ 918.748585][T12145] fuse: Bad value for 'group_id' [ 918.923677][T12149] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 918.931585][T12149] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2100'. [ 919.210117][T12155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2103'. [ 919.802048][T12170] binder: 12168:12170 ioctl 4018620d 0 returned -22 [ 920.221019][T12175] fuse: Bad value for 'group_id' [ 920.226523][T12175] fuse: Bad value for 'group_id' [ 920.433850][T12181] netlink: 'syz.7.2114': attribute type 1 has an invalid length. [ 920.441874][T12181] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2114'. [ 921.361418][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2117'. [ 922.310812][T12200] binder: 12199:12200 ioctl c0306201 0 returned -14 [ 922.989366][T12208] fuse: Bad value for 'group_id' [ 922.994710][T12208] fuse: Bad value for 'group_id' [ 923.170964][T12214] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 923.179141][T12214] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2127'. [ 923.303787][ T9365] Bluetooth: hci5: command 0x0406 tx timeout [ 923.700226][T12219] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2130'. [ 924.195595][T12227] binder: 12226:12227 ioctl c0306201 0 returned -14 [ 924.338007][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2135'. [ 926.573500][T12246] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 926.581533][T12246] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2142'. [ 927.194548][T12252] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2145'. [ 927.718055][T12259] binder: 12258:12259 ioctl c0306201 0 returned -14 [ 928.871354][T12265] input: syz0 as /devices/virtual/input/input25 [ 929.295722][T12284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2158'. [ 931.712889][T12312] tipc: Started in network mode [ 931.718421][T12312] tipc: Node identity ac1414aa, cluster identity 4711 [ 931.727681][T12312] tipc: Enabled bearer , priority 10 [ 931.937902][T12312] loop7: detected capacity change from 0 to 16384 [ 932.844582][ T5865] tipc: Node number set to 2886997162 [ 932.944579][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2171'. [ 934.269199][T12349] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 934.289128][T12349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.303227][T12349] team0: Port device bond0 added [ 934.360801][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 934.465674][T12350] team0 (unregistering): Port device team_slave_0 removed [ 934.496538][T12350] team0 (unregistering): Port device team_slave_1 removed [ 934.542151][T12350] team0 (unregistering): Port device bond0 removed [ 934.588326][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 938.129584][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2199'. [ 941.118961][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2212'. [ 942.784666][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 945.533567][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2225'. [ 946.160413][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 946.835437][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2233'. [ 948.633273][T12508] bond0: entered promiscuous mode [ 948.643137][T12508] bond_slave_0: entered promiscuous mode [ 948.650736][T12508] bond_slave_1: entered promiscuous mode [ 948.679290][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2239'. [ 948.790749][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2241'. [ 949.841255][T12522] kvm: kvm [12519]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 950.191737][T12527] binder: 12526:12527 ioctl c0306201 0 returned -14 [ 950.577038][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2253'. [ 951.285546][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2254'. [ 952.350542][T12565] kvm: kvm [12564]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 952.730410][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2269'. [ 954.881619][T12607] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 955.316614][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2273'. [ 957.619059][T12649] kvm: kvm [12647]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 958.817653][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2302'. [ 961.425649][T12698] binder: BINDER_SET_CONTEXT_MGR already set [ 961.431897][T12698] binder: 12697:12698 ioctl 4018620d 800002c0 returned -16 [ 961.707033][T12693] kvm: kvm [12692]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 961.815997][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.822558][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.864103][ T5868] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 963.079277][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 963.099699][ T5868] usb 5-1: config 0 has no interfaces? [ 963.132980][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 963.142716][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.151604][ T5868] usb 5-1: Product: syz [ 963.156184][ T5868] usb 5-1: Manufacturer: syz [ 963.160945][ T5868] usb 5-1: SerialNumber: syz [ 963.184081][ T5868] usb 5-1: config 0 descriptor?? [ 963.410277][ T5811] Bluetooth: hci3: adv larger than maximum supported [ 963.410382][ T5811] Bluetooth: hci3: Malformed LE Event: 0x0d [ 963.415374][ T5868] usb 5-1: USB disconnect, device number 18 [ 964.125023][T12736] fuse: Bad value for 'fd' [ 964.400372][ T30] audit: type=1800 audit(1758965939.070:89): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2330" name="/" dev="9p" ino=2 res=0 errno=0 [ 966.302203][T12779] kvm: kvm [12777]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 966.923105][T12795] fuse: Bad value for 'fd' [ 967.516524][ T5865] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 967.675798][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 967.714674][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 967.770171][ T5865] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 967.779637][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.789520][ T5865] usb 7-1: Product: syz [ 967.794204][ T5865] usb 7-1: Manufacturer: syz [ 967.798903][ T5865] usb 7-1: SerialNumber: syz [ 967.838968][ T5865] usb 7-1: config 0 descriptor?? [ 967.875048][ T5865] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 967.884558][ T5865] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 968.137476][T12817] fuse: Bad value for 'fd' [ 968.467732][ T5865] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 968.901221][ T5865] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 968.909728][ T5865] em28xx 7-1:0.0: board has no eeprom [ 969.046322][ T5865] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 969.054730][ T5865] em28xx 7-1:0.0: dvb set to bulk mode. [ 969.061927][ T5932] em28xx 7-1:0.0: Binding DVB extension [ 969.135024][ T5865] usb 7-1: USB disconnect, device number 16 [ 969.142869][ T5865] em28xx 7-1:0.0: Disconnecting em28xx [ 969.346218][ T5932] em28xx 7-1:0.0: Registering input extension [ 969.444515][ T5865] em28xx 7-1:0.0: Closing input extension [ 969.511215][ T5865] em28xx 7-1:0.0: Freeing device [ 971.003767][T12865] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2376'. [ 972.980310][T12899] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2391'. [ 973.073100][T12904] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2393'. [ 973.343915][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2396'. [ 974.322753][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2404'. [ 974.961798][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2408'. [ 974.998028][T12937] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2407'. [ 975.109444][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 975.116282][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 975.124329][T12944] vhci_hcd vhci_hcd.0: Device attached [ 975.200479][T12949] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 975.207306][T12949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 975.216123][T12949] vhci_hcd vhci_hcd.0: Device attached [ 975.272916][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(20) [ 975.279744][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 975.288527][T12944] vhci_hcd vhci_hcd.0: Device attached [ 975.321565][T12949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.350560][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 975.357386][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 975.366974][T12944] vhci_hcd vhci_hcd.0: Device attached [ 975.384406][ T5865] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 975.396834][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 975.403649][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 975.412030][T12944] vhci_hcd vhci_hcd.0: Device attached [ 975.432736][T12944] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27) [ 975.439544][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 975.448342][T12944] vhci_hcd vhci_hcd.0: Device attached [ 975.462953][T12944] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.511669][T12961] vhci_hcd: connection closed [ 975.512905][ T4322] vhci_hcd: stop threads [ 975.522476][ T4322] vhci_hcd: release socket [ 975.527220][ T4322] vhci_hcd: disconnect device [ 975.555207][T12959] vhci_hcd: connection closed [ 975.555679][T12957] vhci_hcd: connection closed [ 975.562377][T12950] vhci_hcd: connection closed [ 975.562654][T12945] vhci_hcd: connection reset by peer [ 975.583590][T12952] vhci_hcd: connection closed [ 975.587444][ T4322] vhci_hcd: stop threads [ 975.597182][ T4322] vhci_hcd: release socket [ 975.601779][ T4322] vhci_hcd: disconnect device [ 975.619733][ T4322] vhci_hcd: stop threads [ 975.624390][ T4322] vhci_hcd: release socket [ 975.629154][ T4322] vhci_hcd: disconnect device [ 975.701842][ T4322] vhci_hcd: stop threads [ 975.706736][ T4322] vhci_hcd: release socket [ 975.711441][ T4322] vhci_hcd: disconnect device [ 975.721817][ T4322] vhci_hcd: stop threads [ 975.726506][ T4322] vhci_hcd: release socket [ 975.731195][ T4322] vhci_hcd: disconnect device [ 975.741297][ T4322] vhci_hcd: stop threads [ 975.746071][ T4322] vhci_hcd: release socket [ 975.751298][ T4322] vhci_hcd: disconnect device [ 978.708752][T12996] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2425'. [ 980.503896][ T5865] vhci_hcd: vhci_device speed not set [ 980.773882][T13029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2439'. [ 981.223046][T13040] netlink: 90 bytes leftover after parsing attributes in process `syz.7.2441'. [ 981.789468][ T5932] usb usb40-port1: attempt power cycle [ 982.397211][ T5932] usb usb40-port1: unable to enumerate USB device [ 983.670059][T13064] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2454'. [ 984.410834][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2457'. [ 990.971681][T13120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2474'. [ 990.982326][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2474'. [ 990.991584][T13120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2474'. [ 991.975260][T13135] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2481'. [ 994.584079][ T9365] Bluetooth: hci3: command 0x0406 tx timeout [ 996.053600][ T5868] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 996.091909][ T9365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 996.102592][ T9365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 996.116279][ T9365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 996.131852][ T9365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 996.143822][ T9365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 996.480869][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 996.489609][ T5868] usb 5-1: config 0 has no interface number 0 [ 996.496143][ T5868] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 996.507528][ T5868] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 996.519039][ T5868] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 996.528397][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.805235][ T5868] usb 5-1: config 0 descriptor?? [ 996.814554][T13172] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 996.844699][ T5868] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 997.064788][ T5932] usb 5-1: USB disconnect, device number 19 [ 997.514258][T13177] chnl_net:caif_netlink_parms(): no params data found [ 998.276440][ T9365] Bluetooth: hci4: command tx timeout [ 998.798421][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2505'. [ 999.580405][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.588246][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.595919][T13177] bridge_slave_0: entered allmulticast mode [ 999.604235][T13177] bridge_slave_0: entered promiscuous mode [ 999.696175][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.703865][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.711429][T13177] bridge_slave_1: entered allmulticast mode [ 999.719646][T13177] bridge_slave_1: entered promiscuous mode [ 1000.344303][ T9365] Bluetooth: hci4: command tx timeout [ 1000.544092][ T4760] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.598704][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.629599][ T4760] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.715387][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.997435][ T4760] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.158115][ T4760] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.229127][T13177] team0: Port device team_slave_0 added [ 1001.247344][ T5865] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1001.287005][T13177] team0: Port device team_slave_1 added [ 1001.447307][ T5865] usb 8-1: Using ep0 maxpacket: 8 [ 1001.487753][ T5865] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.498002][ T5865] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1001.508030][ T5865] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1001.518502][ T5865] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.531941][ T5865] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1001.541303][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.651875][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.659285][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.687060][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.800421][ T5865] usb 8-1: GET_CAPABILITIES returned 11 [ 1001.806285][ T5865] usbtmc 8-1:16.0: can't read capabilities [ 1001.831390][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.838982][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.865373][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.008433][ T5865] usb 8-1: USB disconnect, device number 16 [ 1002.154284][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2517'. [ 1002.223220][T13177] hsr_slave_0: entered promiscuous mode [ 1002.231885][T13177] hsr_slave_1: entered promiscuous mode [ 1002.240457][T13177] debugfs: 'hsr0' already exists in 'hsr' [ 1002.246437][T13177] Cannot create hsr debugfs directory [ 1002.314784][ T4760] bridge_slave_1: left allmulticast mode [ 1002.321356][ T4760] bridge_slave_1: left promiscuous mode [ 1002.328007][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.348995][ T4760] bridge_slave_0: left allmulticast mode [ 1002.354874][ T4760] bridge_slave_0: left promiscuous mode [ 1002.361256][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.423639][ T9365] Bluetooth: hci4: command tx timeout [ 1002.840211][ T4760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.925354][ T4760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.959881][ T4760] bond0 (unregistering): Released all slaves [ 1003.469297][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2521'. [ 1003.521279][ T4760] IPVS: stopping backup sync thread 11593 ... [ 1004.387456][ T4760] hsr_slave_0: left promiscuous mode [ 1004.417140][ T4760] hsr_slave_1: left promiscuous mode [ 1004.425306][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.432920][ T4760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.501189][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.509188][ T4760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.514469][ T9365] Bluetooth: hci4: command tx timeout [ 1004.574119][ T4760] veth1_macvtap: left promiscuous mode [ 1004.579988][ T4760] veth0_macvtap: left promiscuous mode [ 1004.585996][ T4760] veth1_vlan: left promiscuous mode [ 1004.591442][ T4760] veth0_vlan: left promiscuous mode [ 1005.182743][ T4760] team0 (unregistering): Port device team_slave_1 removed [ 1005.239375][ T4760] team0 (unregistering): Port device team_slave_0 removed [ 1006.343824][T13177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.485315][T13177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.555614][T13177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1017.771329][T13177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.626538][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.786511][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.841663][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.849292][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.921205][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.928774][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.142610][T13177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1019.196407][T13326] Bluetooth: MGMT ver 1.23 [ 1019.415904][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1019.416015][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1021.363133][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.370167][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1021.370292][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1021.370573][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.387974][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1021.388106][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1021.388384][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.419487][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 1021.419572][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1021.419731][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.421194][T13344] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1021.467987][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 1021.468080][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1021.468239][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.479080][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(25) [ 1021.479162][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1021.479411][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.509883][T13344] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(27) [ 1021.509967][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1021.510213][T13344] vhci_hcd vhci_hcd.0: Device attached [ 1021.545665][T13344] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1021.598671][T13352] vhci_hcd: connection closed [ 1021.600791][T13350] vhci_hcd: connection closed [ 1021.601428][T13357] vhci_hcd: connection closed [ 1021.602213][T13355] vhci_hcd: connection closed [ 1021.610490][ T35] vhci_hcd: stop threads [ 1021.610564][ T35] vhci_hcd: release socket [ 1021.610680][ T35] vhci_hcd: disconnect device [ 1021.611520][ T35] vhci_hcd: stop threads [ 1021.611567][ T35] vhci_hcd: release socket [ 1021.611669][ T35] vhci_hcd: disconnect device [ 1021.612358][ T35] vhci_hcd: stop threads [ 1021.612413][ T35] vhci_hcd: release socket [ 1021.612516][ T35] vhci_hcd: disconnect device [ 1021.621637][ T35] vhci_hcd: stop threads [ 1021.621673][ T35] vhci_hcd: release socket [ 1021.621712][ T35] vhci_hcd: disconnect device [ 1021.635164][T13345] vhci_hcd: connection closed [ 1021.672232][ T8349] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1021.672664][T13347] vhci_hcd: connection closed [ 1021.673110][ T35] vhci_hcd: stop threads [ 1021.673177][ T35] vhci_hcd: release socket [ 1021.673295][ T35] vhci_hcd: disconnect device [ 1021.696674][ T35] vhci_hcd: stop threads [ 1021.696736][ T35] vhci_hcd: release socket [ 1021.696853][ T35] vhci_hcd: disconnect device [ 1021.877824][T13360] tipc: Enabling of bearer rejected, failed to enable media [ 1021.985960][T13177] veth0_vlan: entered promiscuous mode [ 1022.042648][T13177] veth1_vlan: entered promiscuous mode [ 1022.303740][T13177] veth0_macvtap: entered promiscuous mode [ 1022.386725][T13177] veth1_macvtap: entered promiscuous mode [ 1022.531262][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.597408][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.650108][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.650666][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.650901][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.651094][ T4322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.144538][T11691] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1023.212753][T13372] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2561'. [ 1023.262131][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.269077][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.350449][T11691] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1023.362259][T11691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1023.373556][T11691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1023.384522][T11691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1023.401548][T11691] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1023.412239][T11691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.585660][T11691] usb 4-1: config 0 descriptor?? [ 1024.116344][T11691] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1024.685737][T13396] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1024.692572][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1024.700612][T13396] vhci_hcd vhci_hcd.0: Device attached [ 1024.758645][T13402] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1024.765462][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1024.776405][T13402] vhci_hcd vhci_hcd.0: Device attached [ 1024.856817][T13396] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 1024.863641][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1024.872216][T13396] vhci_hcd vhci_hcd.0: Device attached [ 1024.921389][T13402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1024.956963][T13396] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 1024.963794][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1024.972137][T13396] vhci_hcd vhci_hcd.0: Device attached [ 1024.998178][T13402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(26) [ 1025.005003][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1025.013730][T13402] vhci_hcd vhci_hcd.0: Device attached [ 1025.079329][T13396] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(25) [ 1025.086162][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1025.094579][T13396] vhci_hcd vhci_hcd.0: Device attached [ 1025.100715][T13402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1025.120364][T13410] tipc: Started in network mode [ 1025.126570][T13410] tipc: Node identity 3ebad594326f, cluster identity 4711 [ 1025.136029][T13410] tipc: Enabled bearer , priority 0 [ 1025.193255][T13410] syzkaller0: entered promiscuous mode [ 1025.199307][T13410] syzkaller0: entered allmulticast mode [ 1025.238231][T13411] vhci_hcd: connection closed [ 1025.238728][T13408] vhci_hcd: connection closed [ 1025.244113][T13405] vhci_hcd: connection closed [ 1025.249688][T13413] vhci_hcd: connection closed [ 1025.255287][T13398] vhci_hcd: connection reset by peer [ 1025.263905][T13403] vhci_hcd: connection closed [ 1025.280348][ T4760] vhci_hcd: stop threads [ 1025.289876][ T4760] vhci_hcd: release socket [ 1025.294846][ T4760] vhci_hcd: disconnect device [ 1025.315320][T13410] tipc: Resetting bearer [ 1025.342512][ T4760] vhci_hcd: stop threads [ 1025.348889][ T4760] vhci_hcd: release socket [ 1025.353637][ T4760] vhci_hcd: disconnect device [ 1025.360018][T13407] tipc: Resetting bearer [ 1025.370904][ T4760] vhci_hcd: stop threads [ 1025.375516][ T4760] vhci_hcd: release socket [ 1025.380120][ T4760] vhci_hcd: disconnect device [ 1025.407527][T13407] tipc: Disabling bearer [ 1025.419555][ T4760] vhci_hcd: stop threads [ 1025.424213][ T4760] vhci_hcd: release socket [ 1025.428825][ T4760] vhci_hcd: disconnect device [ 1025.438013][ T4760] vhci_hcd: stop threads [ 1025.442419][ T4760] vhci_hcd: release socket [ 1025.447497][ T4760] vhci_hcd: disconnect device [ 1025.459604][ T4760] vhci_hcd: stop threads [ 1025.464231][ T4760] vhci_hcd: release socket [ 1025.468932][ T4760] vhci_hcd: disconnect device [ 1025.884638][T13424] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2573'. [ 1026.089779][ T5932] usb 4-1: USB disconnect, device number 19 [ 1026.814598][ T8349] vhci_hcd: vhci_device speed not set [ 1027.137925][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2575'. [ 1027.148036][T13435] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1027.157930][T13435] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1027.687156][T13448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1027.694817][T13448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1027.701383][T13448] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1027.726280][T13448] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1027.732551][T13448] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1027.742084][T13448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1027.748617][T13448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1027.823707][T13448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.830137][T13448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1027.862947][T13455] overlayfs: failed to clone upperpath [ 1027.894664][T13448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1028.120140][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.128579][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.258863][ T5865] usb usb42-port1: attempt power cycle [ 1028.302316][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.311295][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.794870][T13464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1028.801683][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1028.809801][T13464] vhci_hcd vhci_hcd.0: Device attached [ 1028.864125][T13470] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1028.870935][T13470] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1028.879214][T13470] vhci_hcd vhci_hcd.0: Device attached [ 1028.908122][ T5865] usb usb42-port1: unable to enumerate USB device [ 1028.950674][T13464] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1028.957485][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1028.965625][T13464] vhci_hcd vhci_hcd.0: Device attached [ 1028.980765][T13464] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1029.007428][T13464] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 1029.014243][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1029.024465][T13464] vhci_hcd vhci_hcd.0: Device attached [ 1029.059922][T13464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 1029.066663][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1029.074810][ T5811] Bluetooth: hci1: command 0x206a tx timeout [ 1029.075174][T13464] vhci_hcd vhci_hcd.0: Device attached [ 1029.103770][ T5932] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1029.117166][T13464] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27) [ 1029.123929][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1029.133850][T13464] vhci_hcd vhci_hcd.0: Device attached [ 1029.167807][T13475] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2586'. [ 1029.182809][T13470] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1029.261012][T13482] vhci_hcd: connection closed [ 1029.262478][ T4322] vhci_hcd: stop threads [ 1029.272228][ T4322] vhci_hcd: release socket [ 1029.277335][ T4322] vhci_hcd: disconnect device [ 1029.304534][T13477] vhci_hcd: connection closed [ 1029.305949][T13474] vhci_hcd: connection closed [ 1029.311397][T13479] vhci_hcd: connection closed [ 1029.341793][T13471] vhci_hcd: connection closed [ 1029.348733][ T4322] vhci_hcd: stop threads [ 1029.358519][ T4322] vhci_hcd: release socket [ 1029.363045][ T4322] vhci_hcd: disconnect device [ 1029.374485][T13468] vhci_hcd: connection reset by peer [ 1029.382399][ T4322] vhci_hcd: stop threads [ 1029.387723][ T4322] vhci_hcd: release socket [ 1029.392442][ T4322] vhci_hcd: disconnect device [ 1029.405026][ T4322] vhci_hcd: stop threads [ 1029.409580][ T4322] vhci_hcd: release socket [ 1029.415403][ T4322] vhci_hcd: disconnect device [ 1029.438797][ T4322] vhci_hcd: stop threads [ 1029.444383][ T4322] vhci_hcd: release socket [ 1029.449102][ T4322] vhci_hcd: disconnect device [ 1029.466295][ T4322] vhci_hcd: stop threads [ 1029.470747][ T4322] vhci_hcd: release socket [ 1029.476554][ T4322] vhci_hcd: disconnect device [ 1029.783904][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1029.785416][ T9365] Bluetooth: hci3: command 0x0406 tx timeout [ 1029.791452][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 1029.864042][T13491] Bluetooth: hci4: command 0x0c1a tx timeout [ 1030.073812][T13497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1030.583092][T13506] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 1030.613845][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2595'. [ 1031.143815][T13491] Bluetooth: hci1: command 0x206a tx timeout [ 1031.863976][T13491] Bluetooth: hci5: command 0x0406 tx timeout [ 1031.870184][T13491] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.877541][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.911153][T13524] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2601'. [ 1031.953635][T13491] Bluetooth: hci4: command 0x0c1a tx timeout [ 1032.744582][T13536] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1033.285168][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2607'. [ 1034.033943][T13491] Bluetooth: hci4: command 0x0c1a tx timeout [ 1034.791647][ T5932] vhci_hcd: vhci_device speed not set [ 1035.148365][T13562] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2615'. [ 1035.340484][T13566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1036.124160][ T5865] usb usb40-port1: attempt power cycle [ 1036.557137][T13582] input: syz0 as /devices/virtual/input/input28 [ 1036.759427][ T5865] usb usb40-port1: unable to enumerate USB device [ 1038.065052][T13600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1038.108634][T13598] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1038.577672][ T8349] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1038.706345][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2634'. [ 1038.806422][ T8349] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1038.855705][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1038.864939][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1038.876565][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.152215][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.165537][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.180639][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.276140][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.285423][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.296701][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.348578][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.358259][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.372249][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.386252][ T5865] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1039.434048][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.443211][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.454950][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.512176][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.521485][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.532676][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.573697][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.582795][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.593996][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.617029][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 1039.642958][ T5865] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1039.651800][ T5865] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1039.660889][ T5865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1039.671799][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.682184][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1039.692114][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.705788][ T5865] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1039.715109][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.729608][ T8349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1039.739762][ T8349] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1039.751330][ T8349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1039.757113][ T5865] usb 4-1: config 0 descriptor?? [ 1039.846119][ T8349] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1039.855757][ T8349] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1039.864416][ T8349] usb 8-1: Product: syz [ 1039.868747][ T8349] usb 8-1: Manufacturer: syz [ 1039.873955][ T8349] usb 8-1: SerialNumber: syz [ 1039.937804][ T8349] usb 8-1: config 0 descriptor?? [ 1040.016929][ T5865] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1040.708285][ T8349] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 1040.860028][T13606] netlink: 83 bytes leftover after parsing attributes in process `syz.7.2632'. [ 1040.873000][ T5865] usb 4-1: USB disconnect, device number 20 [ 1040.929283][ T5865] usblp0: removed [ 1040.979025][ T5932] usb 8-1: USB disconnect, device number 17 [ 1040.988994][ T5932] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 1041.314965][ T5865] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1041.479668][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 1041.495934][ T5865] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1041.504875][ T5865] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1041.515170][ T5865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1041.524944][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1041.534966][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1041.545008][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1041.558832][ T5865] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1041.568211][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.583207][ T5865] usb 4-1: config 0 descriptor?? [ 1041.743628][ T8349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1041.802168][ T5865] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1041.884557][ T8349] usb 1-1: device descriptor read/64, error -71 [ 1042.008459][T13636] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2645'. [ 1042.143788][ T8349] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1042.288690][ T8349] usb 1-1: device descriptor read/64, error -71 [ 1042.399400][ T8349] usb usb1-port1: attempt power cycle [ 1042.746559][ T8349] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1042.767740][ T8349] usb 1-1: device descriptor read/8, error -71 [ 1043.074089][ T8349] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1043.129502][ T8349] usb 1-1: device descriptor read/8, error -71 [ 1043.194635][T13646] kvm: pic: non byte read [ 1043.195553][T13646] kvm: pic: non byte read [ 1043.244502][ T8349] usb usb1-port1: unable to enumerate USB device [ 1043.489256][ T5865] usb 4-1: USB disconnect, device number 21 [ 1043.512037][ T5865] usblp0: removed [ 1044.264941][T13659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1044.411821][T13664] tipc: Enabled bearer , priority 0 [ 1044.428533][T13664] syzkaller0: entered promiscuous mode [ 1044.434605][T13664] syzkaller0: entered allmulticast mode [ 1044.461739][T13665] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2657'. [ 1044.517777][T13664] tipc: Resetting bearer [ 1044.634343][T13662] tipc: Resetting bearer [ 1044.719986][T13662] tipc: Disabling bearer [ 1047.105356][T13692] tipc: Started in network mode [ 1047.110546][T13692] tipc: Node identity , cluster identity 4711 [ 1047.116933][T13692] tipc: Failed to obtain node identity [ 1047.122571][T13692] tipc: Enabling of bearer rejected, failed to enable media [ 1047.178343][T13692] syzkaller0: entered promiscuous mode [ 1047.187715][T13692] syzkaller0: entered allmulticast mode [ 1047.375846][T13696] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1047.382582][T13696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1047.391316][T13696] vhci_hcd vhci_hcd.0: Device attached [ 1047.706609][ T5868] usb 34-1: SetAddress Request (2) to port 0 [ 1047.712904][ T5868] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1047.753535][ T5865] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1048.050620][ T5865] usb 5-1: device descriptor read/64, error -71 [ 1048.096120][T13697] vhci_hcd: connection reset by peer [ 1048.103151][ T4322] vhci_hcd: stop threads [ 1048.108137][ T4322] vhci_hcd: release socket [ 1048.112753][ T4322] vhci_hcd: disconnect device [ 1048.165916][T13705] tipc: Enabled bearer , priority 0 [ 1048.244162][T13709] syzkaller0: entered promiscuous mode [ 1048.249814][T13709] syzkaller0: entered allmulticast mode [ 1048.303937][ T5865] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1048.335757][T13705] tipc: Resetting bearer [ 1048.391319][T13703] tipc: Resetting bearer [ 1048.409878][T13703] tipc: Disabling bearer [ 1048.527912][ T5865] usb 5-1: device descriptor read/64, error -71 [ 1048.652097][ T5865] usb usb5-port1: attempt power cycle [ 1048.994069][ T5865] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1049.028385][ T5865] usb 5-1: device descriptor read/8, error -71 [ 1049.284520][ T5865] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1049.384527][ T5865] usb 5-1: device descriptor read/8, error -71 [ 1049.423598][T13720] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1049.515365][ T5865] usb usb5-port1: unable to enumerate USB device [ 1052.454229][T13742] input: syz0 as /devices/virtual/input/input29 [ 1052.911756][T13744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1053.063739][ T5868] usb 34-1: device descriptor read/8, error -110 [ 1054.744153][ T5868] usb usb34-port1: attempt power cycle [ 1055.407762][T13754] 9pnet_virtio: no channels available for device syz [ 1055.605813][T13758] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2689'. [ 1055.693779][ T5868] usb usb34-port1: unable to enumerate USB device [ 1057.122121][T13491] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1057.518755][T13776] input: syz0 as /devices/virtual/input/input30 [ 1057.996930][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2699'. [ 1058.105834][ T5868] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1058.262414][ T5868] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1058.262507][ T5868] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1058.262578][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1058.262664][ T5868] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1058.262756][ T5868] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1058.292608][ T5868] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1058.292712][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1058.292786][ T5868] usb 1-1: Product: syz [ 1058.292845][ T5868] usb 1-1: Manufacturer: syz [ 1058.359673][ T5868] cdc_wdm 1-1:1.0: skipping garbage [ 1058.359764][ T5868] cdc_wdm 1-1:1.0: skipping garbage [ 1058.404092][ T5868] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1058.404194][ T5868] cdc_wdm 1-1:1.0: Unknown control protocol [ 1058.639343][ T5868] usb 1-1: USB disconnect, device number 13 [ 1059.977291][T13791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'. [ 1060.789785][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.836832][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.849074][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.892733][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.920008][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1062.252663][T13798] chnl_net:caif_netlink_parms(): no params data found [ 1062.323706][T13812] input: syz0 as /devices/virtual/input/input31 [ 1062.424425][ T5865] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1062.610601][ T5865] usb 5-1: device descriptor read/64, error -71 [ 1062.873804][ T5865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1062.985609][T13491] Bluetooth: hci2: command tx timeout [ 1063.054002][ T5865] usb 5-1: device descriptor read/64, error -71 [ 1063.175942][ T5865] usb usb5-port1: attempt power cycle [ 1063.593590][ T5865] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1063.607111][T13798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.614762][T13798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.622479][T13798] bridge_slave_0: entered allmulticast mode [ 1063.634961][T13798] bridge_slave_0: entered promiscuous mode [ 1063.664415][ T5865] usb 5-1: device descriptor read/8, error -71 [ 1063.740552][T13798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.748428][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.756205][T13798] bridge_slave_1: entered allmulticast mode [ 1063.765468][T13798] bridge_slave_1: entered promiscuous mode [ 1063.903653][ T5865] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1063.955265][ T5865] usb 5-1: device descriptor read/8, error -71 [ 1064.068159][ T5865] usb usb5-port1: unable to enumerate USB device [ 1064.122277][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.133869][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1064.180785][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.228576][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.407845][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.418579][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1064.466232][T13798] team0: Port device team_slave_0 added [ 1064.494027][T13830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1064.508011][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.519840][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1064.576956][T13798] team0: Port device team_slave_1 added [ 1064.827282][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.838021][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1064.925908][T13798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.933173][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.959742][T13798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.023684][T13798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.030892][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.057322][T13798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.073636][T13491] Bluetooth: hci2: command tx timeout [ 1065.486713][ T35] erspan0: left allmulticast mode [ 1065.491948][ T35] erspan0: left promiscuous mode [ 1065.499730][ T35] bridge0: port 3(erspan0) entered disabled state [ 1065.516740][T13837] loop0: detected capacity change from 0 to 256 [ 1065.537281][ T35] bridge_slave_1: left allmulticast mode [ 1065.543094][ T35] bridge_slave_1: left promiscuous mode [ 1065.549853][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.599261][ T35] bridge_slave_0: left allmulticast mode [ 1065.605311][ T35] bridge_slave_0: left promiscuous mode [ 1065.611766][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.846311][T13843] input: syz0 as /devices/virtual/input/input32 [ 1066.231650][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2720'. [ 1067.144292][T13491] Bluetooth: hci2: command tx timeout [ 1067.764110][T13854] fuse: Unknown parameter 'use00000000000000000000' [ 1068.055308][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.081992][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.098523][ T35] bond0 (unregistering): Released all slaves [ 1068.274146][T13798] hsr_slave_0: entered promiscuous mode [ 1068.284192][T13798] hsr_slave_1: entered promiscuous mode [ 1068.286478][ T35] IPVS: stopping backup sync thread 11716 ... [ 1068.292700][T13798] debugfs: 'hsr0' already exists in 'hsr' [ 1068.301891][T13798] Cannot create hsr debugfs directory [ 1068.963682][ T35] hsr_slave_0: left promiscuous mode [ 1068.982562][ T35] hsr_slave_1: left promiscuous mode [ 1068.990406][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.998148][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.020504][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.028580][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.088510][ T35] veth1_macvtap: left promiscuous mode [ 1069.096556][ T35] veth0_macvtap: left promiscuous mode [ 1069.102604][ T35] veth1_vlan: left promiscuous mode [ 1069.108222][ T35] veth0_vlan: left promiscuous mode [ 1069.222914][T13870] input: syz0 as /devices/virtual/input/input34 [ 1069.283856][T13491] Bluetooth: hci2: command tx timeout [ 1069.580514][T13874] loop7: detected capacity change from 0 to 1024 [ 1070.035522][T13883] fuse: Unknown parameter 'use00000000000000000000' [ 1070.602219][ T3674] hfsplus: b-tree write err: -5, ino 4 [ 1070.999620][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2736'. [ 1073.950955][T13798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1074.048361][T13798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1074.119770][T13798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1074.194961][T13798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1075.052927][T13905] input: syz0 as /devices/virtual/input/input35 [ 1075.123947][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.247602][T13798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.260664][T13907] fuse: Unknown parameter 'user_i00000000000000000000' [ 1075.344973][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.352402][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.367172][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.374747][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.725834][T13912] tipc: Enabled bearer , priority 0 [ 1075.747969][T13912] syzkaller0: entered promiscuous mode [ 1075.753920][T13912] syzkaller0: entered allmulticast mode [ 1075.859398][T13912] tipc: Resetting bearer [ 1075.867375][T13916] loop3: detected capacity change from 0 to 8 [ 1075.932398][T13916] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1075.941086][T13916] SQUASHFS error: Failed to read block 0x9b: -5 [ 1075.947746][T13916] SQUASHFS error: Unable to read metadata cache entry [99] [ 1075.955271][T13916] SQUASHFS error: Unable to read inode 0x127 [ 1075.964875][T13911] tipc: Resetting bearer [ 1076.041418][T13911] tipc: Disabling bearer [ 1076.897818][T13798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.930655][T13798] veth0_vlan: entered promiscuous mode [ 1078.990392][T13798] veth1_vlan: entered promiscuous mode [ 1079.214909][T13798] veth0_macvtap: entered promiscuous mode [ 1079.264275][T13798] veth1_macvtap: entered promiscuous mode [ 1079.388866][T13798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.485622][T13798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.554166][ T3674] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.566378][ T4246] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.610828][ T4246] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.644375][ T4760] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.399617][T13953] fuse: Unknown parameter 'user_i00000000000000000000' [ 1080.865342][T13958] tipc: Started in network mode [ 1080.870566][T13958] tipc: Node identity d2987e36ddcb, cluster identity 4711 [ 1080.879060][T13958] tipc: Enabled bearer , priority 0 [ 1080.896019][T13958] syzkaller0: entered promiscuous mode [ 1080.901672][T13958] syzkaller0: entered allmulticast mode [ 1080.929628][T13958] tipc: Resetting bearer [ 1081.023990][T13957] tipc: Resetting bearer [ 1081.087219][T13957] tipc: Disabling bearer [ 1084.362548][T13990] loop7: detected capacity change from 0 to 512 [ 1084.473255][T13990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.487108][T13990] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.705890][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.712603][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.758797][T13990] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2766: corrupted inode contents [ 1084.780077][T13990] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2766: mark_inode_dirty error [ 1084.793506][T13990] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2766: corrupted inode contents [ 1084.810966][T13990] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2766: mark_inode_dirty error [ 1085.072997][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.081989][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.223573][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.231577][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.580569][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.758451][T14000] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1085.994811][T14003] fuse: Unknown parameter 'user_i00000000000000000000' [ 1086.676558][T14005] tipc: Enabled bearer , priority 0 [ 1086.715209][T14005] syzkaller0: entered promiscuous mode [ 1086.720865][T14005] syzkaller0: entered allmulticast mode [ 1086.825946][T14005] tipc: Resetting bearer [ 1086.872816][T14004] tipc: Resetting bearer [ 1086.948398][T14004] tipc: Disabling bearer [ 1087.393242][T14011] loop3: detected capacity change from 0 to 64 [ 1087.728883][T14013] loop7: detected capacity change from 0 to 2048 [ 1087.786308][T14013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.097438][T14029] fuse: Unknown parameter 'user_id00000000000000000000' [ 1089.178233][T14028] loop7: detected capacity change from 0 to 1024 [ 1089.345954][T14028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.350548][T14034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1089.374481][T14035] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 1089.764650][T14040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2782'. [ 1091.477930][T14025] loop8: detected capacity change from 0 to 32768 [ 1091.547796][T14025] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1092.124136][T14025] XFS (loop8): Ending clean mount [ 1092.352849][T13798] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1092.373208][T14044] loop0: detected capacity change from 0 to 32768 [ 1092.591834][T14044] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1092.591953][T14044] allowing incompatible features above 0.0: (unknown version) [ 1092.592027][T14044] features: atomic_nlink [ 1092.623284][T14044] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 1092.632652][T14044] bcachefs (loop0): initializing new filesystem [ 1092.684531][T14044] bcachefs (loop0): going read-write [ 1092.795979][T14044] bcachefs (loop0): marking superblocks [ 1093.042349][T14044] bcachefs (loop0): initializing freespace [ 1093.213705][T14044] bcachefs (loop0): done initializing freespace [ 1093.297255][T14044] bcachefs (loop0): reading snapshots table [ 1093.373786][T14044] bcachefs (loop0): reading snapshots done [ 1093.656693][T14044] bcachefs (loop0): done starting filesystem [ 1093.790047][T14044] syz.0.2784 (14044) used greatest stack depth: 1152 bytes left [ 1093.886156][T13177] bcachefs (loop0): shutting down [ 1093.891343][T13177] bcachefs (loop0): going read-only [ 1093.897013][T13177] bcachefs (loop0): finished waiting for writes to stop [ 1093.926039][T13177] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 1094.083989][T13177] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 1094.179627][T13177] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 1094.232209][T13177] bcachefs (loop0): marking filesystem clean [ 1094.474523][T13177] bcachefs (loop0): shutdown complete [ 1098.057697][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1098.176017][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.545614][T14088] fuse: Unknown parameter 'user_id00000000000000000000' [ 1098.845593][T14092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2794'. [ 1099.073642][T14095] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1100.093753][ T5865] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1100.288860][ T5865] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.301519][ T5865] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1100.313697][ T5865] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 1100.325480][ T5865] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.338698][ T5865] usb 4-1: config 16 interface 0 has no altsetting 0 [ 1100.345653][ T5865] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1100.354954][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.668364][T14100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1100.829794][T14104] tipc: Enabled bearer , priority 0 [ 1100.851607][T14104] syzkaller0: entered promiscuous mode [ 1100.857561][T14104] syzkaller0: entered allmulticast mode [ 1100.964128][T14104] tipc: Resetting bearer [ 1100.990998][ T5865] usb 4-1: string descriptor 0 read error: -71 [ 1101.003507][ T5865] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1101.014548][ T5865] imon 4-1:16.0: unable to initialize intf0, err -19 [ 1101.021381][ T5865] imon:imon_probe: failed to initialize context! [ 1101.029124][ T5865] imon 4-1:16.0: unable to register, err -19 [ 1101.043073][T14103] tipc: Resetting bearer [ 1101.084616][T14103] tipc: Disabling bearer [ 1101.169208][ T5865] usb 4-1: USB disconnect, device number 22 [ 1101.645432][T14107] loop0: detected capacity change from 0 to 512 [ 1101.710006][T14107] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1102.357568][T14111] loop3: detected capacity change from 0 to 256 [ 1102.424443][T14111] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1102.435338][T14111] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1102.460267][T14113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1102.619171][T14111] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1103.571855][T14119] fuse: Unknown parameter 'user_id00000000000000000000' [ 1103.815705][T14121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2805'. [ 1104.196616][T14125] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 1104.239008][T14123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1104.933584][T14134] tipc: Enabled bearer , priority 0 [ 1104.977092][T14134] syzkaller0: entered promiscuous mode [ 1104.982748][T14134] syzkaller0: entered allmulticast mode [ 1105.073267][T14134] tipc: Resetting bearer [ 1105.112293][T14133] tipc: Resetting bearer [ 1105.133559][T14133] tipc: Disabling bearer [ 1105.233653][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1105.253505][T14140] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 1105.261484][T14140] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2814'. [ 1105.290903][T14143] loop8: detected capacity change from 0 to 512 [ 1105.359306][T14143] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1105.741338][T14148] loop7: detected capacity change from 0 to 256 [ 1106.258169][T14158] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1106.691479][T14167] binder: 14166:14167 ioctl c0306201 0 returned -14 [ 1106.755400][T14167] binder: 14166:14167 ioctl 4018620d 0 returned -22 [ 1106.798554][T14171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1106.802617][T14173] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 1106.816212][T14173] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1106.841028][T14174] binder: 14166:14174 ioctl c0306201 0 returned -14 [ 1106.849159][T14170] tipc: Enabled bearer , priority 0 [ 1106.851629][T14170] syzkaller0: entered promiscuous mode [ 1106.851721][T14170] syzkaller0: entered allmulticast mode [ 1106.870848][T14170] tipc: Resetting bearer [ 1106.899065][T14168] tipc: Resetting bearer [ 1106.951659][T14168] tipc: Disabling bearer [ 1106.981264][T14176] loop8: detected capacity change from 0 to 512 [ 1107.079724][T14176] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1107.089398][T14176] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.2825: inode #218103808: comm syz.8.2825: iget: illegal inode # [ 1107.184764][T14176] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.2825: Bad quota inode: 218103808, type: 2 [ 1107.238805][T14176] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 1107.342099][T14176] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 1107.351608][T14176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1107.455173][T14174] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 1107.548231][T14174] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.2825: inode #218103808: comm syz.8.2825: iget: illegal inode # [ 1107.592647][T14174] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.2825: Bad quota inode: 218103808, type: 2 [ 1107.629074][T14174] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 1107.862890][T13798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.694950][T14196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2837'. [ 1109.158041][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 1109.423751][ T5868] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1109.624889][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.635232][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.648592][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1109.658085][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.003225][ T5868] usb 5-1: usb_control_msg returned -32 [ 1110.009374][ T5868] usbtmc 5-1:16.0: can't read capabilities [ 1110.258688][T14186] loop7: detected capacity change from 0 to 32768 [ 1110.349090][T14186] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1110.561679][T14186] XFS (loop7): Ending clean mount [ 1110.647986][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2841'. [ 1110.705770][ T9488] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1111.053720][T14220] tipc: Started in network mode [ 1111.058838][T14220] tipc: Node identity 9e0d323beae9, cluster identity 4711 [ 1111.067120][T14220] tipc: Enabled bearer , priority 0 [ 1111.090846][T14220] syzkaller0: entered promiscuous mode [ 1111.097557][T14220] syzkaller0: entered allmulticast mode [ 1111.160130][T14220] tipc: Resetting bearer [ 1111.179950][T14219] tipc: Resetting bearer [ 1111.222956][T14219] tipc: Disabling bearer [ 1111.635985][T14224] loop0: detected capacity change from 0 to 64 [ 1112.224798][T14232] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2848'. [ 1112.334030][ T5865] usb 5-1: USB disconnect, device number 28 [ 1113.826058][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2853'. [ 1114.092219][T14251] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2855'. [ 1114.292621][T14253] tipc: Enabled bearer , priority 0 [ 1114.339942][T14253] syzkaller0: entered promiscuous mode [ 1114.345960][T14253] syzkaller0: entered allmulticast mode [ 1114.462724][T14253] tipc: Resetting bearer [ 1114.594831][T14252] tipc: Resetting bearer [ 1114.641491][T14252] tipc: Disabling bearer [ 1115.360813][ T5868] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1115.572647][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.582862][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.596339][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.605731][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.869070][ T5868] usb 5-1: usb_control_msg returned -32 [ 1115.875361][ T5868] usbtmc 5-1:16.0: can't read capabilities [ 1116.564540][T14276] 9pnet_fd: Insufficient options for proto=fd [ 1117.319180][T14281] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2867'. [ 1118.224642][T14290] tipc: Enabled bearer , priority 0 [ 1118.239988][T14290] syzkaller0: entered promiscuous mode [ 1118.245861][T14290] syzkaller0: entered allmulticast mode [ 1118.332796][T14289] tipc: Resetting bearer [ 1118.363241][ T5865] usb 5-1: USB disconnect, device number 29 [ 1118.436593][T14289] tipc: Disabling bearer [ 1118.746902][T14301] 9pnet_fd: Insufficient options for proto=fd [ 1118.860535][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2877'. [ 1119.189860][T14312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2881'. [ 1120.629729][T14328] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1120.862340][T14331] tipc: Enabled bearer , priority 0 [ 1121.021059][T14332] loop4: detected capacity change from 0 to 256 [ 1121.030035][T14334] syzkaller0: entered promiscuous mode [ 1121.035938][T14334] syzkaller0: entered allmulticast mode [ 1121.085904][T14330] tipc: Resetting bearer [ 1121.117843][T14330] tipc: Disabling bearer [ 1123.496429][T14371] loop7: detected capacity change from 0 to 256 [ 1124.507914][T14378] loop7: detected capacity change from 0 to 512 [ 1124.587415][T14378] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2904: bad orphan inode 15 [ 1124.646624][T14378] ext4_test_bit(bit=14, block=5) = 0 [ 1124.653271][T14378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.303676][T14382] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 1125.922679][T14364] loop4: detected capacity change from 0 to 32768 [ 1126.731726][T14364] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1126.731918][T14364] (syz.4.2899,14364,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 1126.750801][T14364] (syz.4.2899,14364,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 1127.085559][T14380] loop0: detected capacity change from 0 to 32768 [ 1127.643555][T14403] loop8: detected capacity change from 0 to 256 [ 1128.372850][T14411] overlayfs: failed to resolve './file0': -2 [ 1128.738312][T14415] loop3: detected capacity change from 0 to 256 [ 1128.801398][T14415] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1128.812828][T14415] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1128.916782][T14415] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1131.928197][T14433] loop3: detected capacity change from 0 to 8 [ 1132.022167][T14433] SQUASHFS error: Failed to read block 0x9000000000901e8: -5 [ 1132.030516][T14433] unable to read xattr id index table [ 1132.133214][T14435] loop8: detected capacity change from 0 to 512 [ 1132.155726][T14437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2926'. [ 1132.176856][T14435] ext4: Unknown parameter 'obj_role' [ 1132.260683][T14439] loop4: detected capacity change from 0 to 256 [ 1132.452004][T14439] overlay: filesystem on ./bus not supported [ 1132.919455][T14446] overlayfs: failed to resolve './file0': -2 [ 1133.111731][T14450] loop8: detected capacity change from 0 to 256 [ 1133.173727][T14450] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1133.184699][T14450] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1133.289614][T14450] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1133.564358][T14454] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1133.571200][T14454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1133.581554][T14454] vhci_hcd vhci_hcd.0: Device attached [ 1133.729685][T14457] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 1133.736510][T14457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1133.744819][T14457] vhci_hcd vhci_hcd.0: Device attached [ 1133.853624][ T5865] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1133.967582][T14457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1134.117813][T14465] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(27) [ 1134.124641][T14465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1134.133579][T14465] vhci_hcd vhci_hcd.0: Device attached [ 1134.380070][T14454] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 1134.386892][T14454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1134.400025][T14454] vhci_hcd vhci_hcd.0: Device attached [ 1134.623634][T14470] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(29) [ 1134.630457][T14470] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1134.638652][T14470] vhci_hcd vhci_hcd.0: Device attached [ 1134.893919][T14457] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 1134.900822][T14457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1134.913823][T14457] vhci_hcd vhci_hcd.0: Device attached [ 1134.999534][T14466] vhci_hcd: connection closed [ 1135.000231][T14471] vhci_hcd: connection closed [ 1135.012413][T14463] vhci_hcd: connection closed [ 1135.013536][T14461] vhci_hcd: connection closed [ 1135.033089][ T35] vhci_hcd: stop threads [ 1135.042664][ T35] vhci_hcd: release socket [ 1135.047483][ T35] vhci_hcd: disconnect device [ 1135.065035][T14458] vhci_hcd: connection closed [ 1135.071507][T14455] vhci_hcd: connection reset by peer [ 1135.166567][ T35] vhci_hcd: stop threads [ 1135.171065][ T35] vhci_hcd: release socket [ 1135.175914][ T35] vhci_hcd: disconnect device [ 1135.271455][ T35] vhci_hcd: stop threads [ 1135.276302][ T35] vhci_hcd: release socket [ 1135.281152][ T35] vhci_hcd: disconnect device [ 1135.376742][ T35] vhci_hcd: stop threads [ 1135.381146][ T35] vhci_hcd: release socket [ 1135.386250][ T35] vhci_hcd: disconnect device [ 1135.453803][ T35] vhci_hcd: stop threads [ 1135.458210][ T35] vhci_hcd: release socket [ 1135.462967][ T35] vhci_hcd: disconnect device [ 1135.560721][ T35] vhci_hcd: stop threads [ 1135.565409][ T35] vhci_hcd: release socket [ 1135.570190][ T35] vhci_hcd: disconnect device [ 1136.869628][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.114566][T14491] loop7: detected capacity change from 0 to 64 [ 1137.387602][T14494] overlayfs: failed to resolve './file0': -2 [ 1137.422487][T14497] loop3: detected capacity change from 0 to 256 [ 1137.476327][T14497] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1137.487396][T14497] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1137.499764][T14495] loop4: detected capacity change from 0 to 256 [ 1137.573068][T14497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1137.641534][T14495] overlay: filesystem on ./bus not supported [ 1137.730586][T14503] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1137.737374][T14503] syzkaller1: linktype set to 769 [ 1137.780748][T14501] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 1137.787572][T14501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1137.796832][T14501] vhci_hcd vhci_hcd.0: Device attached [ 1137.850154][T14507] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 1137.856985][T14507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1137.865584][T14507] vhci_hcd vhci_hcd.0: Device attached [ 1137.953817][T14501] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(19) [ 1137.960635][T14501] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1137.969399][T14501] vhci_hcd vhci_hcd.0: Device attached [ 1138.025694][T14501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1138.063681][ T2161] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1138.091058][T14501] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(23) [ 1138.097879][T14501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1138.106548][T14501] vhci_hcd vhci_hcd.0: Device attached [ 1138.157988][T14507] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(26) [ 1138.164802][T14507] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1138.173251][T14507] vhci_hcd vhci_hcd.0: Device attached [ 1138.267446][T14521] vhci_hcd: connection closed [ 1138.267958][T14515] vhci_hcd: connection closed [ 1138.273494][T14508] vhci_hcd: connection closed [ 1138.279069][T14513] vhci_hcd: connection closed [ 1138.298750][ T4466] vhci_hcd: stop threads [ 1138.308219][ T4466] vhci_hcd: release socket [ 1138.312758][ T4466] vhci_hcd: disconnect device [ 1138.322796][T14505] vhci_hcd: connection reset by peer [ 1138.356909][ T4466] vhci_hcd: stop threads [ 1138.361400][ T4466] vhci_hcd: release socket [ 1138.366786][ T4466] vhci_hcd: disconnect device [ 1138.382080][ T4466] vhci_hcd: stop threads [ 1138.391705][ T4466] vhci_hcd: release socket [ 1138.397978][ T4466] vhci_hcd: disconnect device [ 1138.414594][ T4466] vhci_hcd: stop threads [ 1138.419068][ T4466] vhci_hcd: release socket [ 1138.423850][ T4466] vhci_hcd: disconnect device [ 1138.492190][ T4466] vhci_hcd: stop threads [ 1138.497378][ T4466] vhci_hcd: release socket [ 1138.502121][ T4466] vhci_hcd: disconnect device [ 1138.975570][ T5865] vhci_hcd: vhci_device speed not set [ 1139.848765][T14544] loop4: detected capacity change from 0 to 256 [ 1140.109576][T14547] loop8: detected capacity change from 0 to 256 [ 1140.621560][T14547] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1140.632601][T14547] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1140.653858][ T5868] usb usb42-port1: attempt power cycle [ 1140.850065][T14544] overlay: filesystem on ./bus not supported [ 1140.858615][T14547] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1141.268460][ T5868] usb usb42-port1: unable to enumerate USB device [ 1141.576227][T14557] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 1141.583052][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1141.591126][T14557] vhci_hcd vhci_hcd.0: Device attached [ 1141.717999][T14560] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 1141.724819][T14560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1141.733424][T14560] vhci_hcd vhci_hcd.0: Device attached [ 1141.808082][T14561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1141.869234][T14568] loop4: detected capacity change from 0 to 64 [ 1141.874145][T14557] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(20) [ 1141.876208][ T5865] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1141.882190][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1141.882557][T14557] vhci_hcd vhci_hcd.0: Device attached [ 1141.929600][T14560] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(19) [ 1141.936424][T14560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1141.944782][T14560] vhci_hcd vhci_hcd.0: Device attached [ 1142.071532][T14557] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(22) [ 1142.078353][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1142.086614][T14557] vhci_hcd vhci_hcd.0: Device attached [ 1142.155381][T14569] vhci_hcd: connection closed [ 1142.158317][T10228] vhci_hcd: stop threads [ 1142.167935][T10228] vhci_hcd: release socket [ 1142.177529][T10228] vhci_hcd: disconnect device [ 1142.198467][T14566] vhci_hcd: connection closed [ 1142.200543][T14563] vhci_hcd: connection closed [ 1142.206059][T14572] vhci_hcd: connection closed [ 1142.256070][T14558] vhci_hcd: connection reset by peer [ 1142.284569][T10228] vhci_hcd: stop threads [ 1142.288975][T10228] vhci_hcd: release socket [ 1142.293774][T10228] vhci_hcd: disconnect device [ 1142.313049][T10228] vhci_hcd: stop threads [ 1142.318604][T10228] vhci_hcd: release socket [ 1142.323850][T10228] vhci_hcd: disconnect device [ 1142.346386][T10228] vhci_hcd: stop threads [ 1142.350884][T10228] vhci_hcd: release socket [ 1142.355783][T10228] vhci_hcd: disconnect device [ 1142.371374][T10228] vhci_hcd: stop threads [ 1142.377098][T10228] vhci_hcd: release socket [ 1142.387195][T10228] vhci_hcd: disconnect device [ 1142.569325][T14575] loop7: detected capacity change from 0 to 4096 [ 1142.603736][T14575] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1142.795158][T14575] ntfs3(loop7): ino=1a, mi_enum_attr [ 1142.800675][T14575] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1142.834747][T14575] ntfs3(loop7): ino=1a, mi_enum_attr [ 1142.840255][T14575] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1142.843108][T14583] input: syz1 as /devices/virtual/input/input43 [ 1143.224129][ T2161] vhci_hcd: vhci_device speed not set [ 1144.068804][T14594] loop8: detected capacity change from 0 to 1024 [ 1144.246643][T14594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.538538][T14602] loop3: detected capacity change from 0 to 256 [ 1144.647944][T14604] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 1144.660222][T14604] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1144.848033][T14608] loop4: detected capacity change from 0 to 64 [ 1145.898345][T14618] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1145.905161][T14618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.913175][T14618] vhci_hcd vhci_hcd.0: Device attached [ 1146.014006][T14623] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 1146.021173][T14623] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1146.029713][T14623] vhci_hcd vhci_hcd.0: Device attached [ 1146.142479][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.149497][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.173853][T14618] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1146.180694][T14618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1146.190598][T14618] vhci_hcd vhci_hcd.0: Device attached [ 1146.206767][ T5868] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1146.245891][T14623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1146.329602][T14618] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 1146.336436][T14618] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1146.344633][T14618] vhci_hcd vhci_hcd.0: Device attached [ 1146.380507][T14623] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(26) [ 1146.387326][T14623] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1146.396065][T14623] vhci_hcd vhci_hcd.0: Device attached [ 1146.501964][T14636] vhci_hcd: connection closed [ 1146.502190][T14633] vhci_hcd: connection closed [ 1146.510185][T14628] vhci_hcd: connection closed [ 1146.516262][T10228] vhci_hcd: stop threads [ 1146.525586][T10228] vhci_hcd: release socket [ 1146.526940][T14624] vhci_hcd: connection closed [ 1146.530194][T10228] vhci_hcd: disconnect device [ 1146.548610][T14621] vhci_hcd: connection reset by peer [ 1146.563834][T10228] vhci_hcd: stop threads [ 1146.568229][T10228] vhci_hcd: release socket [ 1146.572840][T10228] vhci_hcd: disconnect device [ 1146.620924][T10228] vhci_hcd: stop threads [ 1146.625864][T10228] vhci_hcd: release socket [ 1146.630479][T10228] vhci_hcd: disconnect device [ 1146.668832][T10228] vhci_hcd: stop threads [ 1146.673913][T10228] vhci_hcd: release socket [ 1146.685139][T10228] vhci_hcd: disconnect device [ 1146.799539][T10228] vhci_hcd: stop threads [ 1146.804375][T10228] vhci_hcd: release socket [ 1146.809152][T10228] vhci_hcd: disconnect device [ 1147.075765][T14635] loop4: detected capacity change from 0 to 4096 [ 1147.378631][T14635] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1147.444605][ T5865] vhci_hcd: vhci_device speed not set [ 1147.754229][T14650] netlink: 'syz.0.2988': attribute type 1 has an invalid length. [ 1147.762153][T14650] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1147.823994][T14635] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1147.890176][T14635] ntfs3(loop4): ino=1e, mi_enum_attr [ 1147.895971][T14635] ntfs3(loop4): ino=1e, mi_enum_attr [ 1147.901776][T14635] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1147.911049][T14635] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1148.018435][T14635] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1148.025665][T14635] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1148.031864][T14635] ntfs3(loop4): ino=1e, "file1" ni_find_attr [ 1148.038208][T14635] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 1148.364066][T14657] loop0: detected capacity change from 0 to 64 [ 1148.400984][T13798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.808353][T14524] usb usb50-port1: attempt power cycle [ 1149.541347][T14524] usb usb50-port1: unable to enumerate USB device [ 1150.941391][T14676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1150.948212][T14676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1150.956706][T14676] vhci_hcd vhci_hcd.0: Device attached [ 1151.328411][T14680] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1151.335233][T14680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1151.343612][T14680] vhci_hcd vhci_hcd.0: Device attached [ 1151.394132][ T5868] vhci_hcd: vhci_device speed not set [ 1151.413692][T14524] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1151.417059][T14680] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1151.461237][T14676] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 1151.468057][T14676] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1151.476372][T14676] vhci_hcd vhci_hcd.0: Device attached [ 1151.496242][T14680] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(24) [ 1151.503063][T14680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1151.511241][T14680] vhci_hcd vhci_hcd.0: Device attached [ 1151.584074][T14687] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27) [ 1151.590877][T14687] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1151.603924][T14687] vhci_hcd vhci_hcd.0: Device attached [ 1151.769730][T14683] vhci_hcd: connection closed [ 1151.770164][T14684] vhci_hcd: connection closed [ 1151.770309][T14688] vhci_hcd: connection closed [ 1151.778901][T14681] vhci_hcd: connection closed [ 1151.781339][T14678] vhci_hcd: connection reset by peer [ 1151.785784][ T35] vhci_hcd: stop threads [ 1151.804157][ T35] vhci_hcd: release socket [ 1151.804252][ T35] vhci_hcd: disconnect device [ 1151.854054][ T35] vhci_hcd: stop threads [ 1151.854121][ T35] vhci_hcd: release socket [ 1151.854244][ T35] vhci_hcd: disconnect device [ 1151.854961][ T35] vhci_hcd: stop threads [ 1151.855009][ T35] vhci_hcd: release socket [ 1151.855114][ T35] vhci_hcd: disconnect device [ 1151.860132][ T35] vhci_hcd: stop threads [ 1151.860186][ T35] vhci_hcd: release socket [ 1151.860307][ T35] vhci_hcd: disconnect device [ 1151.863920][ T35] vhci_hcd: stop threads [ 1151.863971][ T35] vhci_hcd: release socket [ 1151.864083][ T35] vhci_hcd: disconnect device [ 1152.899199][T14696] netlink: 'syz.8.3000': attribute type 1 has an invalid length. [ 1152.907508][T14696] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3000'. [ 1153.043109][T14698] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1153.379183][T14702] loop3: detected capacity change from 0 to 64 [ 1153.827355][T14704] loop8: detected capacity change from 0 to 1024 [ 1154.060298][T14706] loop3: detected capacity change from 0 to 512 [ 1154.098687][T14706] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1154.106369][T14706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1154.179049][T14706] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3005: bad orphan inode 131083 [ 1154.215621][T14706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.380093][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1154.578197][T10803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.199963][T14726] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 1155.206760][T14726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1155.214984][T14726] vhci_hcd vhci_hcd.0: Device attached [ 1155.256095][T14731] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 1155.262936][T14731] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1155.271717][T14731] vhci_hcd vhci_hcd.0: Device attached [ 1155.437572][T14734] netlink: 'syz.8.3012': attribute type 1 has an invalid length. [ 1155.445959][T14734] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3012'. [ 1155.466534][T14726] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(19) [ 1155.473345][T14726] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1155.481489][T14726] vhci_hcd vhci_hcd.0: Device attached [ 1155.605337][ T5868] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1155.846221][T14731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1155.969890][T14731] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(26) [ 1155.976711][T14731] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1155.984901][T14731] vhci_hcd vhci_hcd.0: Device attached [ 1156.035911][T14726] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(23) [ 1156.042703][T14726] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1156.050956][T14726] vhci_hcd vhci_hcd.0: Device attached [ 1156.115627][T14740] vhci_hcd: connection closed [ 1156.115866][T14738] vhci_hcd: connection closed [ 1156.121204][T14736] vhci_hcd: connection closed [ 1156.133919][T14732] vhci_hcd: connection closed [ 1156.142138][ T4466] vhci_hcd: stop threads [ 1156.151476][ T4466] vhci_hcd: release socket [ 1156.156284][ T4466] vhci_hcd: disconnect device [ 1156.194035][T14727] vhci_hcd: connection reset by peer [ 1156.224072][ T4466] vhci_hcd: stop threads [ 1156.228487][ T4466] vhci_hcd: release socket [ 1156.233189][ T4466] vhci_hcd: disconnect device [ 1156.283654][ T4466] vhci_hcd: stop threads [ 1156.288278][ T4466] vhci_hcd: release socket [ 1156.292888][ T4466] vhci_hcd: disconnect device [ 1156.322349][ T4466] vhci_hcd: stop threads [ 1156.327136][ T4466] vhci_hcd: release socket [ 1156.331761][ T4466] vhci_hcd: disconnect device [ 1156.363706][ T4466] vhci_hcd: stop threads [ 1156.368103][ T4466] vhci_hcd: release socket [ 1156.373009][ T4466] vhci_hcd: disconnect device [ 1156.393859][T14748] loop3: detected capacity change from 0 to 64 [ 1156.514025][T14524] vhci_hcd: vhci_device speed not set [ 1156.902753][T14754] loop3: detected capacity change from 0 to 24 [ 1156.989124][T14754] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1157.044539][T14754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1159.642843][T14767] netlink: 'syz.8.3023': attribute type 1 has an invalid length. [ 1159.651223][T14767] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3023'. [ 1160.733881][ T5868] vhci_hcd: vhci_device speed not set [ 1162.885480][T14781] syzkaller0: entered promiscuous mode [ 1162.891132][T14781] syzkaller0: entered allmulticast mode [ 1163.042062][T14784] loop7: detected capacity change from 0 to 512 [ 1163.201432][T14782] loop4: detected capacity change from 0 to 4096 [ 1163.223894][T14784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1163.236894][T14784] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.348537][T14788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1163.355385][T14788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1163.363719][T14788] vhci_hcd vhci_hcd.0: Device attached [ 1163.399824][T14784] EXT4-fs (loop7): shut down requested (1) [ 1163.457482][T14788] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 1163.464302][T14788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1163.477499][T14788] vhci_hcd vhci_hcd.0: Device attached [ 1163.554840][T14800] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(20) [ 1163.561644][T14800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1163.569701][T14800] vhci_hcd vhci_hcd.0: Device attached [ 1163.588905][T14800] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1163.637137][T14800] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 1163.637271][T14800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1163.637527][T14800] vhci_hcd vhci_hcd.0: Device attached [ 1163.643951][T14524] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1163.660122][T14800] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 1163.660253][T14800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1163.660530][T14800] vhci_hcd vhci_hcd.0: Device attached [ 1163.666630][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1163.729110][T14806] vhci_hcd: connection closed [ 1163.732084][T14808] vhci_hcd: connection closed [ 1163.733485][T14801] vhci_hcd: connection closed [ 1163.737354][ T1868] vhci_hcd: stop threads [ 1163.737400][ T1868] vhci_hcd: release socket [ 1163.737483][ T1868] vhci_hcd: disconnect device [ 1163.744163][ T1868] vhci_hcd: stop threads [ 1163.744199][ T1868] vhci_hcd: release socket [ 1163.744276][ T1868] vhci_hcd: disconnect device [ 1163.744682][ T1868] vhci_hcd: stop threads [ 1163.744727][ T1868] vhci_hcd: release socket [ 1163.744830][ T1868] vhci_hcd: disconnect device [ 1163.817209][T14792] vhci_hcd: connection reset by peer [ 1163.817861][T14796] vhci_hcd: connection closed [ 1163.832516][ T4760] vhci_hcd: stop threads [ 1163.832589][ T4760] vhci_hcd: release socket [ 1163.832711][ T4760] vhci_hcd: disconnect device [ 1163.834399][ T4760] vhci_hcd: stop threads [ 1163.834442][ T4760] vhci_hcd: release socket [ 1163.834543][ T4760] vhci_hcd: disconnect device [ 1163.943296][T14814] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 1164.033505][T14814] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1167.080279][T14836] syzkaller0: entered promiscuous mode [ 1167.086114][T14836] syzkaller0: entered allmulticast mode [ 1167.882381][T14845] loop8: detected capacity change from 0 to 2048 [ 1167.961713][T14852] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 1167.969762][T14852] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1167.994851][T14845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 1168.164382][T14845] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:169: inode #12: comm syz.8.3045: inline data xattr refers to an external xattr inode [ 1168.379507][T14855] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 1168.386328][T14855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1168.399273][T14855] vhci_hcd vhci_hcd.0: Device attached [ 1168.468792][T13798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1168.470021][T14855] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 1168.484606][T14855] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1168.497443][T14855] vhci_hcd vhci_hcd.0: Device attached [ 1168.564165][T14862] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(20) [ 1168.570990][T14862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1168.579964][T14862] vhci_hcd vhci_hcd.0: Device attached [ 1168.653978][ T8349] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1168.666404][T14855] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1168.743816][T14855] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(23) [ 1168.744101][T14524] vhci_hcd: vhci_device speed not set [ 1168.750589][T14855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1168.764340][T14855] vhci_hcd vhci_hcd.0: Device attached [ 1168.874251][T14862] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(25) [ 1168.881007][T14862] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1168.889234][T14862] vhci_hcd vhci_hcd.0: Device attached [ 1169.425042][T14863] vhci_hcd: connection closed [ 1169.431009][T14868] vhci_hcd: connection closed [ 1169.436632][T14865] vhci_hcd: connection closed [ 1169.456115][ T1868] vhci_hcd: stop threads [ 1169.465900][ T1868] vhci_hcd: release socket [ 1169.470458][ T1868] vhci_hcd: disconnect device [ 1169.515148][T14856] vhci_hcd: connection reset by peer [ 1169.519732][T14859] vhci_hcd: connection closed [ 1169.649615][ T1868] vhci_hcd: stop threads [ 1169.659115][ T1868] vhci_hcd: release socket [ 1169.663828][ T1868] vhci_hcd: disconnect device [ 1169.797691][ T1868] vhci_hcd: stop threads [ 1169.802092][ T1868] vhci_hcd: release socket [ 1169.806912][ T1868] vhci_hcd: disconnect device [ 1169.815761][ T1868] vhci_hcd: stop threads [ 1169.822585][ T1868] vhci_hcd: release socket [ 1169.827717][ T1868] vhci_hcd: disconnect device [ 1169.848032][ T1868] vhci_hcd: stop threads [ 1169.852506][ T1868] vhci_hcd: release socket [ 1169.857557][ T1868] vhci_hcd: disconnect device [ 1169.865046][T14874] loop0: detected capacity change from 0 to 2048 [ 1169.892804][T14874] NILFS (loop0): invalid segment: Inconsistency found [ 1169.900681][T14874] NILFS (loop0): trying rollback from an earlier position [ 1169.970980][T14874] NILFS (loop0): recovery complete [ 1170.014226][T14875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1170.597512][T14880] loop7: detected capacity change from 0 to 512 [ 1170.650085][T14880] ext4: Unknown parameter 'obj_role' [ 1171.511195][T14886] syzkaller0: entered promiscuous mode [ 1171.517044][T14886] syzkaller0: entered allmulticast mode [ 1171.930263][T14888] loop7: detected capacity change from 0 to 2048 [ 1172.110382][T14892] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.205359][T14893] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 1172.214463][T14893] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3059'. [ 1173.834397][ T8349] vhci_hcd: vhci_device speed not set [ 1174.408493][T14911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1174.415315][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1174.423673][T14911] vhci_hcd vhci_hcd.0: Device attached [ 1174.539955][T14911] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1174.546781][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1174.555168][T14911] vhci_hcd vhci_hcd.0: Device attached [ 1174.678194][T14911] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1174.685016][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1174.695991][T14911] vhci_hcd vhci_hcd.0: Device attached [ 1174.751540][ T5870] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1174.775590][T14911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1174.836639][T14911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 1174.843461][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1174.854622][T14911] vhci_hcd vhci_hcd.0: Device attached [ 1174.978056][T14918] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(25) [ 1174.984857][T14918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1174.992944][T14918] vhci_hcd vhci_hcd.0: Device attached [ 1175.195833][T14919] vhci_hcd: connection closed [ 1175.196318][T14922] vhci_hcd: connection closed [ 1175.201625][T14926] vhci_hcd: connection closed [ 1175.220916][T14916] vhci_hcd: connection closed [ 1175.221011][T14914] vhci_hcd: connection reset by peer [ 1175.239384][ T1868] vhci_hcd: stop threads [ 1175.245766][ T1868] vhci_hcd: release socket [ 1175.253524][ T1868] vhci_hcd: disconnect device [ 1175.329299][ T1868] vhci_hcd: stop threads [ 1175.334052][ T1868] vhci_hcd: release socket [ 1175.338751][ T1868] vhci_hcd: disconnect device [ 1175.389064][ T1868] vhci_hcd: stop threads [ 1175.393779][ T1868] vhci_hcd: release socket [ 1175.398373][ T1868] vhci_hcd: disconnect device [ 1175.414808][ T1868] vhci_hcd: stop threads [ 1175.419208][ T1868] vhci_hcd: release socket [ 1175.423982][ T1868] vhci_hcd: disconnect device [ 1175.488440][ T5868] usb usb48-port1: attempt power cycle [ 1175.508797][ T1868] vhci_hcd: stop threads [ 1175.513194][ T1868] vhci_hcd: release socket [ 1175.517942][ T1868] vhci_hcd: disconnect device [ 1175.531417][T14932] syzkaller0: entered promiscuous mode [ 1175.538034][T14932] syzkaller0: entered allmulticast mode [ 1175.565884][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1175.940330][T14936] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 1175.949266][T14936] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3071'. [ 1176.122661][ T5868] usb usb48-port1: unable to enumerate USB device [ 1176.135164][T14942] fuse: Bad value for 'fd' [ 1176.206645][ T2161] IPVS: starting estimator thread 0... [ 1176.304162][T14944] IPVS: using max 240 ests per chain, 12000 per kthread [ 1176.836454][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3076'. [ 1177.539011][T14955] loop4: detected capacity change from 0 to 256 [ 1177.557945][T14957] loop0: detected capacity change from 0 to 256 [ 1177.580434][T14957] exfat: Deprecated parameter 'namecase' [ 1177.581151][T14955] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1177.587126][T14957] exfat: Deprecated parameter 'utf8' [ 1177.597386][T14955] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1177.619773][T14957] exfat: Deprecated parameter 'utf8' [ 1177.723050][T14955] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 1177.778077][T14957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1179.913882][ T5870] vhci_hcd: vhci_device speed not set [ 1180.291089][T14971] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1180.297999][T14971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1180.306450][T14971] vhci_hcd vhci_hcd.0: Device attached [ 1180.353890][T14974] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 1180.360730][T14974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1180.373809][T14974] vhci_hcd vhci_hcd.0: Device attached [ 1180.454203][T14971] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 1180.461033][T14971] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1180.469142][T14971] vhci_hcd vhci_hcd.0: Device attached [ 1180.535982][T14974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1180.579073][ T5868] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1180.637979][T14971] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 1180.644805][T14971] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1180.653046][T14971] vhci_hcd vhci_hcd.0: Device attached [ 1180.759386][T14974] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(26) [ 1180.766201][T14974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1180.774477][T14974] vhci_hcd vhci_hcd.0: Device attached [ 1180.920034][T14977] vhci_hcd: connection closed [ 1180.920869][T14979] vhci_hcd: connection closed [ 1180.926694][T14981] vhci_hcd: connection closed [ 1180.931866][ T1868] vhci_hcd: stop threads [ 1180.936436][T14975] vhci_hcd: connection closed [ 1180.936788][ T1868] vhci_hcd: release socket [ 1180.950333][ T1868] vhci_hcd: disconnect device [ 1181.015877][T14972] vhci_hcd: connection reset by peer [ 1181.043061][ T1868] vhci_hcd: stop threads [ 1181.047750][ T1868] vhci_hcd: release socket [ 1181.052347][ T1868] vhci_hcd: disconnect device [ 1181.123957][ T1868] vhci_hcd: stop threads [ 1181.128357][ T1868] vhci_hcd: release socket [ 1181.132955][ T1868] vhci_hcd: disconnect device [ 1181.152387][T13491] Bluetooth: hci5: command 0x0406 tx timeout [ 1181.193665][ T1868] vhci_hcd: stop threads [ 1181.198090][ T1868] vhci_hcd: release socket [ 1181.202705][ T1868] vhci_hcd: disconnect device [ 1181.208520][ T1868] vhci_hcd: stop threads [ 1181.212873][ T1868] vhci_hcd: release socket [ 1181.217727][ T1868] vhci_hcd: disconnect device [ 1181.277330][T14524] usb usb40-port1: attempt power cycle [ 1181.529847][T14985] syzkaller0: entered promiscuous mode [ 1181.535884][T14985] syzkaller0: entered allmulticast mode [ 1181.897681][T14524] usb usb40-port1: unable to enumerate USB device [ 1181.999539][T14988] netlink: 'syz.4.3085': attribute type 1 has an invalid length. [ 1182.014444][T14988] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1183.828760][T15000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1184.029137][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1184.484760][T15005] loop4: detected capacity change from 0 to 1024 [ 1184.811637][ T4466] hfsplus: b-tree write err: -5, ino 4 [ 1185.728617][ T5868] vhci_hcd: vhci_device speed not set [ 1186.054797][T15013] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1186.061617][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1186.069800][T15013] vhci_hcd vhci_hcd.0: Device attached [ 1186.170122][T15018] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 1186.176945][T15018] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1186.185802][T15018] vhci_hcd vhci_hcd.0: Device attached [ 1186.240468][T15013] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 1186.247312][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1186.256049][T15013] vhci_hcd vhci_hcd.0: Device attached [ 1186.287487][T15013] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1186.294298][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1186.302505][T15013] vhci_hcd vhci_hcd.0: Device attached [ 1186.394463][T15018] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 1186.401281][T15018] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1186.411380][T15018] vhci_hcd vhci_hcd.0: Device attached [ 1186.428612][ T5868] usb 41-1: device descriptor read/64, error -110 [ 1186.488751][T15013] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 1186.495576][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1186.504674][T15013] vhci_hcd vhci_hcd.0: Device attached [ 1186.618855][T15025] vhci_hcd: connection closed [ 1186.619600][T15023] vhci_hcd: connection closed [ 1186.624953][T15027] vhci_hcd: connection closed [ 1186.633909][T15021] vhci_hcd: connection closed [ 1186.643301][ T3674] vhci_hcd: stop threads [ 1186.652714][ T3674] vhci_hcd: release socket [ 1186.657521][ T3674] vhci_hcd: disconnect device [ 1186.671161][T15016] vhci_hcd: connection closed [ 1186.671667][T15019] vhci_hcd: connection closed [ 1186.703691][ T3674] vhci_hcd: stop threads [ 1186.704023][ T5868] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1186.708701][ T3674] vhci_hcd: release socket [ 1186.727829][ T3674] vhci_hcd: disconnect device [ 1186.732845][T15017] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1186.753598][T15031] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 1186.761678][T15031] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1186.802830][ T3674] vhci_hcd: stop threads [ 1186.807359][ T3674] vhci_hcd: release socket [ 1186.811951][ T3674] vhci_hcd: disconnect device [ 1186.859520][ T3674] vhci_hcd: stop threads [ 1186.864936][ T3674] vhci_hcd: release socket [ 1186.869696][ T3674] vhci_hcd: disconnect device [ 1186.874836][ T3674] vhci_hcd: stop threads [ 1186.879174][ T3674] vhci_hcd: release socket [ 1186.883891][ T3674] vhci_hcd: disconnect device [ 1186.965253][ T3674] vhci_hcd: stop threads [ 1186.969824][ T3674] vhci_hcd: release socket [ 1186.975160][ T3674] vhci_hcd: disconnect device [ 1187.170704][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1187.194943][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1187.207413][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1187.254248][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1187.290052][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.306211][T15034] loop0: detected capacity change from 0 to 512 [ 1187.661264][T15034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1187.674661][T15034] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.098731][T13177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1188.628474][T15033] chnl_net:caif_netlink_parms(): no params data found [ 1188.848585][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3101'. [ 1189.115390][T15055] Bluetooth: MGMT ver 1.23 [ 1189.384087][ T5817] Bluetooth: hci1: command tx timeout [ 1189.473277][T15059] loop0: detected capacity change from 0 to 64 [ 1189.729583][T15065] netlink: 'syz.7.3107': attribute type 1 has an invalid length. [ 1189.737854][T15065] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3107'. [ 1189.860356][T15066] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3106'. [ 1189.898674][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.906342][T15033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.914130][T15033] bridge_slave_0: entered allmulticast mode [ 1189.923198][T15033] bridge_slave_0: entered promiscuous mode [ 1189.985700][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.001272][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.009119][T15033] bridge_slave_1: entered allmulticast mode [ 1190.018543][T15033] bridge_slave_1: entered promiscuous mode [ 1190.160712][T15069] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1190.167534][T15069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1190.175977][T15069] vhci_hcd vhci_hcd.0: Device attached [ 1190.250673][T15074] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1190.257489][T15074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1190.266315][T15074] vhci_hcd vhci_hcd.0: Device attached [ 1190.336136][T15069] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1190.342960][T15069] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1190.351326][T15069] vhci_hcd vhci_hcd.0: Device attached [ 1190.436884][T15074] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(22) [ 1190.443717][T15074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1190.452073][T15074] vhci_hcd vhci_hcd.0: Device attached [ 1190.640826][T15085] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 1190.647641][T15085] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1190.656166][T15085] vhci_hcd vhci_hcd.0: Device attached [ 1190.667477][T15080] loop7: detected capacity change from 0 to 512 [ 1190.707523][T15033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.739488][T14524] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 1190.858231][T15069] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 1190.865067][T15069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1190.874329][T15069] vhci_hcd vhci_hcd.0: Device attached [ 1190.927863][T15033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.973674][T15080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1190.986930][T15080] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.165400][T15081] vhci_hcd: connection closed [ 1191.165904][T15086] vhci_hcd: connection closed [ 1191.171476][T15078] vhci_hcd: connection closed [ 1191.182992][ T4466] vhci_hcd: stop threads [ 1191.192332][ T4466] vhci_hcd: release socket [ 1191.197008][ T4466] vhci_hcd: disconnect device [ 1191.207248][T15088] vhci_hcd: connection closed [ 1191.220381][T15075] vhci_hcd: connection closed [ 1191.237191][T15071] vhci_hcd: connection reset by peer [ 1191.306475][ T4466] vhci_hcd: stop threads [ 1191.311082][ T4466] vhci_hcd: release socket [ 1191.315963][ T4466] vhci_hcd: disconnect device [ 1191.479040][ T5817] Bluetooth: hci1: command tx timeout [ 1191.489427][ T4466] vhci_hcd: stop threads [ 1191.494062][ T4466] vhci_hcd: release socket [ 1191.498671][ T4466] vhci_hcd: disconnect device [ 1191.510734][ T4466] vhci_hcd: stop threads [ 1191.515390][ T4466] vhci_hcd: release socket [ 1191.526431][ T4466] vhci_hcd: disconnect device [ 1191.544371][ T4466] vhci_hcd: stop threads [ 1191.548787][ T4466] vhci_hcd: release socket [ 1191.554130][ T4466] vhci_hcd: disconnect device [ 1191.575944][ T4466] vhci_hcd: stop threads [ 1191.580351][ T4466] vhci_hcd: release socket [ 1191.585605][ T4466] vhci_hcd: disconnect device [ 1191.685824][T15033] team0: Port device team_slave_0 added [ 1191.719263][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1191.756869][T15033] team0: Port device team_slave_1 added [ 1191.857096][ T5868] vhci_hcd: vhci_device speed not set [ 1191.863946][T15033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.871031][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.897564][T15033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.056742][T15033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.064441][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.090731][T15033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.226590][T15104] loop7: detected capacity change from 0 to 256 [ 1192.258867][T15103] loop0: detected capacity change from 0 to 1024 [ 1192.281063][T15104] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1192.292138][T15104] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1192.309176][T15103] EXT4-fs: inline encryption not supported [ 1192.324246][T15103] EXT4-fs (loop0): filesystem is read-only [ 1192.419288][T15104] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x256728a3, utbl_chksum : 0xe619d30d) [ 1192.590194][T15033] hsr_slave_0: entered promiscuous mode [ 1192.598839][T15033] hsr_slave_1: entered promiscuous mode [ 1192.606561][T15033] debugfs: 'hsr0' already exists in 'hsr' [ 1192.612373][T15033] Cannot create hsr debugfs directory [ 1192.635049][T15104] fuse: Unknown parameter '0xffffffffffffffff' [ 1192.995773][T15114] netlink: 'syz.4.3119': attribute type 1 has an invalid length. [ 1193.003921][T15114] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3119'. [ 1193.214448][ T2161] usb usb42-port1: attempt power cycle [ 1193.303657][T11691] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1193.527562][T11691] usb 1-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1193.541187][T11691] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1193.544996][ T5817] Bluetooth: hci1: command tx timeout [ 1193.628708][T11691] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.40 [ 1193.638318][T11691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.646685][T11691] usb 1-1: Product: syz [ 1193.651016][T11691] usb 1-1: Manufacturer: syz [ 1193.656205][T11691] usb 1-1: SerialNumber: syz [ 1193.713290][T15121] loop7: detected capacity change from 0 to 512 [ 1193.889446][ T2161] usb usb42-port1: unable to enumerate USB device [ 1193.976481][T15121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1193.992821][T15121] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.562018][T15033] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1194.614908][T15033] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1194.686422][T15033] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1194.732839][T15033] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1194.822410][T11691] usbhid 1-1:1.0: can't add hid device: -71 [ 1194.829342][T11691] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1194.853082][ T9488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1194.899954][T11691] usb 1-1: USB disconnect, device number 14 [ 1194.933964][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1194.940781][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1194.949548][T15132] vhci_hcd vhci_hcd.0: Device attached [ 1195.042790][T15135] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1195.049622][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.058034][T15135] vhci_hcd vhci_hcd.0: Device attached [ 1195.159106][T15135] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 1195.165930][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.173656][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(20) [ 1195.180420][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1195.188398][T15135] vhci_hcd vhci_hcd.0: Device attached [ 1195.188728][T15132] vhci_hcd vhci_hcd.0: Device attached [ 1195.308564][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 1195.315383][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1195.325829][T15132] vhci_hcd vhci_hcd.0: Device attached [ 1195.501517][T15135] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(24) [ 1195.508347][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.517056][T15135] vhci_hcd vhci_hcd.0: Device attached [ 1195.629489][ T5817] Bluetooth: hci1: command tx timeout [ 1195.833933][T15136] vhci_hcd: connection closed [ 1195.834439][T15141] vhci_hcd: connection closed [ 1195.840126][T15145] vhci_hcd: connection closed [ 1195.840632][T10228] vhci_hcd: stop threads [ 1195.847207][T15147] vhci_hcd: connection closed [ 1195.850400][T10228] vhci_hcd: release socket [ 1195.855554][T15133] vhci_hcd: connection closed [ 1195.859640][T10228] vhci_hcd: disconnect device [ 1195.878321][T15134] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1195.889173][T15149] vhci_hcd: connection closed [ 1195.997513][T15033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.046085][T15158] loop7: detected capacity change from 0 to 128 [ 1196.054003][T10228] vhci_hcd: stop threads [ 1196.058414][T10228] vhci_hcd: release socket [ 1196.063052][T10228] vhci_hcd: disconnect device [ 1196.144825][T10228] vhci_hcd: stop threads [ 1196.149249][T10228] vhci_hcd: release socket [ 1196.154120][T10228] vhci_hcd: disconnect device [ 1196.203888][T10228] vhci_hcd: stop threads [ 1196.208488][T10228] vhci_hcd: release socket [ 1196.213087][T10228] vhci_hcd: disconnect device [ 1196.219122][T10228] vhci_hcd: stop threads [ 1196.224130][T10228] vhci_hcd: release socket [ 1196.228838][T10228] vhci_hcd: disconnect device [ 1196.273615][T15033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.279658][T15160] bio_check_eod: 2 callbacks suppressed [ 1196.279731][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.279731][T15160] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1196.306821][T14524] vhci_hcd: vhci_device speed not set [ 1196.319963][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.323994][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.323994][T15160] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1196.327615][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.354578][T15162] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 1196.362466][T15162] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1196.377767][T10228] vhci_hcd: stop threads [ 1196.382275][T10228] vhci_hcd: release socket [ 1196.388120][T10228] vhci_hcd: disconnect device [ 1196.500281][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.507787][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.514853][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.514853][T15160] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1196.528974][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.528974][T15160] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1196.542995][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.542995][T15160] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1196.652318][T15160] syz.7.3129: attempt to access beyond end of device [ 1196.652318][T15160] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1197.749355][ T2161] usb usb40-port1: attempt power cycle [ 1198.467832][ T2161] usb usb40-port1: unable to enumerate USB device [ 1199.057247][T15033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.186203][T15191] loop0: detected capacity change from 0 to 1024 [ 1199.261082][T15194] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 1199.267914][T15194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1199.276447][T15194] vhci_hcd vhci_hcd.0: Device attached [ 1199.320177][T15197] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 1199.327009][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1199.335945][T15197] vhci_hcd vhci_hcd.0: Device attached [ 1199.415512][T15191] ===================================================== [ 1199.423634][T15191] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 1199.430988][T15191] hfsplus_uni2asc+0x9a6/0x27a0 [ 1199.436325][T15191] hfsplus_readdir+0xd60/0x1a70 [ 1199.441342][T15191] iterate_dir+0x44f/0x620 [ 1199.446056][T15191] __se_sys_getdents64+0x17e/0x550 [ 1199.451315][T15191] __ia32_sys_getdents64+0x96/0xe0 [ 1199.456834][T15191] ia32_sys_call+0x3d14/0x4310 [ 1199.461730][T15191] __do_fast_syscall_32+0xb0/0x150 [ 1199.467227][T15191] do_fast_syscall_32+0x38/0x80 [ 1199.472225][T15191] do_SYSENTER_32+0x1f/0x30 [ 1199.477141][T15191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.483881][T15191] [ 1199.486279][T15191] Uninit was created at: [ 1199.490704][T15191] __kmalloc_noprof+0x95f/0x1310 [ 1199.496359][T15194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1199.506564][T15191] hfsplus_find_init+0x90/0x1d0 [ 1199.511623][T15191] hfsplus_readdir+0x1dc/0x1a70 [ 1199.519522][T15191] iterate_dir+0x44f/0x620 [ 1199.525100][T15191] __se_sys_getdents64+0x17e/0x550 [ 1199.530401][T15191] __ia32_sys_getdents64+0x96/0xe0 [ 1199.535842][T15191] ia32_sys_call+0x3d14/0x4310 [ 1199.540754][T15191] __do_fast_syscall_32+0xb0/0x150 [ 1199.546160][T15191] do_fast_syscall_32+0x38/0x80 [ 1199.551151][T15191] do_SYSENTER_32+0x1f/0x30 [ 1199.556045][T15191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.562575][T15191] [ 1199.565162][T15191] CPU: 0 UID: 0 PID: 15191 Comm: syz.0.3141 Not tainted syzkaller #0 PREEMPT(none) [ 1199.574918][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1199.585565][T15191] ===================================================== [ 1199.592594][T15191] Disabling lock debugging due to kernel taint [ 1199.599014][T15191] Kernel panic - not syncing: kmsan.panic set ... [ 1199.605575][T15191] CPU: 0 UID: 0 PID: 15191 Comm: syz.0.3141 Tainted: G B syzkaller #0 PREEMPT(none) [ 1199.616870][T15191] Tainted: [B]=BAD_PAGE [ 1199.621271][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1199.631454][T15191] Call Trace: [ 1199.634852][T15191] [ 1199.637881][T15191] __dump_stack+0x26/0x30 [ 1199.642394][T15191] dump_stack_lvl+0x53/0x270 [ 1199.647163][T15191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.653159][T15191] dump_stack+0x1e/0x25 [ 1199.657480][T15191] vpanic+0x361/0xc50 [ 1199.661644][T15191] panic+0x15d/0x160 [ 1199.665742][T15191] kmsan_report+0x31c/0x320 [ 1199.670403][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.675663][T15191] ? __msan_warning+0x1b/0x30 [ 1199.680488][T15191] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 1199.685653][T15191] ? hfsplus_readdir+0xd60/0x1a70 [ 1199.690852][T15191] ? iterate_dir+0x44f/0x620 [ 1199.695592][T15191] ? __se_sys_getdents64+0x17e/0x550 [ 1199.701039][T15191] ? __ia32_sys_getdents64+0x96/0xe0 [ 1199.706479][T15191] ? ia32_sys_call+0x3d14/0x4310 [ 1199.711554][T15191] ? __do_fast_syscall_32+0xb0/0x150 [ 1199.716984][T15191] ? do_fast_syscall_32+0x38/0x80 [ 1199.722158][T15191] ? do_SYSENTER_32+0x1f/0x30 [ 1199.726969][T15191] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.733648][T15191] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1199.740153][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.745440][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.750719][T15191] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1199.757405][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.762709][T15191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.768701][T15191] ? utf32_to_utf8+0x3e4/0x410 [ 1199.773660][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.778957][T15191] __msan_warning+0x1b/0x30 [ 1199.783613][T15191] hfsplus_uni2asc+0x9a6/0x27a0 [ 1199.788640][T15191] ? __msan_memcpy+0x108/0x1c0 [ 1199.793590][T15191] hfsplus_readdir+0xd60/0x1a70 [ 1199.798677][T15191] ? aa_file_perm+0x549/0x2140 [ 1199.803616][T15191] ? kmsan_get_metadata+0xfb/0x160 [ 1199.808908][T15191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.814915][T15191] ? finish_task_switch+0x1a7/0x920 [ 1199.820393][T15191] ? __pfx_filldir64+0x10/0x10 [ 1199.825351][T15191] ? __pfx_hfsplus_readdir+0x10/0x10 [ 1199.830815][T15191] iterate_dir+0x44f/0x620 [ 1199.835405][T15191] __se_sys_getdents64+0x17e/0x550 [ 1199.840673][T15191] ? __pfx_filldir64+0x10/0x10 [ 1199.845589][T15191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.851576][T15191] __ia32_sys_getdents64+0x96/0xe0 [ 1199.856874][T15191] ia32_sys_call+0x3d14/0x4310 [ 1199.861795][T15191] __do_fast_syscall_32+0xb0/0x150 [ 1199.867062][T15191] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1199.873004][T15191] do_fast_syscall_32+0x38/0x80 [ 1199.878016][T15191] do_SYSENTER_32+0x1f/0x30 [ 1199.882661][T15191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.889166][T15191] RIP: 0023:0xf7fc5539 [ 1199.893332][T15191] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1199.913070][T15191] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 1199.921616][T15191] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000f80 [ 1199.929699][T15191] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.937772][T15191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.945837][T15191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1199.953899][T15191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.961995][T15191] [ 1199.965366][T15191] Kernel Offset: disabled [ 1199.969732][T15191] Rebooting in 86400 seconds..