last executing test programs: 15m51.643155377s ago: executing program 32 (id=116): chdir(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 15m23.54568197s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x777) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 15m20.103970591s ago: executing program 2 (id=157): userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4000, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15m18.869664384s ago: executing program 2 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r4) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@filename='./file0\x00', r5, 0x0) r6 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f00000009c0)=""/56, 0x38) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x22c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x200, 0x2, [@TCA_BPF_ACT={0x1fc, 0x1, [@m_xt={0xd0, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xa7, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x128, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) 15m17.505966858s ago: executing program 2 (id=160): openat2$dir(0xffffff9c, 0x0, &(0x7f0000000180)={0x12000, 0x6, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1a7) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="d08908650d2277752b4a3739e546738d772937af35eacb91ffb40a9a68517e24fa2c8a3b6aa0b72db5365ee0942eb7f133dc0a395491bb95b339d8e41d21787a8e83c362a07e74198b7a512220bbab4d4388cf2cc9380ef046be806d7e3c7422e43e3b39d94bef57634b702468e60c29029eba5a05a3ad6b744e211435a90dfffe873e1fd4b6e5e93d8abf51f3e70566b3d638e6cf0d61298699dcc0763a9438d05b50604d21eabce341b22b119cef38064f4a93fdd724e25d76f8fe3c0e9419b7db6a3dfaab481e076486349f767b63e9b00e5553e308d0c535734cde604ee4958d84cc5cb07a01ce24db10aa26da756891443d86f89479da5a826460f62144c7866eaadc2a7b7ffb7fd7fd7752d30bccc57075c5a9a484e4eb93c54b1bb07b588adfdccad44691899f3d6970aa668258cc9f16343abc30c862d80bbfac5840e1f505d9dbdd952355f59d4984dad7c3572999a02d6cddde04f2af5114fd110d62d0f655dc9120424db6cba753cad330ad192bb6466492fc148c1ebfe2144e708c405d4c5eeac28ea69ca11ff1d606af8d1cf282098de8260548f19465a292b77c1ec178f7f4160b35b593fb684b5c5872c0debbe3790e62c1c0b2252d51b04f9f5133585dc4f1c1638c23c7376ab619319d4cb7ac37116a943bc7d9a2fe696d7deebc39d454789bcdacb948402b9c6fb1298e34b67d1765caf51f00fe253520d7ce80bc8c04e4067156baf4a679855b2e2489a838eb3320cbf6d82cd1b71812fd4e65cca2f1a31d72209f4d9a42060faca011cc05b605919df055b81fb3f2cf309b44b44250fc1e280ac5025bde97469068c027a4d2e1b4ba1cdd6daec1c7a74d608fa7c2a4e208283c2c9598878b88379a7f2b40a82320f7575033f8d1efce5d38549656fd914732726cb2ed9905814d967ab2de197f75c87f80be4069509532517f93007da774a0566b115011f0d6404b4a8bb105e55ccab6231137dc6d4097aefab807d3d171ae31e41b0b3a7bb2ed59ab38fb0a30660f84a158714469b5a16fbd216d91214ff5548cbbc1a8651d44b6d48b47367efe35a96c3083d5636cca0289db56a139fba77d20319dee5e3c7021627e93b1e7427d6954f7033a923d369961835480093a84522a78a24d1b01c30ba4b9afaac16953e56c7eade9269c9d306d6d7d7fb8d4b67801ffdff9285a6075d8caacd7cad679aa6f25f97c235fcdff129c521f52dd33911a55bf81cd946dbed554506729c6f4bc0178b04803e41317764aff863aacbf34c0c1dd5f53479bfc4f89d1132e5aaa0b7e2b5e46dae77752705590743dd56b65c80498182da8beccf2adffdd5cab674fa77f0f611f53a636a1261dd2483212955d76db0b0d1b59c364401c99cfe5feccf0c62f59aa07f34ba60a23bd99d702b0a4922e77f3f7d293f2c6af55b72697e7e8f25d545fe13c052fcc805d42b4b4c8a5d47bdf2ed52da9bd6d556503fabb59a24e834d3efd8da37abf4385724acfa0318b61b954c3db83500ebb66eb9e764c2bcd770cba99ef7f45780d28468e150c2eada94a58d7c62b6423eb95e583c9d6790025151a0029e13264cf91de3b2d349e169e7fd7528356a84a8786401dd30cbeeb0dd894cbe2d38a7846f4859be693099cbab757af8524e47b000518d79d15ede075d02e84e3dfb092d9cd3156656f0ed90af68d6b50377a15277128f7f249d377c560bf7a094d73b552e2e685e793e440079aea56ed2661e1cf40f23f8a63c85648cad96b54ae59ba3eaee102586b7ede6035dbf89e6dfd8524a2336156826fe4fc7f0c26495226f24456ca577d03f938034e2a9f2d8691e0d166ba0c6bd7daddb1e920c6842761c54126d7b12ca074ad89ff002b5738dc75ca73eb81cf70f9a2d0cb6ff53398a5bd9fddb5e1f20207ec75dc2afe4fc40a8cae8c267c38823db2820db622da5007bbc424908d00ea0716ef83518b218b60c615b6d35ca4812ba25130bc0eebe4dafccb90c0c56ffe84643828d957d6878c3a23085ed8815212b785e054f4dff29262fbb9d9ce509f14cdda9d2b8ffabbaa5d6aa3a4ab01d59408552e555a6b62d4cd35794e5c890c9f93f993f42d38dea2c41c7ba8db41e90b95880b7ffd6d6370616809edb2744b24a6b59c127467a3372bcd6c088b0ed697dd243b1d534a0fc28ef961779ec71f8707fd2928cbf23bff26d0a00231a72583089a22a1d0d6cfadaeb31a98cda1c84eb5e8bf047a89e8687e5f100bd57d1d67a4073306f377fe43ff33634aee3173032719c4c34189265f541357044dc8dbf56540d5be66047f908beaf040db44dd57b891b1e3e4cc98be5c20c81f4be6a2398b642d81de2e9c4ba34b8801a2fcd50d8d5ba6f497923bf29662b62f36119bcbfb6df3c1c8d61cff9962699673e5b0ffbb01deb81b2044157df7e03ca3a4c9a03ae2f59e55702c2079ee48ded1dfa0eb32872d80d9b113ad5b537597226948f8ac6b8d5ed700c357e8b9a1178e6f4b86c64ce0ba042152df716681e08bc7622b9977e421f554183611f8ffc36dfa1dafa2d4b2a76d8bc524e9ff22596ae79a964c67bca4311966f05208b626eac58c658aa384798ef738b17cefa55923316a1f9780c22a5828e3a2a62c40136341fcfbc8dae32ca560758467a266c5a170a05800a726ea0d93af19a4aaddaf8150c214f8b36b75ebec966062f1a4fdabb31eba08a1b277670b2e5dff82f77a4bec5b50c28a6459d9170b1115173709d113f677de59cb9b283037f8927317972139198841d798f2118de1a8ae2689e5cff6226282c8b801936b27ffdaa2876e3d8eace08fbd3380c0e0d0f33630c1a483520b423c63443c6bbe8c0f78ec143a0721eda931d444e5355e8cfd7af0177a98e181020ca7a0d59af6b4b4da2b404f302adc2f0537a2731bb1fe76a0b49caac4428e2504d02a0d12d05f935a634e7fe376872d90df5ceadd10bb2b0dcdb09167d3d021ee952381e7f267991985dc58ce6e5510d434933792fc600e701334cc223ad8da2004f83776b423037dc91a048cc1f7a85529d0f1dd4893d6e945ac0e57a6d3caae1b553c4bbb9a45137c8a729e7402d4a3c7a62c004f73acbc108ecdf868540058f69058d0d85a0b447861253b45161d91a21d0c254e908b0be9776560fd2e7fc91696fef7911d6c929f66642aad4ddbf434ab9ccd2b2a8320a3c1d355e0c73744bc3f12af5c2b743fbe3264a1585f999ee258dccea6b022722f1c4b4ca2ede91724960dbb515d2660e3878b6049e13c04ea60bbf5de0c31abbb67e4f4faca1611fad5f8e448d27864e9926d8a642dc1ad325003bf257dbbe6cffb71e82b6e33991d3e33eaa067a3e4aee53f01b25a976ece5027a339d1d9009a656820319aef88b955898bab3271066fd7a1c73fe97aaed2ab65c23cd90c039f2284ec2757441012ce010a4338e5dea06b96d3e30c5eb90632f9043bc9ac455564bb6e3395e433836c1634b9d6ada30893995565f1ff55e4f21ad8fd24f20ef4641cdb3c2235b9465cc2adaa3d0396dc9d16c5b78d2aa0d4673436e899f9b522112733348c81ea8df1805d379c12174967567da6ab12a8fb892a06171d0dc0b0308ac1a9151929ba6d408b76c8047798d03ef2697e800d069e43968ac73d85652b2ec1af17a89a9cf90c4ce9c9578283ab6405bdebf3271cdee7d33329a572a1da59d4457b95d8b43c09a9268e16c095a76a24f16ebcc14b35f6a7fa0a0292d5d49f08dd027391769ee294fc297e2082b5663e0fa4ea1d57eeac0440ea9692fc609f272b2c713b8a21d326a31a9be45664ee4bd9dfbe3521cf3470521e05fa7355e8246cfcab12c56f45b38f32d26aa405faf491b47cd69b1d869c1111a51cf91968cde89c83fbb6f2622e0cca462ce6cf8420d37399eadc4ad98bc7afcac48e84f34095a96a7233aa5179e2f7f09f88edbf438871d73d85d304fce8a93b87191e0b1d24d3ab621ba8463a94e4157614b189805202e6f183c5b2b9ed9c03498eb661e01075a3cf9d92aa2d0def273ab4e4f44557ad0e39b8098cabb34df304cf5e9f98b059b81e52a0fe8a94077e853ad81f1614572af204297bc8dc8b306f202e454d7cce3d63726ea726c44556a580beebc49feabec4ef9dfec51b8889c702beba509ecb99c92a899a676c25df905d13729afd2310ba0d0386bcb910a400111711219cdc9fe3b3dcb6036bc4073069a7ee0562a0e74b7a6953f498ce3385c43c73c944b958b6a8741d21027931d6b6e9a1212372282e2e27f9d205ae918516617d57cc3835d5c4e94d79ad4b9cf11cd295060e97b3aeab1989f1e479cbd3abe75cf3d96ca45ba99b08bdd2954d431ab373700f232890543680435f86f20ada308cc5a288bb2d4d46735df7f032dfe6a57b196e3a167837d1c893c607a4494cdb1829d1d9989c2a3867c348c6653d6c25dc4643c301b4a77ca616a8a2c72fb6c49ac92c2d81e56045b4f190e002c83f5e21aeccfddb4301b50431ed01cabbd1ae809bdc47855abefce9e88f720a0c7266c4773c91f2b6a8115ccd901197806bb7e8b71593fbc5f617adad4acfd13aa77c3c038f589eea19aa84b10d6e57dc0509afcb08d5325dea5cfe501e17efb53b2b7b836d2fd6b0a554795e0b980c2e375510cc4e95adb350024d9ceda192e8e905ac57378a6e56a5f85aa098b3460f4604f70203baaa791df1cd1824b7e370d9a6dbeea8564340782f3819cf77b1465d83815c0d931fde82b7648d0ea5b3d9d95f515f383c73987727d13a0dc2b5c164dae511c2d9ad4923884baa8ab6a62d370c1fa09aa9161d6f2f354f6c834d7f5b77430119ef251d5cedb73bfabe18dce03f44eccb121f04aa12ffa18e9429907ea13f312470cc79d5ace21220153c7fa0c5f4d748eb813d644aa89d368377da6b12fe74d1f5b04457a79bf1d50f96d3598bcdfc0f408500ee71df89387a3ef169edcab9d1ccbb1059c0d148f66314d79bf0cd4eb6c69a22fbe92219d9a7def174f57c194e07f900393fbbe583eb296a41a9f00def5e4f646e3d0bbbb7d6be06ad91a2a4fffb264833d66e22325bfcc6659fe3afb7340a5aa2ea0524e371e666e7573da8ac4d6f1fa7000debb596503a93014e672fffa5a4ce36c24e067b896a3ca02bc93a57b71e986e113781c5a17e86a9b3d194f9e0f4a876885963ac7a2f24568a521493fff90d3f04bfb978ed08e4bac76832cfe85324417f7a53dd3116c1edc8f20d6c05e77487406c4b1d70f692c1741035f9bbae6c3ae8044a9e3fa919c55e885ab9efc6b0e187ab76cb0df0639bc0e30048584138d3a957c1fdbd43939c3e4c96f354fa2a9025e546a263706a3a437e508a9b96b6ad10bdc65ef2be4ac11fe5861c8caa963b21581ee4d2b18ce4b45157386cb8ab41bea212950d4cf71b6b9421296106a0eb2446d2648309d67ecc4a213cfeb5a1d2c188cdb60c0934bc7ce9b867001230d548f081e1c2047dd60d78d327d0dd4f7db1b23f2ef55cd3a02f85bd40ccf33a7bea13505418760bce8815cee7aeeea906c4b730db663a32ccb9fad68bfce3ae52f0a64b30c59ee707c763f8ef81a74f507f7deff192bc7f960124ebb32bf6e744200231b86a3fbb74c6a2525ecc3e", 0xf8c, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51", 0x3f}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 15m14.195081606s ago: executing program 3 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000000044e230000000080003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000ffffffff0000000009000000000000000600000000000000ffff0000000000000c2508000000000002000000000000008300000000000000fdfffffffffffffffcffffffffffffffff7f0000000000000600000000000000ff0100000000000002000000fcffffff000100002abd700000000000020001fc2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) 15m14.017986026s ago: executing program 3 (id=167): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x14d1, &(0x7f00000015c0)="$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") timer_create(0x2, 0x0, &(0x7f0000000240)) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x3032, 0xffffffffffffffff, 0xd27e4000) pipe(&(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)="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", 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x30}}, 0x4) 15m11.718660392s ago: executing program 3 (id=169): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x48000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0xa, 0x8, 0x0, 0x9, 0x31, 0x6, 0x0, 0x0, 0x7, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15m11.516858686s ago: executing program 3 (id=170): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m11.278587598s ago: executing program 3 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 15m9.380831069s ago: executing program 3 (id=173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 15m4.334094366s ago: executing program 2 (id=178): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) 15m2.550945764s ago: executing program 2 (id=180): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x5, 0x2) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x4001, 0x100) write(r4, &(0x7f0000000240)='1', 0x1) 14m53.837502106s ago: executing program 33 (id=173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 14m46.524676405s ago: executing program 34 (id=180): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x5, 0x2) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x4001, 0x100) write(r4, &(0x7f0000000240)='1', 0x1) 10m35.175184448s ago: executing program 6 (id=621): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @rr={0x7, 0x17, 0x13, [@private=0xa010102, @multicast1, @rand_addr=0x64010100, @multicast2, @multicast1]}]}}}], 0x48}, 0x200040c4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0xc0085504, &(0x7f0000000040)=0x80000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000240)={r1, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x44302, &(0x7f0000000140)={@align, {0x9, 0x6, 0x4, 0x6}}, 0xff, &(0x7f0000000180), &(0x7f00000001c0)=0x80000000}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x10, 0x3}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r7, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000400010004"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)={0x6, 0x40000006, 0xfd, 0x87, 0xffffffff, 0x40}) r9 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0x7005, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2c, &(0x7f0000000040)=0x7fff, 0x7718) 10m33.141933978s ago: executing program 6 (id=632): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x1005, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000140)="d0", &(0x7f00000001c0)=""/148}, 0x20) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd001, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r1, 0x3e07, 0x47d5, 0x16, 0x0, 0x0) 10m32.839241756s ago: executing program 6 (id=635): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f00000000c0)=0xffff1884, 0x4) 10m32.580026759s ago: executing program 6 (id=639): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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") ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xd, @sdr={0x59565955, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$OTPGETREGIONCOUNT(r1, 0x40044d0e, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x60002, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=0xffffffffffffffff, 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) lseek(r4, 0x8000000000000003, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) 10m30.424898601s ago: executing program 6 (id=646): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80000) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000040)={0x1f2, 0x3971, 0x8, 0x7, 0xbb, 0x0, "959371aa0586c5a165e923cafe93680a", 0xa, 0x79, 0x8, 0x9, 0x9, 0x5, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x50, 0x0, 0x17f, {0x7, 0x29, 0x1, 0x24ff8719a9b0cd6f, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x6, [0x5, 0x5, 0x8, 0x55, 0x8000, 0xe7, 0x24000000, 0x8]}}) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000002) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1, 0x9}}, 0x7, 0x4, 0x80002, 0x8001, 0x54, 0x6, 0xf5}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0d, &(0x7f00000001c0)="04") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000000307010400000000000000000a0000030c00034000000000000000050c00024000000000000000060c00034000000000000000e30c0006404000000000000000f2b81427b1a9598f66db948397f3a0ebe271f5eb31c35710164c3b89565f0c6ec545d3616acf42e6343eaf053bbe8907d1a56d3cf9204a04edea226a16a98f32707a9f6f73ac6ed9d215087e0f0911232b010633ced85ea6e18ac2f3c03a18cdb480963362f666ce8653444395b46d32f7efd1088b352f0c189f43c343dd2e5b8c8f8d210699bd49e01576584778a320c4257f37c6cf82a7e8ba3cf8556c1d193fa7ab10309c2f2e312d9b621dce43881139b3d263e665bf43e724b0aaf01bbaa69d06bfc71776d43db3ba75a327662c65636792"], 0x44}, 0x1, 0x0, 0x0, 0x4880}, 0x20004850) r6 = signalfd4(r2, &(0x7f0000000880)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000040), 0x3004c00, &(0x7f00000007c0)=ANY=[@ANYRES16=r3, @ANYRESHEX=r6, @ANYRESDEC=r4, @ANYRESHEX=r6]) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000640)="00383d3cc0d0d8b6c4992aa43ca67e2ac2c2716c862c4c637b31a31d4140ae5c162cf37a2a9078b50353b72e469de2f1546e922b0fec561c7e42091fe1651ae01f6de6e7c63653b45aefcc8023a8a2612e939a38674a08b7a48aa13db0cea890201b63acb7bd1bf73a4e483a508e13574e933988f581ca1839a4c457185bb2491aeb77b547e09f5af1ae2d8f35e8e576c76d98ce7e0fa092efcc37c7e2cfb4728cdc0adabb3738d369b2b3a7bcb189b1a9b205dd994b15b4de6757f17f3956642baa51a93f91be4e215d3664296ff5acf1aae208cb072e2ce5e5531ecd54ed4cd74b391a64fc", 0xe6) r7 = syz_clone(0x9000000, &(0x7f00000004c0)="4b294639f68516ce071c7a6668df2ddf5d79a554fe98ae30985f1250eb85ba76924cd4f5df1ce2fc293eb4e1804a1b846b3d8443b4f20b1234e5f6b125a30ee629e408fb9ccd1fe9cb147b6839ae982adfe879f93d76674d64156bfcee4f7953a54068433694bde57aff36bba86d83e0e7bdab3c3ec46299ffd7454e90f95a7b21895a1b169d238dfda0ff95bb79af1a45285d1a229790044eb2b0b8960c081d77693082bef58e4b5ae1fc37e7d6b09c9fcf684d01ce633c15075f682f", 0xbd, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="5a654845a485724cebb1bd88e881b3b2cfca02aab3d10ff6528ca4084b991397c7") setpriority(0x1, r7, 0x5) close(r2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) write(r8, &(0x7f00000000c0)='0', 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0)=r8, 0x4) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES16=r2, @ANYRESOCT=r7, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) 10m23.874945839s ago: executing program 6 (id=661): socket(0x2b, 0x1, 0x19c) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000500)="d37f87213bd36e501649149da378d3abd7561350dabf03c38a0bba03b89b0f7d171c2faaf082295cbe55e1f2e3f15c6cab84a267587232b9281e2b932db39c8c283910369d3304dd7c517f65a9921ec2bbdb03c6b7ac2b661f711e0863e82ae297512dc408e47c3759edbf244dd42b727fad2d8a001a60071bc3d4a54a1995b556fb23823fee16c3ecb775ca2b8c1bad2cf91de091978d6506c29e0204a3495a264d8cc2a5a76fe1857599df64edf622da95f08719784a88e7c4d9374017f31a90f06d97803ff8ecefc574e181d02ffd17b1d22e4dbb2a56cd751e34d5c284d2e7bef226223b4cd8ebda48f49cc268944f819bc2e1", 0xf5, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f00000001c0)='./mnt\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x1, 0xa07, &(0x7f0000001640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000040)={{0x0, 0x0, 0x40, 0xd, 0xfe}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x1, 0x8000000002000000}, {0x0, 0x0, 0x28, 0xd, 0xffffffffffffff30}, {&(0x7f0000000300)=[0x9, 0x31a8], 0x2, 0x8, 0x5, 0xb2}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="48558a925001179b00000000000000000a000000300002802c00018014000300fc01000000000000000000000000000114000400fc02000000000000000000000000000104001980d1774f781f5e5a6aa4996f11944900e1e808851f30a62f7c636b9e3022459682adc4b344425c4d50"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) madvise(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x1a, 0x6, 0x401) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) 10m23.01584321s ago: executing program 35 (id=661): socket(0x2b, 0x1, 0x19c) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000500)="d37f87213bd36e501649149da378d3abd7561350dabf03c38a0bba03b89b0f7d171c2faaf082295cbe55e1f2e3f15c6cab84a267587232b9281e2b932db39c8c283910369d3304dd7c517f65a9921ec2bbdb03c6b7ac2b661f711e0863e82ae297512dc408e47c3759edbf244dd42b727fad2d8a001a60071bc3d4a54a1995b556fb23823fee16c3ecb775ca2b8c1bad2cf91de091978d6506c29e0204a3495a264d8cc2a5a76fe1857599df64edf622da95f08719784a88e7c4d9374017f31a90f06d97803ff8ecefc574e181d02ffd17b1d22e4dbb2a56cd751e34d5c284d2e7bef226223b4cd8ebda48f49cc268944f819bc2e1", 0xf5, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f00000001c0)='./mnt\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x1, 0xa07, &(0x7f0000001640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000040)={{0x0, 0x0, 0x40, 0xd, 0xfe}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x1, 0x8000000002000000}, {0x0, 0x0, 0x28, 0xd, 0xffffffffffffff30}, {&(0x7f0000000300)=[0x9, 0x31a8], 0x2, 0x8, 0x5, 0xb2}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="48558a925001179b00000000000000000a000000300002802c00018014000300fc01000000000000000000000000000114000400fc02000000000000000000000000000104001980d1774f781f5e5a6aa4996f11944900e1e808851f30a62f7c636b9e3022459682adc4b344425c4d50"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) madvise(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x1a, 0x6, 0x401) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) 3m8.018998425s ago: executing program 4 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) 3m7.340119888s ago: executing program 4 (id=1895): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 3m2.707738256s ago: executing program 4 (id=1900): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000440)={0x2, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}}, {{0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {{0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}]}, 0x210) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x4000005, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x12e5}], 0x1, 0x0, 0x0, 0x0) close(r0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x8801, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) write$dsp(r2, &(0x7f0000000240)="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", 0xe5d56249) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) sendfile(r4, r4, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fff}) 2m59.270539039s ago: executing program 4 (id=1910): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 2m54.915767829s ago: executing program 4 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r4) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@filename='./file0\x00', r5, 0x0) r6 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f00000009c0)=""/56, 0x38) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_xt={0xd0, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xa7, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xac, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x81, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e3bd5d1fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) 2m53.185152004s ago: executing program 4 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) 2m39.734732624s ago: executing program 7 (id=1934): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3623c17fade0f6cc5bad28cdf8037f740dac9e94099aec796dc3336d426fe5ff7e0"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c446, &(0x7f0000002880)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES8=0x0], 0x1, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 2m35.477285244s ago: executing program 36 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) 2m35.427467723s ago: executing program 7 (id=1938): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x3, 0x3, 0x3, 0x3, 0x1000}, 0x1, 0x8}) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xc}}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f0000000100)) 2m29.478653551s ago: executing program 7 (id=1941): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xe5cc, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r4}, 0x38) 2m28.253860166s ago: executing program 7 (id=1945): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070b", 0xde}, {&(0x7f0000000380)}, {&(0x7f0000000800)="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", 0xfa9}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d0801800000000000000000000000000010000000700050000"], 0x70}}], 0x3, 0x2000c844) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 2m27.893867708s ago: executing program 7 (id=1948): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000007e80)=0xbf, 0x2) shutdown(r0, 0x1) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x14, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x9, {0x3, 0x4}}, {0x2, 0x28, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xa, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0x0, 0x40}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x2}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6b, {0x3}}, {0x2, 0x800, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x6, {0x1, 0xf8f4}}, {0xfff2, 0x1, {0x0, 0xd6b}}, {0x40, 0x7e7e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x8, 0x7, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x3, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x2, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7f, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0xa3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0xfffc, 0x4) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f000000d340)={&(0x7f000000d180)=[&(0x7f0000000140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='-x0', 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) 2m22.890454657s ago: executing program 7 (id=1953): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), 0x0}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 2m6.745786772s ago: executing program 37 (id=1953): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), 0x0}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 16.638235383s ago: executing program 0 (id=2373): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) ioctl$TIOCSETD(r4, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 13.927573654s ago: executing program 0 (id=2381): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x123) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) socket(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "fc3a09", 0x30, 0x3a, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0xa, '\x00', {0x2, 0x6, "384296", 0x56, 0x3b, 0x0, @remote, @empty}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 12.353244493s ago: executing program 0 (id=2389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.866824373s ago: executing program 1 (id=2398): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_mpls={0x4c, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9727a}]}, {0x15, 0x6, "c2cca64ae9666f0039e5c256ca605ef66f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040005}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 10.171190526s ago: executing program 1 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/191, 0xbf}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/1, 0xd}, 0x3}], 0x400000000000177, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 9.860502946s ago: executing program 0 (id=2406): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 8.483156531s ago: executing program 1 (id=2407): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) setns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats={0x4a}}) 7.898824609s ago: executing program 8 (id=2410): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100", 0x2}, {&(0x7f0000000480)="bff86c0c12df76", 0x7}, {&(0x7f0000000540)="09d6c6bb9e1e63174fdb169d5c", 0xd}], 0x4) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="f9781f5be94ebf980d90ef2849f07456f54d6427a0a46d8a101830478ff6fb36f790542b418262b83efb042f1c687968ee4981b15a583bec2766f77647e1d2bd1bc404f6efbf4f8cab15955040171ccd1e9db9f20e2b81141f1fcfe6d9845cc5302f74f8d2ab9dee2ea470e6b2b06c9e99f25b5a3751322f9b61a244be4137c6201ff0599a9308bcb76ffae623aa7c187369c847e83b07b78b939f5227ff073c35f55f7011a088794ba2b5cc888d97488997f3f6d716a89f7869c6db"], 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40f40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x94, "84d5c1d2e534139f3d4c378032ef492a002e60f729546939a014f00b52c6ed1b6e8c69d92bfe9ca342b39768d67c64840741ed1a57656241ab0e64fbf54d58f0d76bb6f3df1f65531cd160f03138921d91d22f640a8712d37ff89321e9891bc4795486facb6ab63d6cc823fbcb670c919d7762427069e16c5eb60578e6ada4cc01a867f5c25219474338628eabfebc2ae8271f54"}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000340)={r6, 0x6}, &(0x7f0000000380)=0x8) listen(r3, 0xfffff789) r7 = accept(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, 0x0, 0x0) 7.419200242s ago: executing program 0 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) pipe(&(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 7.412276055s ago: executing program 9 (id=2414): r0 = socket(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x0, 0xe7}}) 6.438424876s ago: executing program 9 (id=2415): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r3, &(0x7f0000000100), 0x0, 0x140, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5.124387621s ago: executing program 5 (id=2418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x10d000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r2 = syz_io_uring_setup(0x36c2, &(0x7f0000000240)={0x0, 0x6fe9, 0x1000, 0x2, 0x1f8, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x161a82, 0x149) sendfile(r3, r3, 0x0, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000400)={0x0, 0xd449, 0x20, 0x1, 0x2d0, 0x0, r2}, 0x0, 0x4, 0x0, &(0x7f0000001a00)) syz_usb_connect(0x0, 0x3c3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c6e01208480b06100ac0010203010902b10301000080000904"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) openat$nullb(0xffffffffffffff9c, 0x0, 0xaca82, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.939398092s ago: executing program 0 (id=2419): process_vm_readv(0x0, &(0x7f0000005940)=[{&(0x7f0000005840)=""/229, 0xe5}], 0x1, &(0x7f0000006f40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 4.868689636s ago: executing program 8 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x18f042, 0x124) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x200) 4.697568193s ago: executing program 9 (id=2421): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c00028005000100"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) 3.858459273s ago: executing program 1 (id=2422): inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000160) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r0 = syz_usbip_server_init(0x4) write$usbip_server(r0, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) 3.821315309s ago: executing program 5 (id=2423): r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x7, 0xf0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 3.088607507s ago: executing program 8 (id=2424): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) unlinkat(r3, &(0x7f0000000240)='./file3\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="300000001c00010401000100000000002d000000020000008000000105000100300000000a0002000000000000000000", 0x30) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r4}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x80, &(0x7f00000000c0)={0x16, 0x7, 0x7}) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x518}, 0x50) r10 = syz_open_dev$evdev(&(0x7f0000000140), 0x7ff, 0x41) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000180)=""/144) 2.986717739s ago: executing program 9 (id=2425): openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x78, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_open_dev$video4linux(0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r0, 0x0, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x17, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.810607272s ago: executing program 5 (id=2426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b91f, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0x1}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000140)="fad330752adf0786dc879338277f", 0xe, 0x6008092, &(0x7f0000000540)={0x11, 0x11, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 2.274618806s ago: executing program 1 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x2000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendfile(r5, r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000004000000000000000500"/120], 0x78) 2.205885617s ago: executing program 8 (id=2428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 906.8699ms ago: executing program 5 (id=2429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000480)="d66301", 0x3}], 0x1) 906.561575ms ago: executing program 8 (id=2430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="0300000000000000010000000500000001") 817.512451ms ago: executing program 5 (id=2431): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) 618.392483ms ago: executing program 1 (id=2432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/1/root/var\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var/run/gssproxy.sock\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/self/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x6e) listen(r0, 0x5) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/kernel/sunrpc/xprt-switches/switch-0/add_xprt\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/kernel/sunrpc/xprt-switches/switch-1/add_xprt\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-1-local/xprt_state\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='offline\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-1-local/del_xprt\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-2-local/xprt_state\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='offline\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-2-local/del_xprt\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r9, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 434.546535ms ago: executing program 5 (id=2433): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 434.295918ms ago: executing program 8 (id=2434): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r1, 0x72a111a7ca3a9801, 0x70bd2a, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x200008a0}, 0x10) 347.048439ms ago: executing program 9 (id=2435): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 0s ago: executing program 9 (id=2436): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x278, 0xc8, 0x8, 0x0, 0x5803, 0x3d8, 0x2e8, 0x2e8, 0x3d8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x210, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@rt={{0x138}, {0x9a, [0xfffffff7], 0x4, 0x20, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private0, @loopback, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @loopback, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}], 0xb7}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz1\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) bind$inet6(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1500\x00', 0x5) kernel console output (not intermixed with test programs): device number 36 using dummy_hcd [ 846.703263][ T5720] usb 5-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 846.704497][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 846.704528][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 846.704567][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.795851][ T5834] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 846.810214][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 846.810282][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 846.810323][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.807129][ T5720] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 847.833821][ T5720] usb 5-1: USB disconnect, device number 52 [ 848.869571][ T5834] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 849.678586][ T5834] usb 8-1: USB disconnect, device number 36 [ 850.523498][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.984675][T12872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 851.876078][T12880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 852.013842][T12889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 853.419062][T12895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 853.426225][T12889] ip_tables: iptables: counters copy to user failed while replacing table [ 853.480262][T12895] ip_tables: iptables: counters copy to user failed while replacing table [ 853.649707][T12898] random: crng reseeded on system resumption [ 854.891906][T12906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 854.914568][T12906] ip_tables: iptables: counters copy to user failed while replacing table [ 855.078241][T12912] random: crng reseeded on system resumption [ 855.093451][T12909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 861.670173][T12939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 861.688813][T12939] ip_tables: iptables: counters copy to user failed while replacing table [ 861.841837][ T191] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 861.996491][ T191] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 862.000380][ T191] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 862.000412][ T191] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 862.000446][ T191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.178319][T12945] tipc: Cannot configure node identity twice [ 862.298714][ T191] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 862.355802][ T191] usb 8-1: USB disconnect, device number 37 [ 862.575212][T12951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 862.677212][ T33] audit: type=1326 audit(1791322324.888:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12952 comm="syz.8.1754" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1578f9e199 code=0x0 [ 863.096480][T12933] loop7: detected capacity change from 0 to 32768 [ 863.168138][T12933] JBD2: Ignoring recovery information on journal [ 863.364624][T12933] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 863.835752][T12980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 863.894719][T12980] ip_tables: iptables: counters copy to user failed while replacing table [ 864.170035][ T7674] ocfs2: Unmounting device (7,7) on (node local) [ 864.513922][T12987] tipc: Cannot configure node identity twice [ 864.724521][T12993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 864.841559][T12996] random: crng reseeded on system resumption [ 865.687214][T12990] ptp ptp0: guarantee physical clock free running [ 867.729223][T13001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 867.829596][T13006] random: crng reseeded on system resumption [ 868.320256][T13005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 868.340283][T13005] loop8: detected capacity change from 0 to 128 [ 869.127256][ T191] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 869.192549][ T5804] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 869.298617][ T191] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 869.332653][ T191] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 869.332708][ T191] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 869.332877][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.454474][ T5804] usb 8-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00 [ 869.475394][ T5804] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.475663][ T5804] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.574496][ T5804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 869.574544][ T5804] usb 8-1: Product: syz [ 869.576503][ T5804] usb 8-1: Manufacturer: syz [ 869.856542][ T5804] hso 8-1:1.0: Can't find BULK endpoints [ 870.298751][ T191] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 870.378196][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.378264][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.599023][ T191] usb 9-1: USB disconnect, device number 45 [ 871.026949][ T33] audit: type=1326 audit(1791322333.238:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.1793" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4259e199 code=0x0 [ 871.178284][ T5834] usb 8-1: USB disconnect, device number 38 [ 872.251874][T13049] tipc: Cannot configure node identity twice [ 872.697623][T13056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 872.771384][T13056] loop8: detected capacity change from 0 to 128 [ 873.181507][ T191] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 873.277982][T13062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 873.351459][T13067] random: crng reseeded on system resumption [ 873.640543][ T191] usb 5-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 873.791142][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 873.791183][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 873.791224][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.253086][ T5804] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 875.441564][ T5804] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 875.540175][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 875.540306][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 875.540474][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.726936][ T191] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 876.024426][ T191] usb 5-1: USB disconnect, device number 53 [ 876.218925][T13084] loop8: detected capacity change from 0 to 64 [ 876.422894][ T33] audit: type=1800 audit(1791322338.638:87): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1808" name="file1" dev="loop8" ino=21 res=0 errno=-22 [ 876.870254][ T5804] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 876.910751][ T5804] usb 8-1: USB disconnect, device number 39 [ 876.974784][T13082] bond2: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 876.988433][T13082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 877.002007][T13089] tipc: Cannot configure node identity twice [ 877.254989][T13094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 877.933130][T13107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 878.458266][T13104] ptp ptp0: guarantee physical clock free running [ 879.043930][T13123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 879.127758][T13127] random: crng reseeded on system resumption [ 879.292112][ T5834] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 879.521277][ T5834] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 879.565522][ T5834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 879.565579][ T5834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 879.565757][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.196294][ T5834] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 880.298542][T13134] loop7: detected capacity change from 0 to 64 [ 880.371110][T13132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 880.672085][T13132] ip_tables: iptables: counters copy to user failed while replacing table [ 881.072528][T13135] random: crng reseeded on system resumption [ 882.415352][ T5834] usb 9-1: USB disconnect, device number 46 [ 882.572029][T13138] tipc: Cannot configure node identity twice [ 882.853607][T13148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 882.923690][T13148] loop8: detected capacity change from 0 to 128 [ 882.957081][ T5834] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 883.178771][T13150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 883.347051][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.390400][ T5834] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 883.394352][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 883.394384][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 883.394419][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.796374][ T5834] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 883.831445][ T5834] usb 8-1: USB disconnect, device number 40 [ 884.156117][T13168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 884.783896][T13168] random: crng reseeded on system resumption [ 887.328400][T13185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.439354][T13188] random: crng reseeded on system resumption [ 887.603123][ T5804] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 888.111937][ T5804] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 888.298694][ T5804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 888.298734][ T5804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 888.298776][ T5804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.356603][T13193] tipc: Cannot configure node identity twice [ 888.645090][T13200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 888.667914][T13200] loop7: detected capacity change from 0 to 128 [ 888.681572][ T5804] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 888.697623][ T5804] usb 9-1: USB disconnect, device number 47 [ 889.502275][T13216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 889.544264][T13216] ip_tables: iptables: counters copy to user failed while replacing table [ 889.638167][T13219] random: crng reseeded on system resumption [ 889.971396][ T5804] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 890.102166][T13224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.147711][T13224] ip_tables: iptables: counters copy to user failed while replacing table [ 890.451881][ T5804] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 890.577557][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 890.577597][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 890.577636][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.613620][ T5804] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 891.622694][ T5804] usb 8-1: USB disconnect, device number 41 [ 891.747137][T13233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 891.834442][T13234] random: crng reseeded on system resumption [ 893.150068][T13236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 893.478028][T13244] tipc: Cannot configure node identity twice [ 893.661779][ T5834] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 893.750471][T13249] ptp ptp0: guarantee physical clock free running [ 894.036413][ T5834] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 894.264573][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 894.264615][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 894.264686][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.125839][ T5834] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 895.228689][ T5834] usb 8-1: USB disconnect, device number 42 [ 896.438337][T13271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.577015][ T5804] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 896.634171][T13271] ip_tables: iptables: counters copy to user failed while replacing table [ 896.742605][ T5804] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 896.744096][ T5804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 896.744129][ T5804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 896.744177][ T5804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.759324][T13278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 897.284733][T13275] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 897.317612][T13285] random: crng reseeded on system resumption [ 897.601077][T13292] tipc: Cannot configure node identity twice [ 897.728491][T13293] ptp ptp0: guarantee physical clock free running [ 897.798596][ T5804] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 898.058977][ T5804] usb 9-1: USB disconnect, device number 48 [ 904.632333][T13323] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 904.651783][T13323] loop7: detected capacity change from 0 to 128 [ 906.566491][ T5720] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 907.384049][ T5720] usb 5-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 907.390210][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 907.390299][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 907.390441][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.572002][T13336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 907.596143][ T5720] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 907.609755][ T5720] usb 5-1: USB disconnect, device number 54 [ 907.640527][T13336] ip_tables: iptables: counters copy to user failed while replacing table [ 907.741940][T13337] random: crng reseeded on system resumption [ 908.083371][ T33] audit: type=1326 audit(1791322370.298:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.4.1889" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc503d9e199 code=0x0 [ 910.610709][T13354] tipc: Cannot configure node identity twice [ 910.968072][T13358] netlink: 'syz.7.1894': attribute type 2 has an invalid length. [ 915.167209][ T1165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.185201][T13378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.228067][T13381] tipc: Cannot configure node identity twice [ 915.266701][T13382] ip_tables: iptables: counters copy to user failed while replacing table [ 915.450561][T13382] random: crng reseeded on system resumption [ 915.470360][T13382] loop7: detected capacity change from 0 to 128 [ 918.593779][ T33] audit: type=1326 audit(1791322380.808:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.5.1908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x0 [ 922.255308][T13420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 922.945027][T13421] ip_tables: iptables: counters copy to user failed while replacing table [ 923.300535][T13421] random: crng reseeded on system resumption [ 924.925143][T13434] tipc: Cannot configure node identity twice [ 925.261824][ T5720] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 925.474243][ T5720] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 925.477291][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 925.477326][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 925.477383][ T5720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.584244][T13448] ptp ptp0: guarantee physical clock free running [ 926.573079][T13452] db_root: cannot open: /dev/sequencer2 [ 926.573132][T13452] db_root: not a directory: /dev/sequencer2 [ 927.643133][ T5720] pegasus 9-1:1.0: probe with driver pegasus failed with error -32 [ 928.690335][ T191] usb 9-1: USB disconnect, device number 49 [ 931.922343][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.922407][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.325364][T13473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.409221][T13476] random: crng reseeded on system resumption [ 936.488792][T13477] loop8: detected capacity change from 0 to 128 [ 938.078917][T13485] ptp ptp0: guarantee physical clock free running [ 939.372182][T13491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 939.414338][T13491] ip_tables: iptables: counters copy to user failed while replacing table [ 939.583271][T13498] random: crng reseeded on system resumption [ 939.634122][T13498] loop7: detected capacity change from 0 to 128 [ 939.853099][ T5804] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 940.087322][T13499] db_root: cannot open: bridge0 [ 941.495966][ T5804] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 942.605161][ T5804] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 942.605205][ T5804] usb 9-1: can't read configurations, error -71 [ 944.745736][ T191] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 947.533402][ T6135] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 948.540967][ T191] usb 8-1: device descriptor read/all, error -71 [ 949.759298][T13531] fuse: Bad value for 'fd' [ 949.827389][T11028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 949.847313][T11028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 949.848498][T11028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 949.849576][T11028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 949.851289][T11028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.124658][ T5742] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 952.361689][ T5742] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 952.396219][ T5742] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 952.396305][ T5742] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 952.396504][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.572858][ T5720] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 952.742803][ T5720] usb 6-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 952.748585][ T5720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 952.748635][ T5720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 952.748677][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.795554][ T5742] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 952.824284][ T5742] usb 8-1: USB disconnect, device number 45 [ 952.848681][T12450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.848720][T12450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.036927][ T5720] pegasus 6-1:1.0: probe with driver pegasus failed with error -71 [ 953.126748][ T5720] usb 6-1: USB disconnect, device number 51 [ 953.395628][T12450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.395670][T12450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.482717][ T4927] Bluetooth: hci5: command tx timeout [ 953.847790][T13560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 953.880758][T12450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.880798][T12450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.892534][T13562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 953.952777][T13560] ip_tables: iptables: counters copy to user failed while replacing table [ 954.040726][T13563] random: crng reseeded on system resumption [ 954.135352][T13563] loop8: detected capacity change from 0 to 128 [ 956.236099][ T4927] Bluetooth: hci5: command tx timeout [ 956.994901][T12450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.994943][T12450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.308483][T11028] Bluetooth: hci5: command tx timeout [ 959.668968][T13532] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.669106][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.669619][T13532] bridge_slave_0: entered allmulticast mode [ 959.894135][T13532] bridge_slave_0: entered promiscuous mode [ 959.910582][T13532] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.920769][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.920973][T13532] bridge_slave_1: entered allmulticast mode [ 959.948047][T13532] bridge_slave_1: entered promiscuous mode [ 961.108012][T11028] Bluetooth: hci5: command tx timeout [ 962.910810][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.927738][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.994795][T13597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 963.042445][T13597] ip_tables: iptables: counters copy to user failed while replacing table [ 963.104206][T13600] random: crng reseeded on system resumption [ 963.676768][T13505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.606192][T13532] team0: Port device team_slave_0 added [ 964.629176][T13532] team0: Port device team_slave_1 added [ 964.869508][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.869526][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.869548][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.881150][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.881168][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.881192][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.111305][T13616] db_root: cannot open: /dev/sequencer2 [ 965.111381][T13616] db_root: not a directory: /dev/sequencer2 [ 967.719381][T12450] bridge_slave_1: left allmulticast mode [ 967.719413][T12450] bridge_slave_1: left promiscuous mode [ 967.719676][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.770125][T12450] bridge_slave_0: left allmulticast mode [ 967.770148][T12450] bridge_slave_0: left promiscuous mode [ 967.770303][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.232979][T12450] pim6reg: left allmulticast mode [ 974.219218][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.255575][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.257848][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.280789][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.297735][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 976.527322][T13593] Bluetooth: hci3: command tx timeout [ 977.263901][T12450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.290946][T12450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.307866][T12450] bond0 (unregistering): Released all slaves [ 977.329635][T13665] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 977.339760][T12450] bond1 (unregistering): Released all slaves [ 977.358442][T12450] bond2 (unregistering): Released all slaves [ 977.433176][T12450] bond3 (unregistering): Released all slaves [ 977.435889][T13666] random: crng reseeded on system resumption [ 977.652790][T12450] bond4 (unregistering): Released all slaves [ 977.950922][T12450] bond5 (unregistering): Released all slaves [ 978.395256][T13532] hsr_slave_0: entered promiscuous mode [ 978.450449][T13532] hsr_slave_1: entered promiscuous mode [ 978.468361][T13532] debugfs: 'hsr0' already exists in 'hsr' [ 978.468389][T13532] Cannot create hsr debugfs directory [ 978.604675][T13593] Bluetooth: hci3: command tx timeout [ 978.667450][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 978.791230][T12450] tipc: Left network mode [ 978.967884][T13675] tipc: Cannot configure node identity twice [ 980.444627][T13502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 980.847852][T13593] Bluetooth: hci3: command tx timeout [ 982.926234][T13593] Bluetooth: hci3: command tx timeout [ 983.305573][T13711] ptp ptp0: guarantee physical clock free running [ 984.904672][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 988.443728][T13732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 988.459131][T13732] loop8: detected capacity change from 0 to 128 [ 988.764694][T13532] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 988.769362][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.870759][T13532] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 988.896985][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.914423][T12450] hsr_slave_0: left promiscuous mode [ 988.916521][T12450] hsr_slave_1: left promiscuous mode [ 988.918896][T12450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.918950][T12450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.921089][T12450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.921110][T12450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.990862][T12450] veth1_macvtap: left promiscuous mode [ 988.990905][T12450] veth0_macvtap: left promiscuous mode [ 988.991063][T12450] veth1_vlan: left promiscuous mode [ 988.991143][T12450] veth0_vlan: left promiscuous mode [ 989.382767][T13738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 989.466763][T13738] ip_tables: iptables: counters copy to user failed while replacing table [ 989.517394][T13738] random: crng reseeded on system resumption [ 990.437334][T12450] team0 (unregistering): Port device team_slave_1 removed [ 990.460311][T12450] team0 (unregistering): Port device team_slave_0 removed [ 990.652224][T13532] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 990.655369][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 990.659691][T13744] tipc: Cannot configure node identity twice [ 990.665130][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20 [ 990.692843][T13532] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 990.699831][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.884623][ T5834] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 991.050224][ T5834] usb 6-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 991.056124][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 991.056157][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 991.056194][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.236178][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.339082][T13532] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.352263][ T5720] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 991.393417][ T5834] pegasus 6-1:1.0: probe with driver pegasus failed with error -71 [ 991.417849][ T5834] usb 6-1: USB disconnect, device number 52 [ 991.425760][T13788] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 991.504125][ T5720] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 991.505360][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 991.505393][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 991.505452][ T5720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.507479][T12450] IPVS: stop unused estimator thread 0... [ 991.597997][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.598124][T12796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.668556][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.668668][T12796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.701510][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.709377][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.709572][T13648] bridge_slave_0: entered allmulticast mode [ 991.729479][T13648] bridge_slave_0: entered promiscuous mode [ 991.739578][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.743335][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.743610][T13648] bridge_slave_1: entered allmulticast mode [ 991.750919][T13648] bridge_slave_1: entered promiscuous mode [ 991.805357][ T5720] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 991.854670][ T5720] usb 9-1: USB disconnect, device number 52 [ 993.282717][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.282810][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.920792][T12450] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.699282][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.731342][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.854436][T13808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 994.924484][T13808] ip_tables: iptables: counters copy to user failed while replacing table [ 995.008448][T13810] loop8: detected capacity change from 0 to 64 [ 995.125172][T13811] random: crng reseeded on system resumption [ 995.386067][ T33] audit: type=1800 audit(1791322457.568:90): pid=13810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1992" name="file1" dev="loop8" ino=21 res=0 errno=-22 [ 995.562291][T13810] db_root: cannot open: /dev/sequencer2 [ 995.563174][T13810] db_root: not a directory: /dev/sequencer2 [ 996.594238][T12450] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.709831][T13819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.771215][ T5273] 8021q: adding VLAN 0 to HW filter on device eth21 [ 996.777608][T13648] team0: Port device team_slave_0 added [ 996.822741][T13648] team0: Port device team_slave_1 added [ 996.823452][T13825] tipc: Cannot configure node identity twice [ 997.063467][T13827] ptp ptp0: guarantee physical clock free running [ 998.357440][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.357545][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.357587][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.625889][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.625911][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.625940][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.779798][T12450] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.431062][T13648] hsr_slave_0: entered promiscuous mode [ 999.463548][T13648] hsr_slave_1: entered promiscuous mode [ 999.491894][T13648] debugfs: 'hsr0' already exists in 'hsr' [ 999.492119][T13648] Cannot create hsr debugfs directory [ 1001.048036][T12450] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.116008][T13852] loop8: detected capacity change from 0 to 64 [ 1001.239567][ T33] audit: type=1800 audit(1791322463.448:91): pid=13852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2002" name="file1" dev="loop8" ino=21 res=0 errno=-22 [ 1001.349263][T13854] db_root: cannot open: /dev/sequencer2 [ 1001.349276][T13854] db_root: not a directory: /dev/sequencer2 [ 1002.105769][T13850] tipc: Cannot configure node identity twice [ 1002.602227][ T5834] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1002.755014][ T5834] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 1002.760202][ T5834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1002.760240][ T5834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1002.760286][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.916609][T13873] db_root: cannot open: /dev/sequencer2 [ 1002.916671][T13873] db_root: not a directory: /dev/sequencer2 [ 1004.073711][ T5834] pegasus 9-1:1.0: probe with driver pegasus failed with error -71 [ 1004.138445][ T5834] usb 9-1: USB disconnect, device number 53 [ 1004.435348][T13883] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1004.507749][T12450] bridge_slave_1: left allmulticast mode [ 1004.507778][T12450] bridge_slave_1: left promiscuous mode [ 1004.507950][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.513114][T13883] ip_tables: iptables: counters copy to user failed while replacing table [ 1004.555758][T12450] bridge_slave_0: left allmulticast mode [ 1004.555789][T12450] bridge_slave_0: left promiscuous mode [ 1004.556957][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.620197][T12450] tipc: Resetting bearer [ 1004.687348][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1004.707385][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1004.709951][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1004.719679][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1004.735548][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1005.049560][T13863] loop8: detected capacity change from 0 to 32768 [ 1005.115491][T13863] JBD2: Ignoring recovery information on journal [ 1005.184195][T13863] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1005.408961][T12450] tipc: Disabling bearer [ 1005.601135][T12450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.617631][T12450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.636040][T12450] bond0 (unregistering): Released all slaves [ 1005.651093][T12450] bond1 (unregistering): Released all slaves [ 1005.696513][T13903] FAULT_INJECTION: forcing a failure. [ 1005.696513][T13903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.696548][T13903] CPU: 0 UID: 0 PID: 13903 Comm: syz.5.2015 Not tainted syzkaller #0 PREEMPT(full) [ 1005.696572][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1005.696585][T13903] Call Trace: [ 1005.696594][T13903] [ 1005.696604][T13903] dump_stack_lvl+0xe8/0x150 [ 1005.696636][T13903] should_fail_ex+0x3eb/0x540 [ 1005.696667][T13903] _copy_to_user+0x31/0xb0 [ 1005.696691][T13903] io_query+0x305/0x6d0 [ 1005.696721][T13903] ? __pfx_io_query+0x10/0x10 [ 1005.696760][T13903] ? __pfx_do_futex+0x10/0x10 [ 1005.696780][T13903] ? __fget_files+0x3a2/0x420 [ 1005.696807][T13903] __se_sys_io_uring_register+0x424/0x1aa0 [ 1005.696834][T13903] ? __se_sys_futex+0x3a8/0x450 [ 1005.696856][T13903] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1005.696887][T13903] ? rcu_is_watching+0x16/0xb0 [ 1005.696927][T13903] do_syscall_64+0x166/0x520 [ 1005.696949][T13903] ? trace_irq_disable+0x3b/0x140 [ 1005.696969][T13903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.696991][T13903] ? clear_bhb_loop+0x70/0xc0 [ 1005.697016][T13903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.697040][T13903] RIP: 0033:0x7fb240d9e199 [ 1005.697061][T13903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.697082][T13903] RSP: 002b:00007fb241bce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1005.697107][T13903] RAX: ffffffffffffffda RBX: 00007fb241025fa0 RCX: 00007fb240d9e199 [ 1005.697123][T13903] RDX: 0000200000000f40 RSI: 0000000000000023 RDI: ffffffffffffffff [ 1005.697139][T13903] RBP: 00007fb240e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.697154][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.697169][T13903] R13: 00007fb241026038 R14: 00007fb241025fa0 R15: 00007ffd0be1c9b8 [ 1005.697204][T13903] [ 1006.116492][T12450] tipc: Left network mode [ 1006.320538][ T9184] ocfs2: Unmounting device (7,8) on (node local) [ 1006.845737][ T4927] Bluetooth: hci0: command tx timeout [ 1007.088302][T13940] FAULT_INJECTION: forcing a failure. [ 1007.088302][T13940] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.088337][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.5.2022 Not tainted syzkaller #0 PREEMPT(full) [ 1007.088360][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1007.088386][T13940] Call Trace: [ 1007.088394][T13940] [ 1007.088403][T13940] dump_stack_lvl+0xe8/0x150 [ 1007.088431][T13940] should_fail_ex+0x3eb/0x540 [ 1007.088458][T13940] should_failslab+0xa8/0x100 [ 1007.088479][T13940] __kmalloc_cache_noprof+0x9e/0x600 [ 1007.088499][T13940] ? __get_filter+0x220/0x420 [ 1007.088517][T13940] ? __get_filter+0x220/0x420 [ 1007.088541][T13940] __get_filter+0x220/0x420 [ 1007.088565][T13940] sk_attach_filter+0x24/0x140 [ 1007.088588][T13940] sk_setsockopt+0x2646/0x2f20 [ 1007.088616][T13940] ? __pfx_sk_setsockopt+0x10/0x10 [ 1007.088635][T13940] ? __lock_acquire+0x747/0x2de0 [ 1007.088656][T13940] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 1007.088693][T13940] ? do_futex+0x3e7/0x4e0 [ 1007.088719][T13940] ? lock_acquire+0x115/0x350 [ 1007.088745][T13940] unix_setsockopt+0x15f/0x340 [ 1007.088770][T13940] ? __pfx_unix_setsockopt+0x10/0x10 [ 1007.088796][T13940] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1007.088814][T13940] ? __pfx_unix_setsockopt+0x10/0x10 [ 1007.088836][T13940] do_sock_setsockopt+0x17c/0x1b0 [ 1007.088863][T13940] __x64_sys_setsockopt+0x13d/0x1b0 [ 1007.088888][T13940] do_syscall_64+0x166/0x520 [ 1007.088907][T13940] ? trace_irq_disable+0x3b/0x140 [ 1007.088925][T13940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.088946][T13940] ? clear_bhb_loop+0x70/0xc0 [ 1007.088969][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.088988][T13940] RIP: 0033:0x7fb240d9e199 [ 1007.089008][T13940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.089025][T13940] RSP: 002b:00007fb241bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1007.089048][T13940] RAX: ffffffffffffffda RBX: 00007fb241025fa0 RCX: 00007fb240d9e199 [ 1007.089063][T13940] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 1007.089075][T13940] RBP: 00007fb240e358e0 R08: 0000000000000010 R09: 0000000000000000 [ 1007.089088][T13940] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1007.089101][T13940] R13: 00007fb241026038 R14: 00007fb241025fa0 R15: 00007ffd0be1c9b8 [ 1007.089133][T13940] [ 1007.368082][T12450] hsr_slave_0: left promiscuous mode [ 1007.370531][T12450] hsr_slave_1: left promiscuous mode [ 1007.371540][T12450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.375373][T12450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.401437][T12450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.401462][T12450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.468919][T12450] veth1_macvtap: left promiscuous mode [ 1007.468963][T12450] veth0_macvtap: left promiscuous mode [ 1007.469073][T12450] veth1_vlan: left promiscuous mode [ 1007.469187][T12450] veth0_vlan: left promiscuous mode [ 1008.099946][T12450] team0 (unregistering): Port device team_slave_1 removed [ 1008.113117][T12450] team0 (unregistering): Port device team_slave_0 removed [ 1008.144361][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2030'. [ 1008.195805][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2030'. [ 1008.258719][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1008.397023][T13966] bond3: entered allmulticast mode [ 1008.429190][T13967] bridge1: entered allmulticast mode [ 1008.430023][T13967] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1008.792981][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 1008.912644][T13987] x_tables: duplicate underflow at hook 3 [ 1008.922534][ T4927] Bluetooth: hci0: command tx timeout [ 1009.246407][T13648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1009.280882][T13648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.334108][T13648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1009.361501][T13648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.370361][T13648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1009.393664][T13648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1009.439578][T13648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1009.453902][T13648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.097154][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2043'. [ 1010.409827][ T33] audit: type=1107 audit(1791322472.618:92): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 1010.519441][T14030] loop8: detected capacity change from 0 to 128 [ 1010.812036][T14036] FAULT_INJECTION: forcing a failure. [ 1010.812036][T14036] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.812071][T14036] CPU: 1 UID: 0 PID: 14036 Comm: syz.5.2048 Not tainted syzkaller #0 PREEMPT(full) [ 1010.812097][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1010.812111][T14036] Call Trace: [ 1010.812120][T14036] [ 1010.812129][T14036] dump_stack_lvl+0xe8/0x150 [ 1010.812160][T14036] should_fail_ex+0x3eb/0x540 [ 1010.812189][T14036] should_failslab+0xa8/0x100 [ 1010.812214][T14036] __kmalloc_cache_noprof+0x9e/0x600 [ 1010.812237][T14036] ? __kmalloc_cache_noprof+0x148/0x600 [ 1010.812257][T14036] ? kvm_dev_ioctl+0xa86/0x1700 [ 1010.812277][T14036] ? kvm_dev_ioctl+0xa86/0x1700 [ 1010.812307][T14036] kvm_dev_ioctl+0xa86/0x1700 [ 1010.812336][T14036] ? __fget_files+0x2a/0x420 [ 1010.812359][T14036] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1010.812384][T14036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1010.812406][T14036] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1010.812428][T14036] __se_sys_ioctl+0xfc/0x170 [ 1010.812453][T14036] do_syscall_64+0x166/0x520 [ 1010.812474][T14036] ? trace_irq_disable+0x3b/0x140 [ 1010.812494][T14036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.812516][T14036] ? clear_bhb_loop+0x70/0xc0 [ 1010.812540][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.812563][T14036] RIP: 0033:0x7fb240d9e199 [ 1010.812585][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.812603][T14036] RSP: 002b:00007fb241bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.812627][T14036] RAX: ffffffffffffffda RBX: 00007fb241025fa0 RCX: 00007fb240d9e199 [ 1010.812644][T14036] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1010.812658][T14036] RBP: 00007fb240e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.812673][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.812686][T14036] R13: 00007fb241026038 R14: 00007fb241025fa0 R15: 00007ffd0be1c9b8 [ 1010.812722][T14036] [ 1010.874868][T14040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2049'. [ 1011.008579][ T4927] Bluetooth: hci0: command tx timeout [ 1011.110733][ T5273] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1011.228585][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.228785][T14047] ip_tables: iptables: counters copy to user failed while replacing table [ 1011.230406][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.239012][T13884] bridge_slave_0: entered allmulticast mode [ 1011.247388][T13884] bridge_slave_0: entered promiscuous mode [ 1011.278537][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.278664][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.278827][T13884] bridge_slave_1: entered allmulticast mode [ 1011.296158][T13884] bridge_slave_1: entered promiscuous mode [ 1011.499023][T13884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.515001][T13884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.638048][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.709626][T13884] team0: Port device team_slave_0 added [ 1011.937570][T13884] team0: Port device team_slave_1 added [ 1012.145615][T14075] bridge0: port 3(syz_tun) entered blocking state [ 1012.147701][T14075] bridge0: port 3(syz_tun) entered forwarding state [ 1012.150860][T14075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.151006][T14075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.151295][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.151446][T14075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.202508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.258940][T13884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.258960][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.258987][T13884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.343254][T13884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.343275][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.343304][T13884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.384729][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.487241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.582648][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.582771][T12796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.619974][T14092] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1012.670163][T12450] bridge_slave_1: left allmulticast mode [ 1012.670194][T12450] bridge_slave_1: left promiscuous mode [ 1012.670458][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.700699][T12450] bridge_slave_0: left allmulticast mode [ 1012.700728][T12450] bridge_slave_0: left promiscuous mode [ 1012.702770][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.075524][T14107] fuse: fd is not a fuse device [ 1013.094156][ T4927] Bluetooth: hci0: command tx timeout [ 1013.227628][T12450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.230647][T12450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.244374][T12450] bond0 (unregistering): Released all slaves [ 1013.299142][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.299266][T12796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.402914][T14109] bond1: entered allmulticast mode [ 1013.403415][T14109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.428018][T14113] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1013.440522][T14113] bond1: (slave macvlan2): making interface the new active one [ 1013.440551][T14113] macvlan2: entered allmulticast mode [ 1013.440564][T14113] bond0: entered allmulticast mode [ 1013.440577][T14113] bond_slave_0: entered allmulticast mode [ 1013.450721][T14113] bond_slave_1: entered allmulticast mode [ 1013.450896][T14113] bond_slave_0: entered promiscuous mode [ 1013.450936][T14113] bond_slave_1: entered promiscuous mode [ 1013.458562][T14113] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1013.572860][T13884] hsr_slave_0: entered promiscuous mode [ 1013.577662][T13884] hsr_slave_1: entered promiscuous mode [ 1013.632874][T12450] hsr_slave_0: left promiscuous mode [ 1013.637135][T12450] hsr_slave_1: left promiscuous mode [ 1013.638111][T12450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.640677][T12450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.744150][T14129] overlayfs: failed to clone upperpath [ 1013.826834][T14134] loop8: detected capacity change from 0 to 128 [ 1013.832098][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1013.860565][T14132] overlayfs: failed to clone upperpath [ 1014.156943][T14140] FAULT_INJECTION: forcing a failure. [ 1014.156943][T14140] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.156977][T14140] CPU: 1 UID: 0 PID: 14140 Comm: syz.8.2080 Not tainted syzkaller #0 PREEMPT(full) [ 1014.157002][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1014.157014][T14140] Call Trace: [ 1014.157021][T14140] [ 1014.157031][T14140] dump_stack_lvl+0xe8/0x150 [ 1014.157060][T14140] should_fail_ex+0x3eb/0x540 [ 1014.157086][T14140] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1014.157107][T14140] should_failslab+0xa8/0x100 [ 1014.157130][T14140] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1014.157148][T14140] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1014.157173][T14140] ? mqueue_alloc_inode+0x28/0x40 [ 1014.157191][T14140] ? mqueue_alloc_inode+0x28/0x40 [ 1014.157216][T14140] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1014.157235][T14140] mqueue_alloc_inode+0x28/0x40 [ 1014.157254][T14140] alloc_inode+0x6a/0x1b0 [ 1014.157274][T14140] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1014.157295][T14140] new_inode+0x1f/0x170 [ 1014.157315][T14140] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1014.157338][T14140] mqueue_fill_super+0xdb/0x360 [ 1014.157358][T14140] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1014.157389][T14140] get_tree_nodev+0xbb/0x150 [ 1014.157413][T14140] vfs_get_tree+0x92/0x2a0 [ 1014.157437][T14140] fc_mount_longterm+0x1c/0x100 [ 1014.157460][T14140] mq_init_ns+0x508/0x770 [ 1014.157484][T14140] copy_ipcs+0x460/0x6c0 [ 1014.157510][T14140] create_new_namespaces+0x210/0x6b0 [ 1014.157535][T14140] ? security_capable+0x7e/0x2c0 [ 1014.157565][T14140] unshare_nsproxy_namespaces+0x144/0x190 [ 1014.157591][T14140] ksys_unshare+0x532/0x890 [ 1014.157616][T14140] ? __pfx_ksys_unshare+0x10/0x10 [ 1014.157639][T14140] ? rcu_is_watching+0x16/0xb0 [ 1014.157673][T14140] __x64_sys_unshare+0x38/0x50 [ 1014.157694][T14140] do_syscall_64+0x166/0x520 [ 1014.157715][T14140] ? trace_irq_disable+0x3b/0x140 [ 1014.157732][T14140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.157754][T14140] ? clear_bhb_loop+0x70/0xc0 [ 1014.157779][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.157801][T14140] RIP: 0033:0x7f1578f9e199 [ 1014.157822][T14140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.157841][T14140] RSP: 002b:00007f1579e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1014.157865][T14140] RAX: ffffffffffffffda RBX: 00007f1579225fa0 RCX: 00007f1578f9e199 [ 1014.157880][T14140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 1014.157894][T14140] RBP: 00007f15790358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1014.157908][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.157920][T14140] R13: 00007f1579226038 R14: 00007f1579225fa0 R15: 00007fffbec94c48 [ 1014.157957][T14140] [ 1014.271256][T14144] fuse: fd is not a fuse device [ 1014.525197][T14149] loop8: detected capacity change from 0 to 8192 [ 1014.540180][T14149] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1014.582542][T14149] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1014.582573][T14149] FAT-fs (loop8): Filesystem has been set read-only [ 1014.824544][T12450] team0 (unregistering): Port device team_slave_1 removed [ 1014.865675][T12450] team0 (unregistering): Port device team_slave_0 removed [ 1015.049353][T14167] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2090'. [ 1015.378558][T14167] bond2: option miimon: invalid value (18446744073709551615) [ 1015.379311][T14167] bond2: option miimon: allowed values 0 - 2147483647 [ 1015.407146][T14167] bond2 (unregistering): Released all slaves [ 1016.386242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1016.387324][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1017.942236][T13884] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1017.959541][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.965351][T13884] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1017.994685][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.995735][T13884] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1018.029826][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.058200][T13884] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1018.088256][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.105936][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.418786][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1018.461183][T13648] veth0_vlan: entered promiscuous mode [ 1018.510934][T13648] veth1_vlan: entered promiscuous mode [ 1018.669696][T13884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.807447][T14253] ip_tables: iptables: counters copy to user failed while replacing table [ 1018.829354][T13648] veth0_macvtap: entered promiscuous mode [ 1018.867553][T13648] veth1_macvtap: entered promiscuous mode [ 1018.899371][T13884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.933249][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.933407][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.967236][T12450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.967351][T12450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.986898][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.059671][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.232425][ T6133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.234774][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.234824][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.234861][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.714279][T12450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.714305][T12450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.874134][ T5273] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1019.933132][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.933159][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.180068][T13884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.835715][T14327] Invalid ELF header magic: != ELF [ 1022.077969][T13884] veth0_vlan: entered promiscuous mode [ 1022.108730][T13884] veth1_vlan: entered promiscuous mode [ 1022.248868][T13884] veth0_macvtap: entered promiscuous mode [ 1022.276314][T13884] veth1_macvtap: entered promiscuous mode [ 1022.392261][T13884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.450793][T13884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.678538][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.678592][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.678629][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.701640][ T6135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.867897][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.867924][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.096387][T14355] overlayfs: upper fs does not support tmpfile. [ 1023.113842][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.113865][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.769181][T14376] fuse: Bad value for 'fd' [ 1024.388061][T14391] FAULT_INJECTION: forcing a failure. [ 1024.388061][T14391] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.388096][T14391] CPU: 1 UID: 0 PID: 14391 Comm: syz.8.2135 Not tainted syzkaller #0 PREEMPT(full) [ 1024.388123][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.388137][T14391] Call Trace: [ 1024.388146][T14391] [ 1024.388155][T14391] dump_stack_lvl+0xe8/0x150 [ 1024.388191][T14391] should_fail_ex+0x3eb/0x540 [ 1024.388227][T14391] should_failslab+0xa8/0x100 [ 1024.388249][T14391] ? security_inode_alloc+0x39/0x310 [ 1024.388272][T14391] kmem_cache_alloc_noprof+0x9c/0x600 [ 1024.388293][T14391] ? make_kgid+0x1d1/0x6a0 [ 1024.388316][T14391] ? security_inode_alloc+0x39/0x310 [ 1024.388346][T14391] security_inode_alloc+0x39/0x310 [ 1024.388371][T14391] inode_init_always_gfp+0x97e/0xd30 [ 1024.388401][T14391] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1024.388422][T14391] alloc_inode+0x82/0x1b0 [ 1024.388446][T14391] new_inode+0x1f/0x170 [ 1024.388471][T14391] debugfs_create_dir+0x68/0x350 [ 1024.388497][T14391] kvm_create_vm_debugfs+0x1f0/0x8f0 [ 1024.388520][T14391] ? policy_nodemask+0x2cc/0x8e0 [ 1024.388550][T14391] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 1024.388589][T14391] kvm_dev_ioctl+0x1245/0x1700 [ 1024.388623][T14391] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1024.388651][T14391] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1024.388674][T14391] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1024.388696][T14391] __se_sys_ioctl+0xfc/0x170 [ 1024.388720][T14391] do_syscall_64+0x166/0x520 [ 1024.388740][T14391] ? trace_irq_disable+0x3b/0x140 [ 1024.388759][T14391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.388782][T14391] ? clear_bhb_loop+0x70/0xc0 [ 1024.388806][T14391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.388828][T14391] RIP: 0033:0x7f1578f9e199 [ 1024.388850][T14391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.388869][T14391] RSP: 002b:00007f1579e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.388895][T14391] RAX: ffffffffffffffda RBX: 00007f1579225fa0 RCX: 00007f1578f9e199 [ 1024.388911][T14391] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1024.388925][T14391] RBP: 00007f15790358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.388938][T14391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.388952][T14391] R13: 00007f1579226038 R14: 00007f1579225fa0 R15: 00007fffbec94c48 [ 1024.388988][T14391] [ 1024.419224][T14391] debugfs: out of free dentries, can not create directory '14391-6' [ 1024.791160][T14400] loop0: detected capacity change from 0 to 256 [ 1024.828416][T14400] FAT-fs (loop0): data area starts beyond volume (32 > 0) [ 1024.828447][T14400] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1025.340111][T14413] loop0: detected capacity change from 0 to 1764 [ 1025.720405][T14424] loop8: detected capacity change from 0 to 512 [ 1025.782256][T14424] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1025.782291][T14424] FAT-fs (loop8): Filesystem has been set read-only PÚÿÿÿ-D ì¿TiÛw UE´±påÖèì‹ùΛS¸2é på*÷™ŸÕ W~­âx‘­¨VAgòÇÒî¡ÁÉÆ]ŽXÝîCì4çM3Å »²»!‰,|©•n<¾¨¦”ÜkÎõóÀïcwM .¥†'óàœf©ÇÑ«ÏOŠøBiß(ŠÊ›¿u‚uΖ•%nvMZ‘§WÊ:«Ç^ÊÿkÚ72&ÖìnUÅÄØÏÅÃ8’ºÌ•j6¼ú„¡µàp§‘tˆ³æ(Ù3—è¸!ñ»]\Eð1kµcФB€ßÕ¤Ö¦WàMf†÷Õ†=W•D®îŽy¾<Ä˳Թißœ=5Cå¹ +Ün¶ ǯ«{Q‡Ø½væ!.¢ž‡+sù%({Ü€‹JOŽÇøª¼²ž!|>ïiØÞ®AAôù½ {Þ“ ç´_B.ša¼¯™É‘FâÓº´w’kÕÒçLÐì¡3Â2±ècýw™Ûö óg 2>Uèô½6é³Ú,h¢Ž®ÉÊƈ´Ý s­ÂJŒzÌ&C™·úËÂô>Ž@¶ÊéøéVÑÛþ%ŸºçZÓbÃTýÖéTò×a_¯Îˆ‹Öör¨ŸÔ1Œ«§eœ B^‰‹÷awðþaÂ}1YÛ¤/$ldU}'·zï’Š°J{¬£xcÏ™Š*à <DÛ!ˆ‡Ã ìq„ÈÇ3õÔç²×•éSš[ìø)MlÍw([”0iÆÆlªbºÆy¼›i‚S˜ÑÂ×eè‚ú,‡² ÎÈ…«g…Ü"ikaÁ ÿ„¼T“,>[ñ i¦‹Ž33¢m=Óï›À†?¼µÂŠM+€„ñP/ÌÄzL6)Øô¨¾ýµ—ν¥ùO6 1¹P‡Ë¬4wˆ§è!‡úæªBqœÂ…œ³ àýX§»¦÷¦zX0qÞòÉ©DVåÙ¬¹ý-ýêRE‚Hœ7{÷õ”‰…Çi³‚,¶6fבƦÇRòG\«§{{.)=Ù¹‘ö>%L˜ÞÉOO=ïOîœÛVÿ;§þjqŒ¾šq%~¨¤f&`Hü-O1sÔ°K>(+ÓÅËrì8à°}Ø¥A²€~`Z ðz(&e—pˆ¥E—ïЙ|Ydzî»&¨—îÿ>Ç€ãâK# ËäøgÃñT_2"뎀&g8‘Cj¹G|›Xë\v¡›‹&’°ÓV?®TßÈ ØãWì¿‘û~!,¾ñ&!q«¯/a:[µ›x<­GoìPÑl ¬ÀŠY£ ~n?Þp K˜}1Â-J¢•lØYyŸxL%·‡j¢Sß”÷ã°(uS|p±KÛž-‡¥¡AJ˜S<}æüM""3¼&±Ÿv'±LrãÃ?¢jBå gÜ1/”Ç QG^Ôª€²Ì°Uz@B+÷1}âýó)g'r:-#º½^#÷Ãíô”+´…¹Z.jºA¸øhO„`TbDZOÖmþ›¿€Y ™™´xOOš ô@ )uß…µ„ÈÈùú0•ñ:íáõ-¬˜¾5‹ r¾ÔßqÍ#—>2ayXhÄåѾK*âáâÛ©™ª`ˆ¯Èý:âb¨˜ˆ+gØmcöîŽ!c73¶Ù(úÏ ¢s„^å³: jëH·Å-;•þsï¯~Èu>à4ŸÛ‡0‘}¢Þ–Ó¸‡¼X?öMþæ~+ßM\ÁÃA¸šÍ=Õm,ì*w ŠIY¤8®6Å(EåÜ¥På9Ú›¢¢í¤›ãóÖÔ·È6f½GY”GÂíÒs­¬r&0©@á1kHU=íG+äãP`ZMÕh%²E·ªèSõoyàì1÷µÛ”^ã»’†Zˈ(YŽwDnåÍ‹õç̽–4E ž;âp› ;ÿ.æT™$3#kOùsh..ûö±gã³ øÃóÁèÐâq“|‘Œ««PÝtÀ¡¥SüøŠ]õúXñw÷dz¦M«o ¥–(‰i íqÚ̺çÁ숿t^KÓóØÄó`ò?ýøÛ@¬qSý“2zeÏ,EȺŸ“‘ëj¦ËB¯øy>G!¯ë=G í¤]­šßÆôý²N¯Æ7’õ\el£|î‚·î8+Ú1׆Öà=L†ÄÊFN#`ÊtxÉî½8Èü}^ê-¹k)×q©mÅÈ„w[Ì1˜dU]!ìÎ]ˆá¼aŒ}û1°+g0Û~Ú8}Ôιoe‹°ˆè3åosÄXøA9h^ù0”ZQ—Ÿ®«SžId$G ܸ³W]:>Á2Šö_³BAÛ|³% ŠàÛÄFpÒµÌ:…ØÒÀRVï+îã²ؼàSå\áû+²æ]HŠâD„° .4?ÃTL¥F@fˆ-¶âœì©SžÀ•¢¢ÏÅõ#uü–]áèÓ2"3WÛÊÅù €)ÆM±Ì•ŸwQW¥d` Šü%>^ÍP½v›E B–Ê è¶;óÓµسöÔBjÀ”M ßöTÅqŠ±þðcʺ4›æè»xPÝ4°Á’‘ZÞë@ú­%¨ù¦*Ïa¹D¢qÒgóPÍî"×n<Å–k§BÙÄ8#¯ºtÆ ß _N~&¯r$wt¡ø® ù)niÿ³Ä ©þÑ=&p¹èe¡UBnÕÈ6HÀ­4äoS´UàƒW0þR–h¶óõ+SM¼ð÷B5•Pæ˜ É—„U­³Þ)*ñ*7E>ZIêþ˜ü&ä*lAó€D†·Éb‘ù¦»×ã,$šI¨b¤¡Î\9Öm5ÆílyD |.$ÔŽèqdÀ( jûS“ÓÖÈÃÀb¬FÑIORÄ\£o¯”‰Nìqá¾lrVô®èÜV²†#È!ï&ëð¤2bBX’páBVtÈ%è(⽚äÓIYÛH1Tÿ硵Šè÷6ºîŽ&àçá·ñ%øÍ™xˆ%ïÐ8ì˜y Õ+ ÓlÇ Ÿ’i¬‡²úDÒEfaÓm‰<ùƚ沸= xml3߆{q%z·N$N>»¬DPiAâä@£„áoîߎ1egng†d0ëjŠS4bŒ,Ú°2‹°Å0ˆcSùRAÏO;dzOøÇLKïÜpûý¿†‹Ìe 4µ¿¨1ñ¶†r@FÜÑzÉ΃qžÇF]ÉÕ¼é6v¥Ž÷Úãr!Che­4¬/Ö‘ã³á*îg6ÛÞì›üíø¹ÎÕG%š@G¾‹Ký¦/ˆM %‟¹ñY ¼³1Ê

¿­_GàÐtáÀË6vìgw”ò<6˜½5‡WòBãü“›Ãf—#óÿá‰Ú½ôë¾Ðsê¹RÈžî"# ÇrMrf±W& °‰ŒÝ'N>VУVk]EbIéé.„ãŸaÀìß™ì,Ò0D ý!Ïhòsb5êG6wuó  9Y³Iãg@aü¶GzÓŸwxxºÝ)’|XùZëÞ_í(í4%PgŽÓ*÷4±¤:!õø »§•õª PRb õ°Úd!¤+|‚€J ¦ïmG«÷oFSƒ'ùCGmš?Å1#=o“ØÜ'ôtW5_’­ö=a{7?º$ò‰W枸¡-6èêì"bú«­û‚KÕü0š,t••…k[‰ º"¼W‡é;£¹«¦ÜòopvÀÂâqd5ê%ýIÙliÔû‹¸sÒËÇQF®Ñ&Ÿ`F#9Íèƒ SY ¾=¿>¬àñê”i¹Zdû×å~¸€ÔB,¿—ÏÃ÷QÔ’5€Ê!óEÏ$¦d™ÎÿÒãÄýtÏD†8–)W´ ðÒÁeÁ?þz¡Ýš ,Ôlò³SÝ-,§¸§®ŽÚዺ&›¿þÐÇÔIzîM ‰lö2vÌê ¾ùTÑ£dLðò¸„0= C®’Åb²þµçÁáZ™ûÝe_¸ö»Ã«Y¿²îÅ·éD6•~Åïóü6ίáC9=v£×5Ïæɶ2å-¾dÜe–Š'îŸvÀ­ÙàXGMvx!O[dÉ27¾ükvfñ×ä•W;š>œü°ÿïzÅ|5aºÛúAÁåA ¢6Mæ`™ÍóÞÑW”·(áDNýoúWÙT‰Èß‘ûÀW¶mÖÙó ókÉŸ Tí™}Ñ`‹ÎGõÿ¢Q„ªÍ9ã1Øÿ=ú|-~fzi$œ´€;#÷í)Æ›£Ò¡¸ˆ!ÿïÅ‚VPÅ;cdóŽ ƒõÒSuB<ΫÈáÄåVk£ù±v¸XȆ@ÿŽ½ÞrV@Òßö¹ ¶Ÿ‡U°ÿvkAͤÃ>âÇ;W™ /UÞs—(³P0+dß,ãêòàÆV ¶ '¬I0v0^—í ô/@²¼»¤«â[“ oUy ]ÿii¾‚NeÝÇtè†èÒaþtq*1ä°÷r[EY×­'¡¨p&¥»Šr|‰º“7pÔˆ!Amàpß¼Æîá| ½ Ù@®î+ÔŒ=”g]›œñ¦+¥1§¯݃%ÕûqBèŒM"ݸð'ŽæºˆãaRN)me#­Aˆ°!Úžô¦4í ë ¹Ç&tlŸü2òaí´Hj¡âÚ®Øe%_ÑÒ–þÛ»-ã÷ÁñY5å I+c*Ñ%ª q½¹Ey&hák&*?×Ë¡¤¸0hÅÄÒª¦!È}ŸV!»¤Bü&ƒ0ÛäãÚ@FÖP;°>’â]LÔâ¤ÉÑ—òøæ{q±Å¦ K™‹X麭u «á2Ta}à©:ö$‘ÆÁË÷hj…©›9é×ÙÈZwä|ŸÐá “, ñ>ò‡´K›pnȪ H¡ ªÅŠ›ƒUèKÈ iŒ%ðÁ.gßpü¾rÜG¢È}Cu>¿Û$̃…âAÙüÓÔ•Z72 ÌÚ:?üíä#/,Ê›ºÛ¨©5|±ÖÚm›@•}À>Õž¼-5Ž Mñ±“Ç“ëËX;@Æ!ßqàd°küñêîÊ…5|ѬxþªT»½…Yiwº…>¦†…ôã·VäøSs–Y¢ör’žV”B6g·˜ÂNî ÛöLüËQ²¼¤â¥°ß{³z³â…MÇá¸y†jr¥€›V5–ÌŸÓå:½¼ÏÕÛÆb%-Ü\)r#y·PK@ý´]í/é&e,êLH€%­˜­î¾˜ã…«®Ä¹ëM;½^óÝñýrxF©‰UÓmOî `³3%Oì˜AJ,TXžà”)·ËWK‘gïíáÙf¢'¿*ŽB/8hwÓÅUÏç×è­s 6§‹xFG=d½9½>i‚íG$l7 ·n[ˆÞ #Fû ¸¶µì¶© „xÑ{Z!ßu´ŽÌ4†oåÈ– öM_ù(1»“WGKìeàÝ™°ð4å¬^ž=önÜ¢7ÂØ ¬Ôœk ¼þéÈvÁ^ÜüÍè#µ[aË{%D‡ïŒ‡¢ Cô­¯%ß4X k9ýKPÅŸ©ÿuú_Ó*®Éªߊ+›‚IRäuÉdS9B»ãAg¡Á]TŽ 1ùir/ gçžH?o î€úΔ ‰æˆË9Olý)µòHÂÑ÷nÁ)'Uؽ–>:ˆQG/»ÒËs/OÙþó¨û)® —2sýêõo¢'ž†û•C°@É`ж³§AÉlñð½røHX\³µ}}.*„‘E&õ¦ù‰\õªD%´Ûùõ7uj!»¢§7ãbwèoÒhöy!ôøú¶þá7Àxtñ/‰NqâÉ"¢ˆÐVùÛÉoþó’ Uûw=Þráº5óàɇ.3•(&«”ôˆ_~“ŸBÂW>+e”¸ý•:âFŒùͪ’ÏF6(† 5Þóš÷ŠõáTG«pë|v«ê…Aþ´>c-z,ǾñZG0@Hìñ5– –DΉš­±†¢"K«86$ŒÆtr >¼ë)³èvßA~ç"ó ÅK.eY‹’”@óìCîŸø÷·qhä1&ÑYÕ'”Ú ¶E¯RÜÉ•rs˜Î¸´ê8Ú}ÁS̺å‡êù¤§±C a¶¦Z…6).µ9 ë([-°ç÷dÖP77HY4tÆÁÜÏËVáÉr€ ŠCreáÆ‚Ëþ×ç'[Æûln÷ðùýÑžø/òÈ"„àaõ{!ÓpZÿ—q§Ñ!z~£þÚ ñýÊ”»ïgப=¶ÌÂÐ`÷³7þË-2ñ#“s»8æfË»ó¦—ÆÐéWìg0õ`4Dxšz70M ët/!šwÆÏWb¥] ê< Rí‹f8Ò³éeËŸ/kÄémÇñÿ¯Üç’bpÝ$,IÌSy/>×ë<¤(±SúÄf¼S „(‡´{€jNöh…ž¹^öŽœ ½k·ýöù!V›N—úå·íÇa´”Lmôß@¼2íƒLaÍëz›»hÕ›,À%îÊðkušÁ¹Ýh‚%ЦúIžD6–#brpîöÌU–-Ôÿâý8’~ƒpEˆ<ɺˆ’«&Z1’O0UÔÞæïð]Ÿëߌpµ°*âkœAàT®7…A‡û¶éúà[ èZ¼€-‹šŠšr±Gá7àØ1’fJˆ£¬¤ûjO W‡² 1¼Yuß¼‹Ïø˜us½±ÊCM“E.gíÆ éžS[³øHˆ"E ¶ü[ 1026.855049][T14459] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.108616][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2161'. [ 1027.231471][T14471] macvlan2: entered promiscuous mode [ 1027.231498][T14471] macvlan2: entered allmulticast mode [ 1027.438122][T14482] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2166'. [ 1028.340492][T14493] FAULT_INJECTION: forcing a failure. [ 1028.340492][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.340528][T14493] CPU: 0 UID: 0 PID: 14493 Comm: syz.9.2168 Not tainted syzkaller #0 PREEMPT(full) [ 1028.340556][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1028.340570][T14493] Call Trace: [ 1028.340578][T14493] [ 1028.340588][T14493] dump_stack_lvl+0xe8/0x150 [ 1028.340618][T14493] should_fail_ex+0x3eb/0x540 [ 1028.340646][T14493] should_failslab+0xa8/0x100 [ 1028.340669][T14493] __kmalloc_cache_noprof+0x9e/0x600 [ 1028.340692][T14493] ? unix_prepare_fpl+0xe3/0x590 [ 1028.340712][T14493] ? unix_prepare_fpl+0xe3/0x590 [ 1028.340740][T14493] unix_prepare_fpl+0xe3/0x590 [ 1028.340769][T14493] unix_dgram_sendmsg+0x6b3/0x1bc0 [ 1028.340805][T14493] ? finish_task_switch+0x40e/0xc60 [ 1028.340831][T14493] ? rcu_is_watching+0x16/0xb0 [ 1028.340857][T14493] ? lock_acquire+0x115/0x350 [ 1028.340878][T14493] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1028.340904][T14493] ? aa_sock_msg_perm+0x129/0x210 [ 1028.340932][T14493] ? apparmor_socket_sendmsg+0x98/0x360 [ 1028.340957][T14493] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1028.340977][T14493] sock_sendmsg_nosec+0x14e/0x190 [ 1028.341002][T14493] ____sys_sendmsg+0x54e/0x850 [ 1028.341030][T14493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.341062][T14493] ? import_iovec+0x73/0xa0 [ 1028.341087][T14493] ___sys_sendmsg+0x2a5/0x360 [ 1028.341104][T14493] ? __lock_acquire+0x747/0x2de0 [ 1028.341130][T14493] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.341159][T14493] ? __pfx_futex_wake_mark+0x10/0x10 [ 1028.341211][T14493] ? __fget_files+0x3a2/0x420 [ 1028.341231][T14493] ? __fget_files+0x2a/0x420 [ 1028.341261][T14493] __sys_sendmmsg+0x273/0x4d0 [ 1028.341287][T14493] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1028.341306][T14493] ? do_futex+0x3e7/0x4e0 [ 1028.341335][T14493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1028.341379][T14493] ? rcu_is_watching+0x16/0xb0 [ 1028.341405][T14493] __x64_sys_sendmmsg+0xa0/0xc0 [ 1028.341427][T14493] do_syscall_64+0x166/0x520 [ 1028.341447][T14493] ? trace_irq_disable+0x3b/0x140 [ 1028.341464][T14493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.341482][T14493] ? clear_bhb_loop+0x70/0xc0 [ 1028.341499][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.341516][T14493] RIP: 0033:0x7f26a779e199 [ 1028.341535][T14493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.341553][T14493] RSP: 002b:00007f26a8712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1028.341576][T14493] RAX: ffffffffffffffda RBX: 00007f26a7a25fa0 RCX: 00007f26a779e199 [ 1028.341592][T14493] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1028.341607][T14493] RBP: 00007f26a78358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.341619][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.341632][T14493] R13: 00007f26a7a26038 R14: 00007f26a7a25fa0 R15: 00007ffc7b1fd8c8 [ 1028.341667][T14493] [ 1028.670483][T14498] loop9: detected capacity change from 0 to 512 [ 1028.910548][T14504] FAULT_INJECTION: forcing a failure. [ 1028.910548][T14504] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.910584][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.0.2172 Not tainted syzkaller #0 PREEMPT(full) [ 1028.910611][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1028.910624][T14504] Call Trace: [ 1028.910632][T14504] [ 1028.910641][T14504] dump_stack_lvl+0xe8/0x150 [ 1028.910672][T14504] should_fail_ex+0x3eb/0x540 [ 1028.910702][T14504] should_failslab+0xa8/0x100 [ 1028.910728][T14504] __kmalloc_cache_noprof+0x9e/0x600 [ 1028.910751][T14504] ? vhost_iotlb_alloc+0x54/0x180 [ 1028.910772][T14504] ? vhost_iotlb_alloc+0x54/0x180 [ 1028.910801][T14504] vhost_iotlb_alloc+0x54/0x180 [ 1028.910830][T14504] vhost_dev_ioctl+0xda1/0x11f0 [ 1028.910861][T14504] ? __pfx___mutex_lock+0x10/0x10 [ 1028.910889][T14504] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 1028.910927][T14504] vhost_vsock_dev_ioctl+0x253/0xfc0 [ 1028.910955][T14504] ? __fget_files+0x2a/0x420 [ 1028.910976][T14504] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1028.911000][T14504] ? __fget_files+0x2a/0x420 [ 1028.911020][T14504] ? __fget_files+0x2a/0x420 [ 1028.911045][T14504] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1028.911067][T14504] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1028.911091][T14504] __se_sys_ioctl+0xfc/0x170 [ 1028.911117][T14504] do_syscall_64+0x166/0x520 [ 1028.911138][T14504] ? trace_irq_disable+0x3b/0x140 [ 1028.911156][T14504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.911188][T14504] ? clear_bhb_loop+0x70/0xc0 [ 1028.911213][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.911235][T14504] RIP: 0033:0x7fbec979e199 [ 1028.911256][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.911276][T14504] RSP: 002b:00007fbec79f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.911302][T14504] RAX: ffffffffffffffda RBX: 00007fbec9a25fa0 RCX: 00007fbec979e199 [ 1028.911318][T14504] RDX: 00002000000013c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 1028.911333][T14504] RBP: 00007fbec98358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.911348][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.911362][T14504] R13: 00007fbec9a26038 R14: 00007fbec9a25fa0 R15: 00007ffde20210d8 [ 1028.911397][T14504] [ 1029.037131][T14508] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.461414][ T33] audit: type=1800 audit(1791322491.668:93): pid=14519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2175" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 1029.484380][T14521] syz.9.2174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1029.847985][T14534] fuse: Bad value for 'fd' [ 1030.254141][T14549] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1030.631431][T14561] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1030.643203][T14561] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1030.677863][T14565] FAULT_INJECTION: forcing a failure. [ 1030.677863][T14565] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.677899][T14565] CPU: 1 UID: 0 PID: 14565 Comm: syz.0.2191 Not tainted syzkaller #0 PREEMPT(full) [ 1030.677923][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1030.677935][T14565] Call Trace: [ 1030.677944][T14565] [ 1030.677953][T14565] dump_stack_lvl+0xe8/0x150 [ 1030.677983][T14565] should_fail_ex+0x3eb/0x540 [ 1030.678011][T14565] should_failslab+0xa8/0x100 [ 1030.678033][T14565] __kmalloc_noprof+0xf9/0x710 [ 1030.678055][T14565] ? get_derived_key+0x36/0x130 [ 1030.678073][T14565] ? get_derived_key+0x36/0x130 [ 1030.678099][T14565] get_derived_key+0x36/0x130 [ 1030.678122][T14565] encrypted_read+0x295/0xe70 [ 1030.678150][T14565] ? __pfx_encrypted_read+0x10/0x10 [ 1030.678182][T14565] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1030.678203][T14565] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1030.678221][T14565] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1030.678246][T14565] ? lock_acquire+0x115/0x350 [ 1030.678285][T14565] ? down_read+0x2b9/0x320 [ 1030.678308][T14565] keyctl_read_key+0x29d/0x490 [ 1030.678335][T14565] __se_sys_keyctl+0x38f/0xbc0 [ 1030.678359][T14565] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1030.678383][T14565] ? __pfx_do_futex+0x10/0x10 [ 1030.678416][T14565] ? __se_sys_futex+0x3a8/0x450 [ 1030.678443][T14565] ? rcu_is_watching+0x16/0xb0 [ 1030.678467][T14565] ? __x64_sys_keyctl+0x20/0xc0 [ 1030.678489][T14565] do_syscall_64+0x166/0x520 [ 1030.678506][T14565] ? trace_irq_disable+0x3b/0x140 [ 1030.678522][T14565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.678541][T14565] ? clear_bhb_loop+0x70/0xc0 [ 1030.678564][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.678583][T14565] RIP: 0033:0x7fbec979e199 [ 1030.678603][T14565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.678621][T14565] RSP: 002b:00007fbec79f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1030.678644][T14565] RAX: ffffffffffffffda RBX: 00007fbec9a25fa0 RCX: 00007fbec979e199 [ 1030.678659][T14565] RDX: 0000200000000240 RSI: 00000000190b4382 RDI: 000000000000000b [ 1030.678672][T14565] RBP: 00007fbec98358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.678685][T14565] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 1030.678697][T14565] R13: 00007fbec9a26038 R14: 00007fbec9a25fa0 R15: 00007ffde20210d8 [ 1030.678732][T14565] [ 1031.426588][T14582] netlink: 'syz.9.2194': attribute type 1 has an invalid length. [ 1031.535578][T14582] bridge1: entered promiscuous mode [ 1031.799155][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 1031.799254][T14590] syz_tun: left allmulticast mode [ 1031.799276][T14590] syz_tun: left promiscuous mode [ 1031.799534][T14590] bridge0: port 3(syz_tun) entered disabled state [ 1031.839637][T14590] bridge_slave_1: left allmulticast mode [ 1031.839668][T14590] bridge_slave_1: left promiscuous mode [ 1031.854810][T14590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.886865][T14590] bridge_slave_0: left allmulticast mode [ 1031.886901][T14590] bridge_slave_0: left promiscuous mode [ 1031.887141][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.775053][T14607] FAULT_INJECTION: forcing a failure. [ 1032.775053][T14607] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.775088][T14607] CPU: 1 UID: 0 PID: 14607 Comm: syz.9.2202 Not tainted syzkaller #0 PREEMPT(full) [ 1032.775114][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1032.775127][T14607] Call Trace: [ 1032.775136][T14607] [ 1032.775146][T14607] dump_stack_lvl+0xe8/0x150 [ 1032.775176][T14607] should_fail_ex+0x3eb/0x540 [ 1032.775206][T14607] should_failslab+0xa8/0x100 [ 1032.775228][T14607] ? key_alloc+0x318/0x1020 [ 1032.775250][T14607] kmem_cache_alloc_noprof+0x9c/0x600 [ 1032.775273][T14607] ? do_raw_spin_unlock+0xf5/0x200 [ 1032.775297][T14607] ? key_alloc+0x318/0x1020 [ 1032.775319][T14607] ? key_user_lookup+0x1bc/0x460 [ 1032.775343][T14607] key_alloc+0x318/0x1020 [ 1032.775381][T14607] request_key_auth_new+0x7c1/0xa00 [ 1032.775417][T14607] ? __pfx_request_key_auth_new+0x10/0x10 [ 1032.775455][T14607] request_key_and_link+0xe6b/0x1580 [ 1032.775477][T14607] ? key_task_permission+0x3b8/0x500 [ 1032.775507][T14607] ? __pfx_request_key_and_link+0x10/0x10 [ 1032.775541][T14607] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 1032.775566][T14607] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1032.775595][T14607] ? down_read+0x2b9/0x320 [ 1032.775615][T14607] ? _copy_from_user+0x94/0xb0 [ 1032.775642][T14607] __se_sys_request_key+0x29a/0x350 [ 1032.775670][T14607] ? __pfx___se_sys_request_key+0x10/0x10 [ 1032.775710][T14607] do_syscall_64+0x166/0x520 [ 1032.775730][T14607] ? trace_irq_disable+0x3b/0x140 [ 1032.775750][T14607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.775777][T14607] ? clear_bhb_loop+0x70/0xc0 [ 1032.775802][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.775823][T14607] RIP: 0033:0x7f26a779e199 [ 1032.775852][T14607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.775874][T14607] RSP: 002b:00007f26a8712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1032.775909][T14607] RAX: ffffffffffffffda RBX: 00007f26a7a25fa0 RCX: 00007f26a779e199 [ 1032.775926][T14607] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1032.775941][T14607] RBP: 00007f26a78358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.775955][T14607] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1032.775969][T14607] R13: 00007f26a7a26038 R14: 00007f26a7a25fa0 R15: 00007ffc7b1fd8c8 [ 1032.776005][T14607] [ 1033.274009][T14617] FAULT_INJECTION: forcing a failure. [ 1033.274009][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.274044][T14617] CPU: 0 UID: 0 PID: 14617 Comm: syz.9.2205 Not tainted syzkaller #0 PREEMPT(full) [ 1033.274070][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1033.274083][T14617] Call Trace: [ 1033.274093][T14617] [ 1033.274102][T14617] dump_stack_lvl+0xe8/0x150 [ 1033.274132][T14617] should_fail_ex+0x3eb/0x540 [ 1033.274161][T14617] should_failslab+0xa8/0x100 [ 1033.274185][T14617] __kmalloc_cache_noprof+0x9e/0x600 [ 1033.274208][T14617] ? super_dev_alloc+0x4e/0x100 [ 1033.274226][T14617] ? super_dev_alloc+0x4e/0x100 [ 1033.274247][T14617] ? __list_lru_init+0x542/0x680 [ 1033.274271][T14617] super_dev_alloc+0x4e/0x100 [ 1033.274296][T14617] sget_fc+0xfa8/0x1a60 [ 1033.274338][T14617] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1033.274362][T14617] ? __pfx_sget_fc+0x10/0x10 [ 1033.274384][T14617] ? vfs_parse_monolithic_sep+0x322/0x360 [ 1033.274408][T14617] ? __pfx_ovl_next_opt+0x10/0x10 [ 1033.274439][T14617] ? __pfx_ovl_fill_super+0x10/0x10 [ 1033.274463][T14617] get_tree_nodev+0x2a/0x150 [ 1033.274488][T14617] vfs_get_tree+0x92/0x2a0 [ 1033.274513][T14617] do_new_mount+0x325/0xb00 [ 1033.274541][T14617] ? __pfx_do_new_mount+0x10/0x10 [ 1033.274567][T14617] ? ns_capable+0x84/0xe0 [ 1033.274592][T14617] ? path_mount+0x647/0x1050 [ 1033.274619][T14617] ? user_path_at+0xd4/0x160 [ 1033.274644][T14617] __se_sys_mount+0x31d/0x420 [ 1033.274673][T14617] ? __pfx___se_sys_mount+0x10/0x10 [ 1033.274702][T14617] ? __x64_sys_mount+0x20/0xc0 [ 1033.274726][T14617] do_syscall_64+0x166/0x520 [ 1033.274747][T14617] ? trace_irq_disable+0x3b/0x140 [ 1033.274766][T14617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.274789][T14617] ? clear_bhb_loop+0x70/0xc0 [ 1033.274814][T14617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.274834][T14617] RIP: 0033:0x7f26a779e199 [ 1033.274860][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.274879][T14617] RSP: 002b:00007f26a8712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1033.274904][T14617] RAX: ffffffffffffffda RBX: 00007f26a7a25fa0 RCX: 00007f26a779e199 [ 1033.274921][T14617] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 1033.274936][T14617] RBP: 00007f26a78358e0 R08: 0000200000000040 R09: 0000000000000000 [ 1033.274950][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.274964][T14617] R13: 00007f26a7a26038 R14: 00007f26a7a25fa0 R15: 00007ffc7b1fd8c8 [ 1033.274999][T14617] [ 1034.338670][T14642] fuse: fd is not a fuse device [ 1034.534056][T14648] overlayfs: failed to clone upperpath [ 1034.725261][T14645] overlayfs: failed lookup in lower (newroot/19, name='file0', err=-40): overlapping layers [ 1035.060979][T14666] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2219'. [ 1035.080676][T14669] EXT4-fs (loop3): unable to read superblock [ 1035.266565][T14675] 9p: Bad value for 'rfdno' [ 1036.646928][T14711] ip_tables: iptables: counters copy to user failed while replacing table [ 1036.752346][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2232'. [ 1036.752376][T14713] openvswitch: netlink: Flow actions attr not present in new flow. [ 1038.080026][T14733] netlink: 344 bytes leftover after parsing attributes in process `syz.0.2237'. [ 1038.591717][T13880] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1038.752461][T13880] usb 10-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 1038.753750][T13880] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1038.753783][T13880] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1038.755714][T13880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1038.755741][T13880] usb 10-1: Product: syz [ 1038.755756][T13880] usb 10-1: Manufacturer: syz [ 1038.809235][T12851] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1038.839839][T13880] mos7840 10-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1038.975744][T12851] usb 9-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1038.975790][T12851] usb 9-1: too many configurations: 102, using maximum allowed: 8 [ 1038.977070][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1038.977096][T12851] usb 9-1: config 1 has no interface number 0 [ 1038.978459][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1038.978485][T12851] usb 9-1: config 1 has no interface number 0 [ 1038.979815][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1038.979836][T12851] usb 9-1: config 1 has no interface number 0 [ 1038.980977][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1038.980998][T12851] usb 9-1: config 1 has no interface number 0 [ 1038.982425][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1038.982448][T12851] usb 9-1: config 1 has no interface number 0 [ 1039.001472][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1039.001502][T12851] usb 9-1: config 1 has no interface number 0 [ 1039.101183][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1039.101215][T12851] usb 9-1: config 1 has no interface number 0 [ 1039.119358][T12851] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1039.119387][T12851] usb 9-1: config 1 has no interface number 0 [ 1039.141916][T12851] usb 9-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1039.141947][T12851] usb 9-1: Product: syz [ 1039.141962][T12851] usb 9-1: Manufacturer: syz [ 1039.142005][T12851] usb 9-1: SerialNumber: syz [ 1039.224442][T12851] usb 9-1: 3:0 : does not exist [ 1039.224469][T12851] usb 9-1: 3:0 : does not exist [ 1039.407557][ T191] usb 9-1: USB disconnect, device number 54 [ 1039.885494][ T5742] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1040.035070][ T5742] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1040.036389][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.036420][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.036442][ T5742] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1040.036487][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.039606][ T5742] usb 1-1: config 0 descriptor?? [ 1040.188993][T13880] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1040.385840][T13880] usb 10-1: USB disconnect, device number 2 [ 1040.395578][T13880] mos7840 10-1:1.0: device disconnected [ 1041.393217][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393243][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393261][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393286][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393311][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393336][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393359][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393374][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393389][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1041.393404][ T5742] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1042.039736][ T5742] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1042.507046][T13880] usb 1-1: USB disconnect, device number 3 [ 1043.102017][T14826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1043.383283][T14830] tipc: Started in network mode [ 1043.383320][T14830] tipc: Node identity ac1414aa, cluster identity 4711 [ 1043.505177][T14830] tipc: New replicast peer: 172.20.20.187 [ 1043.510021][T14830] tipc: Enabled bearer , priority 10 [ 1045.112776][T12450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1045.116304][ T5742] tipc: Node number set to 2886997162 [ 1045.917455][ T5712] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1046.745474][ T5712] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1046.747058][ T5712] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.747116][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.756030][ T5712] usb 9-1: config 0 descriptor?? [ 1046.768958][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 1047.205038][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1047.231223][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 1047.236407][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1047.238401][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 1047.247592][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 1047.252436][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 1047.259858][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 1047.269308][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 1047.271610][ T5712] pwc: recv_control_msg error -32 req 04 val 1500 [ 1047.484205][ T5712] pwc: recv_control_msg error -71 req 02 val 2400 [ 1047.486079][ T5712] pwc: recv_control_msg error -71 req 02 val 2600 [ 1047.487419][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 1047.488596][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 1047.490777][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 1047.495531][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 1047.801892][ T5712] pwc: Registered as video103. [ 1047.821311][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input12 [ 1047.870947][ T5712] usb 9-1: USB disconnect, device number 55 [ 1048.580323][T14921] IPv6: NLM_F_CREATE should be specified when creating new route [ 1051.097585][T13593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1051.111333][T13593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1051.113632][T13593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1051.116274][T13593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1051.118058][T13593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1051.904778][ T5742] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1052.083513][T13502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.182448][ T5742] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 1052.184231][ T5742] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.184286][ T5742] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1052.184330][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.198779][ T5742] cxacru 9-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1053.711884][T13593] Bluetooth: hci4: command tx timeout [ 1054.712502][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.712569][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.921224][ T871] usb 9-1: USB disconnect, device number 56 [ 1055.229416][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2311'. [ 1055.229533][T15017] FAULT_INJECTION: forcing a failure. [ 1055.229533][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.229560][T15017] CPU: 1 UID: 0 PID: 15017 Comm: syz.8.2311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.229588][T15017] Tainted: [L]=SOFTLOCKUP [ 1055.229596][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1055.229609][T15017] Call Trace: [ 1055.229618][T15017] [ 1055.229628][T15017] dump_stack_lvl+0xe8/0x150 [ 1055.229659][T15017] should_fail_ex+0x3eb/0x540 [ 1055.229687][T15017] should_failslab+0xa8/0x100 [ 1055.229710][T15017] __kmalloc_node_noprof+0xfb/0x720 [ 1055.229735][T15017] ? crypto_create_tfm_node+0x81/0x3c0 [ 1055.229757][T15017] ? crypto_create_tfm_node+0x81/0x3c0 [ 1055.229788][T15017] crypto_create_tfm_node+0x81/0x3c0 [ 1055.229815][T15017] crypto_alloc_tfm_node+0x169/0x3e0 [ 1055.229847][T15017] ipcomp_init_state+0x14a/0x290 [ 1055.229874][T15017] ipcomp4_init_state+0xca/0xb70 [ 1055.229896][T15017] ? __xfrm_init_state+0x745/0x1320 [ 1055.229923][T15017] __xfrm_init_state+0x9dd/0x1320 [ 1055.229944][T15017] ? __xfrm_init_state+0x745/0x1320 [ 1055.229972][T15017] xfrm_add_sa+0x2f3f/0x40a0 [ 1055.230025][T15017] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1055.230045][T15017] ? apparmor_capable+0x126/0x170 [ 1055.230073][T15017] ? __nla_parse+0x40/0x60 [ 1055.230107][T15017] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1055.230137][T15017] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1055.230196][T15017] ? __mutex_trylock_common+0x15f/0x270 [ 1055.230223][T15017] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1055.230255][T15017] ? rcu_is_watching+0x16/0xb0 [ 1055.230276][T15017] ? trace_contention_end+0x3d/0x140 [ 1055.230308][T15017] netlink_rcv_skb+0x226/0x4a0 [ 1055.230330][T15017] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1055.230354][T15017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1055.230400][T15017] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.230421][T15017] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.230446][T15017] xfrm_netlink_rcv+0x79/0x90 [ 1055.230468][T15017] netlink_unicast+0x7bd/0x940 [ 1055.230502][T15017] netlink_sendmsg+0x7c3/0xae0 [ 1055.230530][T15017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.230562][T15017] ? apparmor_socket_sendmsg+0x98/0x360 [ 1055.230584][T15017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.230603][T15017] sock_sendmsg_nosec+0x14e/0x190 [ 1055.230629][T15017] ____sys_sendmsg+0x54e/0x850 [ 1055.230657][T15017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.230690][T15017] ? import_iovec+0x73/0xa0 [ 1055.230725][T15017] ___sys_sendmsg+0x2a5/0x360 [ 1055.230745][T15017] ? __lock_acquire+0x747/0x2de0 [ 1055.230773][T15017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.230799][T15017] ? futex_wait+0x2a2/0x390 [ 1055.230854][T15017] ? __fget_files+0x3a2/0x420 [ 1055.230874][T15017] ? __fget_files+0x2a/0x420 [ 1055.230905][T15017] __x64_sys_sendmsg+0x1b1/0x290 [ 1055.230930][T15017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.230976][T15017] do_syscall_64+0x166/0x520 [ 1055.230996][T15017] ? trace_irq_disable+0x3b/0x140 [ 1055.231015][T15017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.231038][T15017] ? clear_bhb_loop+0x70/0xc0 [ 1055.231062][T15017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.231090][T15017] RIP: 0033:0x7f1578f9e199 [ 1055.231112][T15017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.231132][T15017] RSP: 002b:00007f1579e66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.231156][T15017] RAX: ffffffffffffffda RBX: 00007f1579225fa0 RCX: 00007f1578f9e199 [ 1055.231173][T15017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1055.231186][T15017] RBP: 00007f15790358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.231201][T15017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.231214][T15017] R13: 00007f1579226038 R14: 00007f1579225fa0 R15: 00007fffbec94c48 [ 1055.231250][T15017] [ 1055.722773][T13593] Bluetooth: hci4: command tx timeout [ 1055.746269][T13502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.604367][T15032] kernel profiling enabled (shift: 23) [ 1057.346433][T13502] bond0: (slave netdevsim1): Releasing backup interface [ 1057.378231][T13502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.236896][T13593] Bluetooth: hci4: command tx timeout [ 1058.633113][T13502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.460641][T13593] Bluetooth: hci4: command tx timeout [ 1061.038601][T13502] pim6reg: left allmulticast mode [ 1061.734388][T13502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.747965][T13502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.753691][T13502] bond0 (unregistering): Released all slaves [ 1061.769181][T13502] bond1 (unregistering): Released all slaves [ 1061.791825][T13502] bond2 (unregistering): Released all slaves [ 1061.865495][T15068] ip_tables: iptables: counters copy to user failed while replacing table [ 1061.932046][ T32] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1062.044468][T13502] tipc: Left network mode [ 1062.702151][ T32] usb 9-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1062.706015][ T32] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1062.706041][ T32] usb 9-1: config 1 has no interface number 0 [ 1062.791785][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.791817][ T32] usb 9-1: Product: syz [ 1062.791832][ T32] usb 9-1: Manufacturer: syz [ 1062.791847][ T32] usb 9-1: SerialNumber: syz [ 1062.906749][ T32] usb 9-1: 3:1 : does not exist [ 1062.906777][ T32] usb 9-1: 3:2 : does not exist [ 1063.118252][T15073] CIFS: Attempting to mount //127.0.0.1/share [ 1064.078558][T15079] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x70 [ 1064.110990][T15082] netlink: 'syz.9.2326': attribute type 11 has an invalid length. [ 1064.111016][T15082] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2326'. [ 1064.194658][T15073] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1064.271780][ T32] usb 9-1: USB disconnect, device number 57 [ 1064.539716][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.542958][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.543135][T14966] bridge_slave_0: entered allmulticast mode [ 1064.552136][T14966] bridge_slave_0: entered promiscuous mode [ 1064.572054][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.572213][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.572396][T14966] bridge_slave_1: entered allmulticast mode [ 1064.582274][T14966] bridge_slave_1: entered promiscuous mode [ 1065.920209][T13502] hsr_slave_0: left promiscuous mode [ 1065.931806][T13502] hsr_slave_1: left promiscuous mode [ 1065.932886][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.932909][T13502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.963057][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.963084][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.029557][T13502] veth1_macvtap: left promiscuous mode [ 1066.029601][T13502] veth0_macvtap: left promiscuous mode [ 1066.031335][T13502] veth1_vlan: left promiscuous mode [ 1066.031409][T13502] veth0_vlan: left promiscuous mode [ 1066.333883][ T5712] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1066.488071][ T4927] Bluetooth: hci3: failed to read key size for handle 0 [ 1066.488298][ T4927] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1066.517402][ T5712] usb 9-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1066.523943][ T5712] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1066.523976][ T5712] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1066.523998][ T5712] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1066.534759][ T5712] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.534786][ T5712] usb 9-1: Product: syz [ 1066.534800][ T5712] usb 9-1: Manufacturer: syz [ 1066.534813][ T5712] usb 9-1: SerialNumber: syz [ 1066.541424][ T5712] usb 9-1: config 0 descriptor?? [ 1066.552683][T15106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1066.552820][T15106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1066.558828][ T5712] usb 9-1: ucan: probing device on interface #0 [ 1066.979026][ T5712] usb 9-1: ucan: device reported invalid tx-fifo size [ 1066.979063][ T5712] usb 9-1: ucan: probe failed; try to update the device firmware [ 1067.190934][ T191] usb 9-1: USB disconnect, device number 58 [ 1068.776800][T13502] team0 (unregistering): Port device team_slave_1 removed [ 1068.835525][T13502] team0 (unregistering): Port device team_slave_0 removed [ 1071.135398][ T4927] Bluetooth: hci3: command 0x2016 tx timeout [ 1071.514773][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.527537][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1071.547237][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.732224][T14966] team0: Port device team_slave_0 added [ 1071.762972][T14966] team0: Port device team_slave_1 added [ 1071.921475][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.921495][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.921606][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.926712][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.926728][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.926751][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.242425][T14966] hsr_slave_0: entered promiscuous mode [ 1072.243622][T14966] hsr_slave_1: entered promiscuous mode [ 1072.249556][T14966] debugfs: 'hsr0' already exists in 'hsr' [ 1072.249580][T14966] Cannot create hsr debugfs directory [ 1072.425354][T13502] IPVS: stop unused estimator thread 0... [ 1073.281141][T15163] syz.9.2346: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1073.286409][T15163] CPU: 0 UID: 0 PID: 15163 Comm: syz.9.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.286444][T15163] Tainted: [L]=SOFTLOCKUP [ 1073.286458][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1073.286471][T15163] Call Trace: [ 1073.286480][T15163] [ 1073.286490][T15163] dump_stack_lvl+0xe8/0x150 [ 1073.286521][T15163] warn_alloc+0x24d/0x270 [ 1073.286542][T15163] ? stack_depot_save_flags+0x33/0x7f0 [ 1073.286573][T15163] ? __pfx_warn_alloc+0x10/0x10 [ 1073.286592][T15163] ? kasan_save_track+0x4f/0x80 [ 1073.286612][T15163] ? __kasan_kmalloc+0x93/0xb0 [ 1073.286634][T15163] ? xsk_init_queue+0x8a/0xe0 [ 1073.286654][T15163] ? xsk_setsockopt+0x52a/0x960 [ 1073.286678][T15163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.286715][T15163] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 1073.286769][T15163] ? rcu_is_watching+0x16/0xb0 [ 1073.286798][T15163] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1073.286820][T15163] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1073.286842][T15163] ? __kmalloc_cache_noprof+0x148/0x600 [ 1073.286863][T15163] ? xskq_create+0x56/0x220 [ 1073.286889][T15163] xskq_create+0x148/0x220 [ 1073.286910][T15163] ? xsk_init_queue+0x8a/0xe0 [ 1073.286934][T15163] xsk_init_queue+0x8a/0xe0 [ 1073.286959][T15163] xsk_setsockopt+0x52a/0x960 [ 1073.286985][T15163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1073.287005][T15163] ? aa_sock_opt_perm+0x36/0x1e0 [ 1073.287027][T15163] ? __pfx_aa_sk_perm+0x10/0x10 [ 1073.287056][T15163] ? aa_sock_opt_perm+0x4f/0x1e0 [ 1073.287087][T15163] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1073.287109][T15163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1073.287133][T15163] do_sock_setsockopt+0x17c/0x1b0 [ 1073.287161][T15163] __x64_sys_setsockopt+0x13d/0x1b0 [ 1073.287190][T15163] do_syscall_64+0x166/0x520 [ 1073.287211][T15163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.287235][T15163] ? clear_bhb_loop+0x70/0xc0 [ 1073.287259][T15163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.287282][T15163] RIP: 0033:0x7f26a779e199 [ 1073.287304][T15163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.287324][T15163] RSP: 002b:00007f26a86d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1073.287347][T15163] RAX: ffffffffffffffda RBX: 00007f26a7a26180 RCX: 00007f26a779e199 [ 1073.287363][T15163] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1073.287377][T15163] RBP: 00007f26a78358e0 R08: 0000000000000004 R09: 0000000000000000 [ 1073.287391][T15163] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.287405][T15163] R13: 00007f26a7a26218 R14: 00007f26a7a26180 R15: 00007ffc7b1fd8c8 [ 1073.287442][T15163] [ 1073.287519][T15163] Mem-Info: [ 1073.287530][T15163] active_anon:11022 inactive_anon:798 isolated_anon:0 [ 1073.287530][T15163] active_file:2036 inactive_file:64136 isolated_file:0 [ 1073.287530][T15163] unevictable:0 dirty:46 writeback:0 [ 1073.287530][T15163] slab_reclaimable:12267 slab_unreclaimable:99730 [ 1073.287530][T15163] mapped:32048 shmem:3191 pagetables:4922 [ 1073.287530][T15163] sec_pagetables:0 bounce:0 [ 1073.287530][T15163] kernel_misc_reclaimable:0 [ 1073.287530][T15163] free:1252062 free_pcp:46132 free_cma:0 [ 1073.287598][T15163] Node 0 active_anon:44088kB inactive_anon:3192kB active_file:8144kB inactive_file:256340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128192kB dirty:184kB writeback:0kB shmem:12764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14648kB pagetables:19544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1073.287689][T15163] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1073.287795][T15163] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.288032][T15163] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1073.288276][T15163] Node 0 DMA32 free:1053188kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44088kB inactive_anon:3192kB active_file:8144kB inactive_file:256340kB unevictable:0kB writepending:184kB zspages:0kB present:3129332kB managed:2546576kB mlocked:0kB bounce:0kB free_pcp:184528kB local_pcp:72712kB free_cma:0kB [ 1073.288437][T15163] lowmem_reserve[]: 0 0 0 0 0 [ 1073.304872][T15163] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.305033][T15163] lowmem_reserve[]: 0 0 0 0 0 [ 1073.311035][T15163] Node 1 Normal free:3939700kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.311842][T15163] lowmem_reserve[]: 0 0 0 0 0 [ 1073.312163][T15163] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1073.313409][T15163] Node 0 DMA32: 5243*4kB (UME) 5063*8kB (UME) 2909*16kB (UME) 2145*32kB (UME) 2026*64kB (UME) 1029*128kB (UME) 523*256kB (UME) 330*512kB (UME) 163*1024kB (UM) 9*2048kB (UME) 31*4096kB (UM) = 1053204kB [ 1073.710029][T15163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1073.710142][T15163] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939700kB [ 1073.710327][T15163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.710344][T15163] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1073.710359][T15163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.710374][T15163] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1073.710390][T15163] 68633 total pagecache pages [ 1073.710398][T15163] 0 pages in swap cache [ 1073.710405][T15163] Free swap = 124996kB [ 1073.710412][T15163] Total swap = 124996kB [ 1073.710420][T15163] 2097051 pages RAM [ 1073.710428][T15163] 0 pages HighMem/MovableOnly [ 1073.710435][T15163] 428791 pages reserved [ 1073.710442][T15163] 0 pages cma reserved [ 1075.880902][T15187] Cannot find set identified by id 0 to match [ 1076.218204][T14966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1076.384241][T14966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.396933][T14966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1076.415433][T14966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.416431][T14966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1076.674285][T14966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1076.681908][T14966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1076.710762][T14966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1076.912094][T13913] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1077.141700][T13913] usb 9-1: Using ep0 maxpacket: 32 [ 1077.145409][T13913] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1077.145466][T13913] usb 9-1: New USB device found: idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 1077.146801][T13913] usb 9-1: config 4 has an invalid interface number: 224 but max is 0 [ 1077.146827][T13913] usb 9-1: config 4 has no interface number 0 [ 1077.146858][T13913] usb 9-1: config 4 interface 224 has no altsetting 0 [ 1077.208283][T13913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.208312][T13913] usb 9-1: Product: syz [ 1077.208328][T13913] usb 9-1: Manufacturer: syz [ 1077.208342][T13913] usb 9-1: SerialNumber: syz [ 1077.731668][T14966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.784212][T14966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.819508][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.819616][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.836611][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.836724][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.448212][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.575825][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.810238][T13913] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware [ 1079.855442][T15247] loop5: detected capacity change from 0 to 7 [ 1079.903457][T15247] Dev loop5: unable to read RDB block 7 [ 1079.903495][T15247] loop5: AHDI p1 p2 p3 [ 1079.903516][T15247] loop5: partition table partially beyond EOD, truncated [ 1079.903743][T15247] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1079.903765][T15247] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1080.104205][T13913] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1080.104346][T13913] dib0700: firmware download failed at 7 with -22 [ 1080.127281][T13913] usb 9-1: USB disconnect, device number 59 [ 1080.425564][T15274] futex_wake_op: syz.8.2366 tries to shift op by 144; fix this program [ 1080.634481][T15280] jffs2: notice: (15280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1081.861722][T13913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1082.586058][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.605121][T13913] usb 1-1: New USB device found: idVendor=18b4, idProduct=1689, bcdDevice=1.00 [ 1082.606484][T13913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.613936][T13913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.613963][T13913] usb 1-1: Product: syz [ 1082.613977][T13913] usb 1-1: Manufacturer: syz [ 1082.613990][T13913] usb 1-1: SerialNumber: syz [ 1082.645111][T13913] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1082.713747][T14966] veth0_vlan: entered promiscuous mode [ 1082.733469][T14966] veth1_vlan: entered promiscuous mode [ 1082.841448][T14966] veth0_macvtap: entered promiscuous mode [ 1082.880689][T14966] veth1_macvtap: entered promiscuous mode [ 1082.927461][T14966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.950425][T14966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.013615][T12796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.016425][ T6132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.073561][T13502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.173353][T13502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.354758][T13913] dvb_usb_ec168 1-1:1.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1083.372887][T13913] usb 1-1: USB disconnect, device number 4 [ 1083.434587][ T6133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.434637][ T6133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.171180][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2377'. [ 1084.330830][T12796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.330855][T12796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.512476][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.514187][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.081314][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2388'. [ 1086.081405][T15359] openvswitch: netlink: Flow actions attr not present in new flow. [ 1087.314807][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2398'. [ 1087.314881][T15383] netlink: 'syz.1.2398': attribute type 8 has an invalid length. [ 1087.314897][T15383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2398'. [ 1087.374635][T15383] erspan0: entered promiscuous mode [ 1087.394609][T15383] gretap0: entered promiscuous mode [ 1087.398083][T15383] erspan0: left promiscuous mode [ 1087.409770][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2398'. [ 1087.409804][T15384] netlink: 'syz.1.2398': attribute type 8 has an invalid length. [ 1087.409817][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2398'. [ 1087.450282][T15383] gretap0: left promiscuous mode [ 1087.560069][T15384] erspan0: entered promiscuous mode [ 1087.572383][T15384] gretap0: entered promiscuous mode [ 1087.611653][T15384] erspan0: left promiscuous mode [ 1087.638301][T15384] gretap0: left promiscuous mode [ 1088.001060][ T33] audit: type=1326 audit(1791322550.208:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.002104][ T33] audit: type=1326 audit(1791322550.218:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.046381][ T33] audit: type=1326 audit(1791322550.258:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb240d5e9ce code=0x7ffc0000 [ 1088.069488][ T33] audit: type=1326 audit(1791322550.278:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.071146][ T33] audit: type=1326 audit(1791322550.278:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.106251][ T33] audit: type=1326 audit(1791322550.318:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.106304][ T33] audit: type=1326 audit(1791322550.318:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.106346][ T33] audit: type=1326 audit(1791322550.318:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.140824][T15398] CIFS: Attempting to mount //127.0.0.1/share [ 1088.149633][ T33] audit: type=1326 audit(1791322550.358:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1088.227171][ T33] audit: type=1326 audit(1791322550.378:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.5.2403" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240d9e199 code=0x7ffc0000 [ 1089.675907][T15398] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1089.684797][T15398] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1089.873091][T15416] FAULT_INJECTION: forcing a failure. [ 1089.873091][T15416] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.873129][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.8.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.873160][T15416] Tainted: [L]=SOFTLOCKUP [ 1089.873169][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1089.873182][T15416] Call Trace: [ 1089.873191][T15416] [ 1089.873201][T15416] dump_stack_lvl+0xe8/0x150 [ 1089.873231][T15416] should_fail_ex+0x3eb/0x540 [ 1089.873260][T15416] should_failslab+0xa8/0x100 [ 1089.873285][T15416] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1089.873310][T15416] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1089.873331][T15416] ? __alloc_workqueue+0xbd7/0x21d0 [ 1089.873351][T15416] ? __alloc_workqueue+0xbd7/0x21d0 [ 1089.873381][T15416] __alloc_workqueue+0xbd7/0x21d0 [ 1089.873426][T15416] alloc_workqueue_noprof+0xe3/0x210 [ 1089.873455][T15416] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1089.873486][T15416] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1089.873514][T15416] nci_register_device+0x22c/0xa00 [ 1089.873544][T15416] ? __pfx_nci_register_device+0x10/0x10 [ 1089.873562][T15416] ? __raw_spin_lock_init+0x45/0x100 [ 1089.873585][T15416] ? __raw_spin_lock_init+0x45/0x100 [ 1089.873608][T15416] ? __init_waitqueue_head+0xa8/0x150 [ 1089.873632][T15416] virtual_ncidev_open+0x129/0x1a0 [ 1089.873655][T15416] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1089.873674][T15416] misc_open+0x2d5/0x350 [ 1089.873700][T15416] chrdev_open+0x4d9/0x600 [ 1089.873724][T15416] ? __pfx_chrdev_open+0x10/0x10 [ 1089.873747][T15416] ? devcgroup_check_permission+0x31/0x8f0 [ 1089.873780][T15416] ? __pfx_chrdev_open+0x10/0x10 [ 1089.873802][T15416] do_dentry_open+0x80e/0x1360 [ 1089.873837][T15416] vfs_open_consume+0x4a/0x350 [ 1089.873856][T15416] ? path_openat+0x148a/0x1da0 [ 1089.873881][T15416] path_openat+0x14a6/0x1da0 [ 1089.873924][T15416] do_file_open+0x23e/0x4a0 [ 1089.873953][T15416] ? __pfx_do_file_open+0x10/0x10 [ 1089.874000][T15416] ? _raw_spin_unlock+0x28/0x50 [ 1089.874021][T15416] ? alloc_fd+0x6af/0x760 [ 1089.874066][T15416] do_sys_openat2+0x115/0x200 [ 1089.874089][T15416] ? __se_sys_futex+0x3a8/0x450 [ 1089.874111][T15416] ? __pfx_do_sys_openat2+0x10/0x10 [ 1089.874140][T15416] ? rcu_is_watching+0x16/0xb0 [ 1089.874167][T15416] __x64_sys_openat+0x138/0x170 [ 1089.874196][T15416] do_syscall_64+0x166/0x520 [ 1089.874217][T15416] ? trace_irq_disable+0x3b/0x140 [ 1089.874236][T15416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.874260][T15416] ? clear_bhb_loop+0x70/0xc0 [ 1089.874284][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.874307][T15416] RIP: 0033:0x7f1578f9e199 [ 1089.874328][T15416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.874347][T15416] RSP: 002b:00007f1579e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1089.874372][T15416] RAX: ffffffffffffffda RBX: 00007f1579225fa0 RCX: 00007f1578f9e199 [ 1089.874389][T15416] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1089.874403][T15416] RBP: 00007f15790358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1089.874417][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.874430][T15416] R13: 00007f1579226038 R14: 00007f1579225fa0 R15: 00007fffbec94c48 [ 1089.874465][T15416] [ 1089.947733][T15419] syzkaller1: entered promiscuous mode [ 1089.947755][T15419] syzkaller1: entered allmulticast mode [ 1090.227869][T15423] loop7: detected capacity change from 0 to 16384 [ 1090.363589][T15425] loop7: detected capacity change from 16384 to 0 [ 1090.373418][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1090.382094][ C1] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1095.103290][T15485] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1095.103318][T15485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1095.114217][T15485] vhci_hcd vhci_hcd.0: Device attached [ 1095.146547][T15489] vhci_hcd: connection closed [ 1095.186933][ T3379] vhci_hcd vhci_hcd.1: stop threads [ 1095.188835][ T3379] vhci_hcd vhci_hcd.1: release socket [ 1095.188878][ T3379] vhci_hcd vhci_hcd.1: disconnect device [ 1097.723179][T13593] Bluetooth: hci3: command 0x2016 tx timeout [ 1098.115094][T15535] ================================================================== [ 1098.115107][T15535] BUG: KASAN: null-ptr-deref in xprt_reserve+0xe2/0x2c0 [ 1098.115125][T15535] Read of size 8 at addr 0000000000000628 by task syz.1.2432/15535 [ 1098.115136][T15535] [ 1098.115145][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.1.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.115164][T15535] Tainted: [L]=SOFTLOCKUP [ 1098.115169][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1098.115177][T15535] Call Trace: [ 1098.115182][T15535] [ 1098.115188][T15535] dump_stack_lvl+0xe8/0x150 [ 1098.115201][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.115212][T15535] kasan_report+0x117/0x150 [ 1098.115224][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.115236][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.115248][T15535] kasan_check_range+0x264/0x2c0 [ 1098.115260][T15535] xprt_reserve+0xe2/0x2c0 [ 1098.115271][T15535] ? __pfx_call_reserve+0x10/0x10 [ 1098.115283][T15535] __rpc_execute+0x521/0x1280 [ 1098.115298][T15535] ? __pfx___rpc_execute+0x10/0x10 [ 1098.115309][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.115320][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.115332][T15535] ? rpc_make_runnable+0xae/0x1c0 [ 1098.115344][T15535] rpc_execute+0x1c1/0x390 [ 1098.115355][T15535] rpc_run_task+0x4a6/0x660 [ 1098.115368][T15535] rpc_create_xprt+0x452/0xa90 [ 1098.115379][T15535] ? __pfx_rpc_create_xprt+0x10/0x10 [ 1098.115393][T15535] ? trace_kmalloc+0x2a/0xf0 [ 1098.115405][T15535] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 1098.115418][T15535] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 1098.115439][T15535] ? xprt_create_transport+0x39b/0x5f0 [ 1098.115450][T15535] ? xprt_create_transport+0x39b/0x5f0 [ 1098.115460][T15535] ? kstrdup+0x81/0x100 [ 1098.115471][T15535] ? __asan_memcpy+0x40/0x70 [ 1098.115483][T15535] ? xprt_create_transport+0x438/0x5f0 [ 1098.115496][T15535] rpc_create+0x649/0x900 [ 1098.115507][T15535] ? __pfx_rpc_create+0x10/0x10 [ 1098.115521][T15535] ? __mutex_lock+0x305/0x15a0 [ 1098.115539][T15535] ? net_generic+0x1e/0x240 [ 1098.115550][T15535] ? net_generic+0x1e/0x240 [ 1098.115565][T15535] set_gssp_clnt+0x188/0x2d0 [ 1098.115578][T15535] ? __pfx_set_gssp_clnt+0x10/0x10 [ 1098.115594][T15535] ? kstrtoull+0x137/0x1d0 [ 1098.115606][T15535] write_gssp+0x458/0x930 [ 1098.115617][T15535] ? __pfx_write_gssp+0x10/0x10 [ 1098.115629][T15535] ? lock_acquire+0x115/0x350 [ 1098.115643][T15535] ? __pfx_write_gssp+0x10/0x10 [ 1098.115653][T15535] proc_reg_write+0x1e9/0x2e0 [ 1098.115665][T15535] ? __pfx_proc_reg_write+0x10/0x10 [ 1098.115676][T15535] vfs_write+0x296/0xba0 [ 1098.115690][T15535] ? __pfx_vfs_write+0x10/0x10 [ 1098.115701][T15535] ? __fget_files+0x2a/0x420 [ 1098.115711][T15535] ? __fget_files+0x3a2/0x420 [ 1098.115721][T15535] ? __fget_files+0x2a/0x420 [ 1098.115732][T15535] ? fdget+0x1ac/0x250 [ 1098.115744][T15535] ksys_write+0x150/0x270 [ 1098.115757][T15535] ? __pfx_ksys_write+0x10/0x10 [ 1098.115774][T15535] do_syscall_64+0x166/0x520 [ 1098.115786][T15535] ? trace_irq_disable+0x3b/0x140 [ 1098.115797][T15535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.115809][T15535] ? clear_bhb_loop+0x70/0xc0 [ 1098.115820][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.115832][T15535] RIP: 0033:0x7f9f92b9e199 [ 1098.115844][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.115855][T15535] RSP: 002b:00007f9f93afd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1098.115870][T15535] RAX: ffffffffffffffda RBX: 00007f9f92e25fa0 RCX: 00007f9f92b9e199 [ 1098.115879][T15535] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 1098.115887][T15535] RBP: 00007f9f92c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.115895][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.115903][T15535] R13: 00007f9f92e26038 R14: 00007f9f92e25fa0 R15: 00007ffed91dbe08 [ 1098.115916][T15535] [ 1098.115920][T15535] ================================================================== [ 1098.117739][T15535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1098.516854][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.1.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.527887][T15535] Tainted: [L]=SOFTLOCKUP [ 1098.532211][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1098.542259][T15535] Call Trace: [ 1098.545548][T15535] [ 1098.548485][T15535] vpanic+0x26f/0x710 [ 1098.552463][T15535] panic+0xc5/0xd0 [ 1098.556189][T15535] ? __pfx_panic+0x10/0x10 [ 1098.560609][T15535] ? preempt_schedule_common+0x7f/0xd0 [ 1098.566063][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.570655][T15535] check_panic_on_warn+0x89/0xb0 [ 1098.575604][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.580245][T15535] end_report+0x73/0x170 [ 1098.584486][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.589079][T15535] kasan_report+0x128/0x150 [ 1098.593601][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.598712][T15535] ? xprt_reserve+0xe2/0x2c0 [ 1098.603303][T15535] kasan_check_range+0x264/0x2c0 [ 1098.608263][T15535] xprt_reserve+0xe2/0x2c0 [ 1098.612693][T15535] ? __pfx_call_reserve+0x10/0x10 [ 1098.617717][T15535] __rpc_execute+0x521/0x1280 [ 1098.622397][T15535] ? __pfx___rpc_execute+0x10/0x10 [ 1098.627506][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.632618][T15535] ? xprt_iter_get_next+0x20/0x2b0 [ 1098.637753][T15535] ? rpc_make_runnable+0xae/0x1c0 [ 1098.642787][T15535] rpc_execute+0x1c1/0x390 [ 1098.647218][T15535] rpc_run_task+0x4a6/0x660 [ 1098.651739][T15535] rpc_create_xprt+0x452/0xa90 [ 1098.656501][T15535] ? __pfx_rpc_create_xprt+0x10/0x10 [ 1098.661784][T15535] ? trace_kmalloc+0x2a/0xf0 [ 1098.666367][T15535] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 1098.672948][T15535] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 1098.679552][T15535] ? xprt_create_transport+0x39b/0x5f0 [ 1098.685021][T15535] ? xprt_create_transport+0x39b/0x5f0 [ 1098.690487][T15535] ? kstrdup+0x81/0x100 [ 1098.694653][T15535] ? __asan_memcpy+0x40/0x70 [ 1098.699239][T15535] ? xprt_create_transport+0x438/0x5f0 [ 1098.704690][T15535] rpc_create+0x649/0x900 [ 1098.709013][T15535] ? __pfx_rpc_create+0x10/0x10 [ 1098.713856][T15535] ? __mutex_lock+0x305/0x15a0 [ 1098.718627][T15535] ? net_generic+0x1e/0x240 [ 1098.723123][T15535] ? net_generic+0x1e/0x240 [ 1098.727631][T15535] set_gssp_clnt+0x188/0x2d0 [ 1098.732214][T15535] ? __pfx_set_gssp_clnt+0x10/0x10 [ 1098.737338][T15535] ? kstrtoull+0x137/0x1d0 [ 1098.741744][T15535] write_gssp+0x458/0x930 [ 1098.746067][T15535] ? __pfx_write_gssp+0x10/0x10 [ 1098.750933][T15535] ? lock_acquire+0x115/0x350 [ 1098.755629][T15535] ? __pfx_write_gssp+0x10/0x10 [ 1098.760483][T15535] proc_reg_write+0x1e9/0x2e0 [ 1098.765158][T15535] ? __pfx_proc_reg_write+0x10/0x10 [ 1098.770362][T15535] vfs_write+0x296/0xba0 [ 1098.774608][T15535] ? __pfx_vfs_write+0x10/0x10 [ 1098.779383][T15535] ? __fget_files+0x2a/0x420 [ 1098.783973][T15535] ? __fget_files+0x3a2/0x420 [ 1098.788648][T15535] ? __fget_files+0x2a/0x420 [ 1098.793245][T15535] ? fdget+0x1ac/0x250 [ 1098.797320][T15535] ksys_write+0x150/0x270 [ 1098.801646][T15535] ? __pfx_ksys_write+0x10/0x10 [ 1098.806502][T15535] do_syscall_64+0x166/0x520 [ 1098.811088][T15535] ? trace_irq_disable+0x3b/0x140 [ 1098.816105][T15535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.822165][T15535] ? clear_bhb_loop+0x70/0xc0 [ 1098.826836][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.832739][T15535] RIP: 0033:0x7f9f92b9e199 [ 1098.837150][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.856762][T15535] RSP: 002b:00007f9f93afd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1098.865195][T15535] RAX: ffffffffffffffda RBX: 00007f9f92e25fa0 RCX: 00007f9f92b9e199 [ 1098.873168][T15535] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 1098.881165][T15535] RBP: 00007f9f92c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.889147][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.897116][T15535] R13: 00007f9f92e26038 R14: 00007f9f92e25fa0 R15: 00007ffed91dbe08 [ 1098.905103][T15535] [ 1098.908276][T15535] Kernel Offset: disabled [ 1098.912613][T15535] Rebooting in 86400 seconds..