last executing test programs: 15m56.290388549s ago: executing program 32 (id=4802): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) 15m12.339926361s ago: executing program 33 (id=5473): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) unshare(0x2c020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 14m48.012806995s ago: executing program 34 (id=5719): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x4, 0x5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x30}) 12m58.024283162s ago: executing program 35 (id=7090): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 11m7.160779583s ago: executing program 36 (id=8558): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500005ffff00000002683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) 9m49.735508936s ago: executing program 37 (id=9483): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7a, 0xa3, 0x40000023f, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x10000000000002ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x404}, [{0x3, 0x281, 0x70, 0x3, 0xffffffffffffff80, 0x96, 0x7}]}, 0x78) r2 = fanotify_init(0x200, 0x1000) r3 = dup(r1) fanotify_mark(r2, 0x1, 0x48001028, r3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m27.067378885s ago: executing program 38 (id=9703): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xff, 0xfffffffd, 0xb8, 0x4, 0xc, "e3143c1cc267f7b7cdb242e1ff07a6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) 9m6.080888207s ago: executing program 39 (id=9918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x101280) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m19.283921116s ago: executing program 40 (id=10447): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0xac2, 0x0, 0x0, 0x40f00, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r1, &(0x7f0000000700)=[{0x0}], 0x1) 5m49.906356434s ago: executing program 41 (id=11839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) dup2(r1, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 5m25.741062796s ago: executing program 4 (id=12004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000040900030073797a300000000014000480080002400000000008000140000000030900010073797a300000000050000000060a1d0400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x10) 5m25.529400665s ago: executing program 4 (id=12007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x9, 0x2, 0x5, 0x9, 0x5b70, 0x87b}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m25.273791603s ago: executing program 4 (id=12011): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)=';', 0x1, 0x8080, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m25.123935986s ago: executing program 4 (id=12014): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m24.838833399s ago: executing program 4 (id=12017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304004e22"], 0x54}}, 0x20044010) 5m24.526302447s ago: executing program 4 (id=12023): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x1, 0x303, 0x6}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m23.806270007s ago: executing program 42 (id=12023): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x1, 0x303, 0x6}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m23.544219428s ago: executing program 6 (id=12444): io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m23.129302872s ago: executing program 6 (id=12449): fanotify_init(0x10, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 4m23.104314796s ago: executing program 6 (id=12450): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 4m23.021270858s ago: executing program 6 (id=12451): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000180)='./file0\x00', 0x0) 4m22.047627131s ago: executing program 6 (id=12458): socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x123900, 0x0) syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0xe) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000002100)={0x6, 0x9, 0x343, 0x4, 0xfcd, 0x8, 0x40, 0x4}, &(0x7f0000002140)={0x3ff, 0x8000000000000000, 0x100000000, 0xdf, 0x7c3, 0x0, 0x2, 0x7fff}, 0x0, 0x0, 0x0) 4m21.752110868s ago: executing program 6 (id=12460): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) 4m21.355742439s ago: executing program 43 (id=12460): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) 3m14.066941196s ago: executing program 5 (id=13012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) 3m13.986498801s ago: executing program 5 (id=13013): open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x400002a2) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x107c) 3m13.826882826s ago: executing program 5 (id=13026): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) 3m13.634020286s ago: executing program 5 (id=13019): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x201) 3m12.706340148s ago: executing program 5 (id=13034): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7d0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m12.412105799s ago: executing program 5 (id=13037): unshare(0x6a040000) unshare(0x6a040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 3m11.782417633s ago: executing program 44 (id=13037): unshare(0x6a040000) unshare(0x6a040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 2m38.653395604s ago: executing program 3 (id=13266): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x400017e) read$FUSE(r1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m37.326267238s ago: executing program 3 (id=13277): socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x7df2, 0x7721, 0x16, 0x0, 0x0) 2m37.202392886s ago: executing program 3 (id=13280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x40000, 0xc, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x5}, {0x0, 0x1, 0xa, 0x19, 0xc, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x6000, 0xdddd0000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xd000, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xeeef0000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x1441ae, 0x6, 0x0, 0xe6e70c00, [0x6, 0x401, 0x8, 0x4]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe0, 0x9, 0x2, '\x00', 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 2m36.966254327s ago: executing program 3 (id=13282): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) 2m36.096237575s ago: executing program 3 (id=13287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) 2m35.824694071s ago: executing program 3 (id=13289): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0x101d0}], 0x1}, 0x100a0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2m35.097150301s ago: executing program 45 (id=13289): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0x101d0}], 0x1}, 0x100a0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m44.41346082s ago: executing program 1 (id=13637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m43.345718517s ago: executing program 1 (id=13647): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xb, 0x6, 0x1, 0x2, 0x826e, 0x8001, 0x1, 0x6, [{0x101, 0x10, 0x1, 0x80}]}}, @TCA_U32_LINK={0x8, 0x3, 0x100}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xfffc}}]}}]}, 0x64}}, 0x0) 1m43.049868993s ago: executing program 1 (id=13650): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x1, r0, 0x101, 0x80000}) 1m40.208487576s ago: executing program 1 (id=13663): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m39.224354918s ago: executing program 1 (id=13667): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) set_mempolicy(0x3, 0x0, 0x5) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) 1m38.973424336s ago: executing program 1 (id=13670): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x220000, 0x1000, 0x6}, 0x20) 1m38.734077277s ago: executing program 46 (id=13670): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x220000, 0x1000, 0x6}, 0x20) 4.601633083s ago: executing program 7 (id=14485): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x7}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xa, 0xf, 0x411d071, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 4.521057913s ago: executing program 7 (id=14486): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.388776914s ago: executing program 7 (id=14488): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206030000000000000000000500000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.157803821s ago: executing program 7 (id=14492): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4008242, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109881, 0x34) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x1, {{0xffffffffffff10ba, 0x9, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000000200)={0x1, 0x0, 0x700, 0x1000000}) 3.643035649s ago: executing program 9 (id=14499): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x60, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x5c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x34}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x81}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000184}, 0x40040) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xdd\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x8d=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf\x00\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`n\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.590196433s ago: executing program 9 (id=14500): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) fchdir(r1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.702301052s ago: executing program 9 (id=14508): r0 = io_uring_setup(0x213, &(0x7f00000003c0)={0x0, 0x457a, 0x40, 0x3, 0x800001fe}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) close_range(r0, 0xffffffffffffffff, 0x0) 1.735213321s ago: executing program 9 (id=14521): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 1.554227292s ago: executing program 0 (id=14523): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) close(0x3) 1.514564013s ago: executing program 0 (id=14524): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a", 0x11}], 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4080, 0x61}], 0x1}, 0x2000) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 1.417490709s ago: executing program 0 (id=14525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.41183199s ago: executing program 0 (id=14526): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.321787654s ago: executing program 0 (id=14527): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba4572d170b345ccb3b1b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172489d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0xfff, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(r1, 0x4, 0x2400) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593f16430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d1d0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f63a84098f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f13132773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f0500000093e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34404b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8d5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c02316b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x5, 0x7, 0x0, {0x4, 0x5, 0x4000020000000000, 0x7, 0x40000000000003, 0x2, 0x0, 0x35741061, 0x4000, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0x12}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000dd80)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.008388794s ago: executing program 7 (id=14532): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004894) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 929.453147ms ago: executing program 0 (id=14533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040440647800001db80d36609021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) 929.209419ms ago: executing program 8 (id=14534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 822.196541ms ago: executing program 7 (id=14536): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write$cgroup_devices(r4, 0x0, 0x9) write(r2, 0x0, 0x0) 802.709682ms ago: executing program 8 (id=14537): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 702.554368ms ago: executing program 2 (id=14538): io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 642.063133ms ago: executing program 8 (id=14539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 551.050194ms ago: executing program 8 (id=14540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 547.964841ms ago: executing program 2 (id=14541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 445.888311ms ago: executing program 8 (id=14542): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 445.551113ms ago: executing program 2 (id=14543): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 418.613923ms ago: executing program 8 (id=14544): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r0, 0x101) 375.1494ms ago: executing program 2 (id=14545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) 309.307745ms ago: executing program 9 (id=14546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580030007"], 0x4a) 154.082008ms ago: executing program 2 (id=14547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={r3, 0x6}, &(0x7f00000005c0)=0x8) 49.509908ms ago: executing program 9 (id=14548): r0 = openat$kvm(0x0, 0x0, 0x9c3400, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101b8298a20030478fa0203135f19010902"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(r2, &(0x7f0000000500)='./cgroup/file0\x00', r2, &(0x7f0000000480)='./cgroup/file0\x00', 0x5) 0s ago: executing program 2 (id=14549): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r0, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r2 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): :16.0: invalid notification: 0 [ 1182.631099][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.637050][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.643083][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.649049][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.649247][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.649444][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.649650][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.649866][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.655832][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.661916][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.667906][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.668264][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.674205][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.674402][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.674596][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.680619][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.686560][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.692712][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.698702][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.698918][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.699143][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.699367][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.705330][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.711289][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.717226][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.717434][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.717648][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.723620][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.729598][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.729817][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.730044][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.735959][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.741894][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.747828][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.748071][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.748301][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.748538][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.748755][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.748975][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.752684][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.758733][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.764630][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.770555][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.782522][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.800127][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.806041][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.811989][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.817964][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.818166][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.818388][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.824336][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.830278][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.836180][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.842167][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.848212][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.854136][ C0] usbtmc 2-1:16.0: invalid notification: 44 [ 1182.860079][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.866018][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.871984][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.873772][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.873971][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.874167][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.874361][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.874557][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.874757][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.874949][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.875140][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.875329][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.875516][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.875705][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.875895][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.876085][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.876277][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.876470][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.876667][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.876860][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.877053][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.877247][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.877436][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.877623][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.877823][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.883886][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.889820][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.895739][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.901687][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.907608][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.913555][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.919522][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.925441][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.931474][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.937377][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.943275][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.949222][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.955120][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.961053][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.967013][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.972934][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.973294][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.979229][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.985151][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.991094][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1182.997011][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.002983][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.009203][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.015100][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.021057][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.026973][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.032889][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.038803][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.044735][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.050788][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 1183.409685][T22036] usb 2-1: USB disconnect, device number 78 [ 1183.707734][ T5351] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 1184.165001][ T5351] Console: switching to colour frame buffer device 128x48 [ 1184.197314][ T5351] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 1184.216744][ T5351] usb 3-1: USB disconnect, device number 100 [ 1184.279453][ T5351] Console: switching to colour VGA+ 80x25 [ 1184.445373][ T8823] ip_tables: iptables: counters copy to user failed while replacing table [ 1185.167324][ T8840] 0: reclassify loop, rule prio 0, protocol 800 [ 1185.957897][T22923] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1186.109496][T22923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1186.115916][T22923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.115945][T22923] usb 3-1: Product: syz [ 1186.115961][T22923] usb 3-1: Manufacturer: syz [ 1186.115978][T22923] usb 3-1: SerialNumber: syz [ 1186.180327][T22923] usb 3-1: config 0 descriptor?? [ 1186.187946][T26303] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1186.378778][T26303] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.380490][T26303] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.380523][T26303] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1186.387281][T26303] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.387306][T26303] usb 10-1: Product: syz [ 1186.387322][T26303] usb 10-1: Manufacturer: syz [ 1186.387371][T26303] usb 10-1: SerialNumber: syz [ 1186.454885][T22923] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1186.674838][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.675254][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.708122][T26303] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1186.713123][T26303] usb 10-1: USB disconnect, device number 10 [ 1187.147918][T26315] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1187.299413][T26315] usb 10-1: Using ep0 maxpacket: 8 [ 1187.300167][T26315] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1187.302228][T26315] usb 10-1: config index 0 descriptor too short (expected 301, got 72) [ 1187.302252][T26315] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.302292][T26315] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1187.302308][T26315] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1187.302323][T26315] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1187.302339][T26315] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.302373][T26315] usb 10-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.302411][T26315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.516956][T26315] usb 10-1: GET_CAPABILITIES returned 0 [ 1187.517000][T26315] usbtmc 10-1:16.0: can't read capabilities [ 1187.730426][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.730665][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.730867][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.731076][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.731298][ C1] usbtmc 10-1:16.0: invalid notification: 11 [ 1187.731502][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.731929][ C1] usbtmc 10-1:16.0: invalid notification: 2 [ 1187.732177][ C1] usbtmc 10-1:16.0: invalid notification: 5 [ 1187.732388][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.732621][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.732832][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.733037][ C1] usbtmc 10-1:16.0: invalid notification: 40 [ 1187.733469][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.733675][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.733871][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.734069][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.734271][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.734469][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.734670][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.734868][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.735065][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.735262][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.735458][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.735654][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.735861][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.736074][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.736284][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.736483][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.736672][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.736876][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.737073][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.737269][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.737469][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.737663][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.737929][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.738132][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.738452][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.738766][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.739098][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.739387][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.739669][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.739999][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.740293][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.740607][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.740878][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.741208][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.741510][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.741833][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.742130][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.742459][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.742839][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.743183][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.743466][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.743758][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.744028][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.744284][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.744550][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.744858][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.745125][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.745420][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.745726][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.746093][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.746435][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.746746][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.747040][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.747338][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.747684][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.748196][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.748508][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.748886][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.749225][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.749556][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.749908][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.750237][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.750486][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.750790][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.751109][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.751383][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.751702][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.752079][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.752519][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.752915][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.753228][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.753547][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.753890][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.754227][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.754547][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.754936][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.755290][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.755608][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.755917][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.756256][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.756568][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.756880][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.757226][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.757540][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.757939][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.758349][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.758674][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.758989][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.759278][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.759585][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.759911][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.760201][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.760477][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.760781][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.761083][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.761368][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.761628][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.761980][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.762306][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.762544][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.762890][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.763220][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.763562][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.763908][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.764244][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.764561][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.764902][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.765219][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.765527][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.765821][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.766106][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.766392][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.766701][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.767025][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.767328][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.767604][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.768250][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.768564][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.768852][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.769185][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.769516][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.769823][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.770123][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.770436][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.770714][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.771006][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.771319][ C1] usbtmc 10-1:16.0: invalid notification: 44 [ 1187.771625][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.771906][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.772200][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.772533][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.772850][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.773767][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.774110][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.774401][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.774653][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.774845][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.775056][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.775252][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.775453][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.775797][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.776076][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.776400][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.776690][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.777047][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.777355][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.777633][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.778042][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.778347][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.778641][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.778906][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.779211][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.779516][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.779828][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.780114][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.780436][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.780716][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.781024][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.781351][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.781565][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.781850][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.782182][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.782462][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.782808][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.783118][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.783461][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.783815][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.784079][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.784380][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.784679][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.784967][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.785290][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.787551][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.787760][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.787970][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.788308][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.788623][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.788934][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.789269][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.789568][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.789858][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1187.790244][ C1] usbtmc 10-1:16.0: invalid notification: 0 [ 1188.052135][T22923] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1188.198550][T22923] usb 3-1: USB disconnect, device number 101 [ 1188.645862][ T7229] usb 10-1: USB disconnect, device number 11 [ 1191.264845][ T8950] loop5: detected capacity change from 0 to 7 [ 1191.266375][ T8950] loop5: [ 1191.266396][ T8950] loop5: partition table partially beyond EOD, truncated [ 1191.600471][ T8960] kvm: Disabled LAPIC found during irq injection [ 1191.796221][ T8970] fuse: fd is not a fuse device [ 1191.986053][ T31] audit: type=1326 audit(1790771399.519:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.8.13283" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2ae19e159 code=0x0 [ 1193.065968][ T8567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.079181][T26303] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1193.248509][T26303] usb 2-1: Using ep0 maxpacket: 16 [ 1193.249124][T26303] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1193.250659][T26303] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1193.250687][T26303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1193.253903][T26303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.253925][T26303] usb 2-1: Product: syz [ 1193.253939][T26303] usb 2-1: Manufacturer: syz [ 1193.253953][T26303] usb 2-1: SerialNumber: syz [ 1193.322960][T26303] usb 2-1: config 0 descriptor?? [ 1193.331041][T26303] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1193.331073][T26303] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1193.440268][ T8567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.598012][ T8567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.771206][T23336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1193.776279][T23336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1193.795148][T23336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1193.796114][T23336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1193.796746][T23336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1193.854363][ T8567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.944491][T26303] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1193.945167][T26303] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1194.457568][ T8567] bond0 (unregistering): Released all slaves [ 1194.472722][ T8567] bond1 (unregistering): Released all slaves [ 1194.496050][ T8567] bond2 (unregistering): Released all slaves [ 1194.526600][ T9033] fuse: fd is not a fuse device [ 1194.527476][ T8567] bond3 (unregistering): Released all slaves [ 1194.619030][T26303] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1194.619052][T26303] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1194.806332][T26303] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1194.816635][T26303] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1194.816984][T26303] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1194.817343][T26303] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1194.889053][T26303] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1194.965722][T26303] usb 2-1: USB disconnect, device number 79 [ 1195.320742][ T8567] hsr_slave_0: left promiscuous mode [ 1195.322872][ T8567] hsr_slave_1: left promiscuous mode [ 1195.348684][ T8567] veth0_to_team: left promiscuous mode [ 1195.348745][ T8567] veth1_macvtap: left promiscuous mode [ 1195.348770][ T8567] veth0_macvtap: left promiscuous mode [ 1195.348879][ T8567] veth1_vlan: left promiscuous mode [ 1195.352631][ T8567] veth0_vlan: left promiscuous mode [ 1195.888346][ T5625] Bluetooth: hci4: command tx timeout [ 1196.259933][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1196.345176][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.345326][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.345484][ T9019] bridge_slave_0: entered allmulticast mode [ 1196.347458][ T9019] bridge_slave_0: entered promiscuous mode [ 1196.381351][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.381451][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.381572][ T9019] bridge_slave_1: entered allmulticast mode [ 1196.383527][ T9019] bridge_slave_1: entered promiscuous mode [ 1196.460767][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.464011][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.527234][ T9019] team0: Port device team_slave_0 added [ 1196.536893][ T9019] team0: Port device team_slave_1 added [ 1196.574349][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.574364][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.574389][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.576359][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.576373][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.576398][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.796245][ T9019] hsr_slave_0: entered promiscuous mode [ 1196.807779][ T9019] hsr_slave_1: entered promiscuous mode [ 1196.808602][ T9019] debugfs: 'hsr0' already exists in 'hsr' [ 1196.808621][ T9019] Cannot create hsr debugfs directory [ 1197.494937][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1197.728069][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1197.768863][ T9019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1197.774054][ T9019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.775083][ T9019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1197.800042][ T9019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.801008][ T9019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1197.804584][ T9019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.805461][ T9019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1197.840983][ T9019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1197.942453][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.965523][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.968591][ T5625] Bluetooth: hci4: command tx timeout [ 1197.985336][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.985418][T21237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.993180][T21237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.993483][T21237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.105062][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.153434][ T9019] veth0_vlan: entered promiscuous mode [ 1198.167158][ T9019] veth1_vlan: entered promiscuous mode [ 1198.200559][ T9019] veth0_macvtap: entered promiscuous mode [ 1198.204878][ T9019] veth1_macvtap: entered promiscuous mode [ 1198.234365][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.251686][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.299816][T31517] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.300025][T31517] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.300306][T31517] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.300580][T31517] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.382260][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1198.432078][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.432097][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.478671][ T9024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.478687][ T9024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.591130][ T9112] syz.1.13315 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1198.591170][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.1.13315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.591199][ T9112] Tainted: [L]=SOFTLOCKUP [ 1198.591208][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1198.591221][ T9112] Call Trace: [ 1198.591230][ T9112] [ 1198.591239][ T9112] dump_stack_lvl+0xe8/0x150 [ 1198.591283][ T9112] dump_header+0xd3/0x4b0 [ 1198.591313][ T9112] oom_kill_process+0x3ab/0x9e0 [ 1198.591347][ T9112] out_of_memory+0x1064/0x1480 [ 1198.591373][ T9112] ? try_charge_memcg+0xc32/0x15e0 [ 1198.591411][ T9112] ? __pfx_out_of_memory+0x10/0x10 [ 1198.591436][ T9112] ? do_raw_spin_unlock+0xf5/0x200 [ 1198.591475][ T9112] try_charge_memcg+0xcdf/0x15e0 [ 1198.591518][ T9112] ? __pfx_try_charge_memcg+0x10/0x10 [ 1198.591551][ T9112] ? percpu_ref_tryget+0x15/0x180 [ 1198.591590][ T9112] ? __obj_cgroup_charge+0x36/0x2c0 [ 1198.591616][ T9112] __obj_cgroup_charge+0x1fd/0x2c0 [ 1198.591638][ T9112] ? __obj_cgroup_charge+0x36/0x2c0 [ 1198.591663][ T9112] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 1198.591705][ T9112] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 1198.591728][ T9112] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 1198.591748][ T9112] ? sock_alloc_inode+0x2c/0x1a0 [ 1198.591770][ T9112] ? sock_alloc_inode+0x2c/0x1a0 [ 1198.591798][ T9112] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1198.591820][ T9112] sock_alloc_inode+0x2c/0x1a0 [ 1198.591843][ T9112] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1198.591863][ T9112] alloc_inode+0x6a/0x1b0 [ 1198.591893][ T9112] __sock_create+0x12d/0x9d0 [ 1198.591926][ T9112] __sys_socket+0xd6/0x1b0 [ 1198.591954][ T9112] __x64_sys_socket+0x7a/0x90 [ 1198.591979][ T9112] do_syscall_64+0x166/0x520 [ 1198.592007][ T9112] ? trace_irq_disable+0x3b/0x140 [ 1198.592029][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.592050][ T9112] ? clear_bhb_loop+0x70/0xc0 [ 1198.592075][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.592099][ T9112] RIP: 0033:0x7f8dce79e159 [ 1198.592118][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.592136][ T9112] RSP: 002b:00007f8dcf67f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1198.592159][ T9112] RAX: ffffffffffffffda RBX: 00007f8dcea25fa0 RCX: 00007f8dce79e159 [ 1198.592174][ T9112] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1198.592187][ T9112] RBP: 00007f8dce83506b R08: 0000000000000000 R09: 0000000000000000 [ 1198.592200][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.592213][ T9112] R13: 00007f8dcea26038 R14: 00007f8dcea25fa0 R15: 00007f8dceb4fa48 [ 1198.592245][ T9112] [ 1198.592286][ T9112] memory: usage 0kB, limit 0kB, failcnt 38 [ 1198.592299][ T9112] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1198.592314][ T9112] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1198.592327][ T9112] Memory cgroup stats for /syz1/test: [ 1198.592449][ T9112] cache 0 [ 1198.592477][ T9112] rss 0 [ 1198.592485][ T9112] rss_huge 0 [ 1198.592493][ T9112] shmem 0 [ 1198.592501][ T9112] mapped_file 0 [ 1198.592509][ T9112] dirty 0 [ 1198.592517][ T9112] writeback 0 [ 1198.592525][ T9112] workingset_refault_anon 0 [ 1198.592534][ T9112] workingset_refault_file 0 [ 1198.592543][ T9112] swap 0 [ 1198.592550][ T9112] swapcached 0 [ 1198.592558][ T9112] pgpgin 0 [ 1198.592566][ T9112] pgpgout 0 [ 1198.592574][ T9112] pgfault 0 [ 1198.592581][ T9112] pgmajfault 0 [ 1198.592589][ T9112] inactive_anon 0 [ 1198.594044][ T9112] active_anon 0 [ 1198.594056][ T9112] inactive_file 0 [ 1198.594065][ T9112] active_file 0 [ 1198.594073][ T9112] unevictable 0 [ 1198.594081][ T9112] hierarchical_memory_limit 0 [ 1198.594109][ T9112] hierarchical_memsw_limit 9223372036854771712 [ 1198.594120][ T9112] total_cache 0 [ 1198.594127][ T9112] total_rss 0 [ 1198.594135][ T9112] total_rss_huge 0 [ 1198.594143][ T9112] total_shmem 0 [ 1198.594151][ T9112] total_mapped_file 0 [ 1198.594158][ T9112] total_dirty 0 [ 1198.594166][ T9112] total_writeback 0 [ 1198.594174][ T9112] total_workingset_refault_anon 0 [ 1198.594183][ T9112] total_workingset_refault_file 0 [ 1198.594192][ T9112] total_swap 0 [ 1198.594200][ T9112] total_swapcached 0 [ 1198.594208][ T9112] total_pgpgin 0 [ 1198.594215][ T9112] total_pgpgout 0 [ 1198.594223][ T9112] total_pgfault 0 [ 1198.594231][ T9112] total_pgmajfault 0 [ 1198.594239][ T9112] total_inactive_anon 0 [ 1198.594247][ T9112] total_active_anon 0 [ 1198.594256][ T9112] total_inactive_file 0 [ 1198.594271][ T9112] total_active_file 0 [ 1198.594280][ T9112] total_unevictable 0 [ 1198.594288][ T9112] anon_cost 0 [ 1198.594295][ T9112] file_cost 0 [ 1198.594303][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.13315,pid=9111,uid=0 [ 1198.599874][ T9112] Memory cgroup out of memory: Killed process 9111 (syz.1.13315) total-vm:102252kB, anon-rss:1436kB, file-rss:22612kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1198.951083][ T9112] socket: no more sockets [ 1198.968803][ T9119] fuse: fd is not a fuse device [ 1199.697087][ T9148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.048315][ T5625] Bluetooth: hci4: command tx timeout [ 1200.464346][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1201.735986][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13328'. [ 1201.736021][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13328'. [ 1201.896966][ T9211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.128472][ T5625] Bluetooth: hci4: command tx timeout [ 1202.345353][ T9222] fuse: fd is not a fuse device [ 1203.199286][ T31] audit: type=1326 audit(1790771410.739:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.7.13339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0341d9e159 code=0x0 [ 1203.560689][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13342'. [ 1203.560715][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13342'. [ 1203.796192][ T9270] kvm: Disabled LAPIC found during irq injection [ 1203.919977][ T9277] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13347'. [ 1203.926753][ T9277] syzkaller1: entered promiscuous mode [ 1203.926772][ T9277] syzkaller1: entered allmulticast mode [ 1206.239630][ T9323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.294494][ T9323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.559520][ T9323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1206.559544][ T9323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1206.645721][ T9323] veth1_macvtap: left promiscuous mode [ 1206.668521][ T9323] veth0_macvtap: left promiscuous mode [ 1206.669739][ T9323] veth0_macvtap: entered promiscuous mode [ 1206.704826][ T9323] veth1_macvtap: entered promiscuous mode [ 1206.743016][ T9323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1206.764931][ T9323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1206.792108][ T9323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1206.824867][ T9323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1207.303944][ T9323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.326784][ T9323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1207.483217][ T9323] veth0_to_team: entered promiscuous mode [ 1207.606658][ T9323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1207.637020][ T9323] batman_adv: batadv0: Interface activated: gretap1 [ 1207.825314][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13365'. [ 1207.927529][ T9323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.945598][ T9323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1207.993508][ T9323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1208.064064][T21237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.106754][ T59] bond0: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 1208.106829][ T59] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1208.107274][ T59] bond0: active interface up! [ 1208.118779][T21237] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.118893][T21237] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.118959][T21237] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.217604][ T9374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.474630][ T9328] ip6erspan0: left allmulticast mode [ 1208.654752][ T9328] ip6erspan1: left allmulticast mode [ 1209.071746][T22033] openvswitch: cpu_id mismatch with handler threads [ 1209.348305][T21244] openvswitch: cpu_id mismatch with handler threads [ 1209.969367][ T7229] openvswitch: cpu_id mismatch with handler threads [ 1210.394496][ T9024] openvswitch: cpu_id mismatch with handler threads [ 1210.394894][ T9024] openvswitch: cpu_id mismatch with handler threads [ 1211.249691][T22033] openvswitch: cpu_id mismatch with handler threads [ 1211.884751][ T9475] input: syz1 as /devices/virtual/input/input148 [ 1212.031939][ T9479] sctp: [Deprecated]: syz.7.13389 (pid 9479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1212.031939][ T9479] Use struct sctp_sack_info instead [ 1212.426283][ T9484] netlink: 'syz.8.13391': attribute type 10 has an invalid length. [ 1212.490031][ T9491] netlink: 'syz.8.13391': attribute type 10 has an invalid length. [ 1212.548703][ T9484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.553332][ T9484] team0: Port device netdevsim1 added [ 1212.959274][ T9526] syzkaller1: entered promiscuous mode [ 1212.959296][ T9526] syzkaller1: entered allmulticast mode [ 1214.128078][ C1] openvswitch: cpu_id mismatch with handler threads [ 1214.576327][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13410'. [ 1214.901542][ T9581] netlink: 'syz.9.13412': attribute type 10 has an invalid length. [ 1214.934660][ T9581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.960709][ T9581] team0: Port device netdevsim1 added [ 1214.966070][ T9581] netlink: 'syz.9.13412': attribute type 10 has an invalid length. [ 1215.162006][ T9607] fuse: fd is not a fuse device [ 1215.237910][T22033] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1215.398264][T22033] usb 10-1: Using ep0 maxpacket: 16 [ 1215.398983][T22033] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1215.400215][T22033] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 1215.400243][T22033] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.400292][T22033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.405740][T22033] usb 10-1: config 0 descriptor?? [ 1215.422698][T22033] pxrc 10-1:0.0: Could not find endpoint [ 1215.628224][T22033] usb 10-1: USB disconnect, device number 12 [ 1216.032948][ T9634] lo: Caught tx_queue_len zero misconfig [ 1218.438196][T22923] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1218.599135][T22923] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1218.600703][T22923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1218.600792][T22923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1218.600817][T22923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1218.600840][T22923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.600861][T22923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1218.600896][T22923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.635987][ T9690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1218.636372][ T9690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1218.636630][ T9690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1218.682510][T22923] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 1219.072476][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13458'. [ 1219.072548][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13458'. [ 1219.346097][ T9728] ip_tables: iptables: counters copy to user failed while replacing table [ 1219.650916][T22923] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 1219.678398][T22923] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1219.698609][T22923] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1219.745289][T22923] usb 2-1: USB disconnect, device number 80 [ 1219.745384][ C0] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1219.783497][T22923] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1219.801046][T22923] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1219.801851][T22923] mos7720 2-1:1.0: device disconnected [ 1221.182495][ T9780] bond2: entered allmulticast mode [ 1221.209615][ T9782] wireguard0: entered promiscuous mode [ 1221.209635][ T9782] wireguard0: entered allmulticast mode [ 1221.209984][ T9782] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1221.211755][ T9782] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1221.787997][T26310] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1222.049143][ C1] openvswitch: cpu_id mismatch with handler threads [ 1222.077365][ T9807] loop2: detected capacity change from 0 to 7 [ 1222.098348][ T9807] Dev loop2: unable to read RDB block 7 [ 1222.098397][ T9807] loop2: unable to read partition table [ 1222.098612][ T9807] loop2: partition table beyond EOD, truncated [ 1222.098633][ T9807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1222.130697][T26310] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1222.131544][T26310] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1222.131595][T26310] usb 3-1: can't read configurations, error -71 [ 1222.162041][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13487'. [ 1222.208270][ T31] audit: type=1326 audit(1790771429.739:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.9.13485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f798379e159 code=0x0 [ 1225.136956][T26310] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1225.304366][T26310] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1225.308339][T26310] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1225.308365][T26310] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1225.308384][T26310] usb 2-1: config 0 has no interface number 0 [ 1225.310693][T26310] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.310723][T26310] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1225.310748][T26310] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1225.310787][T26310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.401353][T26310] usb 2-1: config 0 descriptor?? [ 1225.402042][ T9876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1226.019751][T26310] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input149 [ 1227.012255][ T5625] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1227.012348][ T5625] Bluetooth: hci2: Injecting HCI hardware error event [ 1227.034617][ T5625] Bluetooth: hci2: hardware error 0x00 [ 1227.627993][T26305] usb 2-1: USB disconnect, device number 81 [ 1227.628118][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1228.636399][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13527'. [ 1228.686072][ T9939] syzkaller1: entered promiscuous mode [ 1228.686096][ T9939] syzkaller1: entered allmulticast mode [ 1229.099957][ T9951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1229.172410][ T5625] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1229.763043][ T9975] input: syz1 as /devices/virtual/input/input150 [ 1229.778232][T22923] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1229.928950][T22923] usb 10-1: Using ep0 maxpacket: 8 [ 1229.929653][T22923] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1229.932467][T22923] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1229.932488][T22923] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1229.932505][T22923] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1229.949199][T22923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.949254][T22923] usb 10-1: Product: syz [ 1229.949274][T22923] usb 10-1: Manufacturer: syz [ 1229.949309][T22923] usb 10-1: SerialNumber: syz [ 1231.022053][T22923] usb 10-1: USB disconnect, device number 13 [ 1232.038044][T22923] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1232.198746][T22923] usb 10-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1232.200074][T22923] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1232.200103][T22923] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1232.200128][T22923] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1232.200153][T22923] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.200174][T22923] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.200213][T22923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.226139][T10006] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1232.226510][T10006] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1232.246818][T10006] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1232.284436][T22923] mos7720 10-1:1.0: Moschip 2 port adapter converter detected [ 1233.235295][T22923] usb 10-1: mos7720: usb_control_msg() failed: -71 [ 1233.312972][T22923] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1233.347168][T22923] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1233.404449][ C0] usb 10-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1233.404823][T22923] usb 10-1: USB disconnect, device number 14 [ 1233.464729][T22923] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1233.492235][T22923] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1233.494799][T22923] mos7720 10-1:1.0: device disconnected [ 1233.630159][T10033] fuse: fd is not a fuse device [ 1233.703516][T10035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1234.417401][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13563'. [ 1234.427040][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13563'. [ 1234.897132][ T31] audit: type=1326 audit(1790771442.429:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.13567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dce79e159 code=0x0 [ 1235.508087][ T31] audit: type=1326 audit(1790771443.039:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.509511][ T31] audit: type=1326 audit(1790771443.049:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.578828][ T31] audit: type=1326 audit(1790771443.109:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.578876][ T31] audit: type=1326 audit(1790771443.109:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.578917][ T31] audit: type=1326 audit(1790771443.109:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.592944][ T31] audit: type=1326 audit(1790771443.119:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.593071][ T31] audit: type=1326 audit(1790771443.119:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.593186][ T31] audit: type=1326 audit(1790771443.119:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1235.613095][ T31] audit: type=1326 audit(1790771443.139:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.9.13572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1236.895541][T10110] netlink: 'syz.1.13584': attribute type 1 has an invalid length. [ 1236.895563][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13584'. [ 1238.690655][ C1] openvswitch: cpu_id mismatch with handler threads [ 1238.698779][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.698846][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.476934][T10160] syzkaller0: Caught tx_queue_len zero misconfig [ 1239.756468][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13616'. [ 1239.771253][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13616'. [ 1239.851756][T10177] fuse: fd is not a fuse device [ 1240.793103][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1240.793122][ T31] audit: type=1326 audit(1790771448.329:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.8.13628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ae19e159 code=0x0 [ 1241.448288][T26310] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1241.597910][T26310] usb 2-1: Using ep0 maxpacket: 16 [ 1241.598474][T26310] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1241.599455][T26310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1241.599482][T26310] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1241.599499][T26310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1241.599520][T26310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.601799][T26310] usb 2-1: config 0 descriptor?? [ 1241.810941][T26310] usbhid 2-1:0.0: can't add hid device: -71 [ 1241.811051][T26310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1241.831995][T26310] usb 2-1: USB disconnect, device number 82 [ 1242.348172][T10236] input: syz1 as /devices/virtual/input/input151 [ 1243.527921][T26305] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1243.677965][T26305] usb 3-1: Using ep0 maxpacket: 8 [ 1243.680535][T26305] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1243.682803][T26305] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1243.682823][T26305] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1243.682841][T26305] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1243.693491][T26305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.693549][T26305] usb 3-1: Product: syz [ 1243.693587][T26305] usb 3-1: Manufacturer: syz [ 1243.693625][T26305] usb 3-1: SerialNumber: syz [ 1243.977600][T26305] usb 3-1: USB disconnect, device number 104 [ 1245.406791][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1245.423244][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1245.489133][T10311] loop5: detected capacity change from 0 to 7 [ 1245.490769][T10311] loop5: [ 1245.490792][T10311] loop5: partition table partially beyond EOD, truncated [ 1245.568465][T22023] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1245.720615][T22023] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1245.721174][T22023] usb 10-1: config 0 has no interfaces? [ 1245.721213][T22023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.723994][T22023] usb 10-1: config 0 descriptor?? [ 1246.006828][ T31] audit: type=1326 audit(1790771453.539:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.007053][ T31] audit: type=1326 audit(1790771453.539:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.019749][ T31] audit: type=1326 audit(1790771453.559:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.020303][ T31] audit: type=1326 audit(1790771453.559:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.021537][ T31] audit: type=1326 audit(1790771453.559:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.024557][ T31] audit: type=1326 audit(1790771453.559:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.172569][T26305] usb 10-1: USB disconnect, device number 15 [ 1246.185383][ T31] audit: type=1326 audit(1790771453.719:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.234718][ T31] audit: type=1326 audit(1790771453.769:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.239873][ T31] audit: type=1326 audit(1790771453.779:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1246.262525][ T31] audit: type=1326 audit(1790771453.799:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.7.13662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0341d9e159 code=0x7ffc0000 [ 1247.404585][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13652'. [ 1247.404623][T10332] netlink: 'syz.7.13652': attribute type 12 has an invalid length. [ 1247.447111][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13652'. [ 1247.447143][T10332] netlink: 'syz.7.13652': attribute type 12 has an invalid length. [ 1247.461739][T10281] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.461842][T10281] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.461925][T10281] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.462016][T10281] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.123614][ T9902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1250.125162][ T9902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1250.128703][ T9902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1250.155815][ T9902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1250.156490][ T9902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1250.355296][T26305] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1250.508168][T26305] usb 3-1: Using ep0 maxpacket: 32 [ 1250.509523][T26305] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1250.510756][T26305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.520845][T26305] usb 3-1: config 0 descriptor?? [ 1250.561655][T26305] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1250.707857][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.708092][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.708230][T10380] bridge_slave_0: entered allmulticast mode [ 1250.710449][T10380] bridge_slave_0: entered promiscuous mode [ 1250.754531][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.757315][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.757426][T10380] bridge_slave_1: entered allmulticast mode [ 1250.790429][T10380] bridge_slave_1: entered promiscuous mode [ 1250.917544][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.944770][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.989331][T10380] team0: Port device team_slave_0 added [ 1250.992378][T10380] team0: Port device team_slave_1 added [ 1251.033106][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.033121][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.033145][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.035396][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.035411][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.035437][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.279415][T10380] hsr_slave_0: entered promiscuous mode [ 1251.280369][T10380] hsr_slave_1: entered promiscuous mode [ 1251.281159][T10380] debugfs: 'hsr0' already exists in 'hsr' [ 1251.281212][T10380] Cannot create hsr debugfs directory [ 1252.199228][T26305] gspca_sunplus: reg_w_riv err -71 [ 1252.199321][T26305] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1252.206136][T26305] usb 3-1: USB disconnect, device number 105 [ 1252.209148][ T5625] Bluetooth: hci0: command tx timeout [ 1252.967333][T10437] netlink: 'syz.2.13690': attribute type 1 has an invalid length. [ 1253.026926][T10437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1253.078711][T10437] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 1253.079674][T10437] netlink: 'syz.2.13690': attribute type 10 has an invalid length. [ 1253.079692][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13690'. [ 1253.079743][T10437] dummy0: entered promiscuous mode [ 1253.081507][T10437] bond3: (slave dummy0): Releasing backup interface [ 1253.141691][T10443] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1253.159528][T10380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1253.178990][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.180262][T10380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1253.208830][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.209763][T10380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1253.215455][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.242941][T10380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1253.246289][T10265] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1253.284580][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.418052][T10279] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1253.680169][T10380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.749385][T10380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.779982][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.780095][T10265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.840008][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.840099][T10265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.891518][T10466] tipc: Failed to remove unknown binding: 66,1,1/678293568:1443790887/1443790889 [ 1254.288566][ T5625] Bluetooth: hci0: command tx timeout [ 1254.422592][T10380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.602811][T10380] veth0_vlan: entered promiscuous mode [ 1254.692802][T10494] fuse: fd is not a fuse device [ 1254.903725][T10380] veth1_vlan: entered promiscuous mode [ 1255.063901][T10380] veth0_macvtap: entered promiscuous mode [ 1255.165816][T10380] veth1_macvtap: entered promiscuous mode [ 1255.440152][T10380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.477526][T10380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.547969][T10280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.548016][T10280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.548051][T10280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.603504][T10280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.901833][T31519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.901855][T31519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.016573][T10273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.016592][T10273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.368052][ T5625] Bluetooth: hci0: command tx timeout [ 1258.452958][ T5625] Bluetooth: hci0: command tx timeout [ 1259.687554][T10265] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.687596][T10265] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.993876][T10265] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.993920][T10265] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.226661][T10265] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.226699][T10265] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.329204][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1260.351460][ T9902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1260.367138][ T9902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1260.379682][ T9902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1260.382806][ T9902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1260.385601][ T9902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1260.512605][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1260.640724][T10265] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.640786][T10265] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.860559][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1260.860603][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1260.861375][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1260.861408][ T10] usb 10-1: can't read configurations, error -71 [ 1261.241275][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13736'. [ 1261.343500][T10685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13737'. [ 1261.343527][T10685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13737'. [ 1261.469123][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 1261.469142][ T31] audit: type=1326 audit(1790771468.999:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10692 comm="syz.9.13739" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x0 [ 1261.582858][T10265] bridge_slave_1: left allmulticast mode [ 1261.582884][T10265] bridge_slave_1: left promiscuous mode [ 1261.583074][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.586985][T10265] bridge_slave_0: left allmulticast mode [ 1261.587007][T10265] bridge_slave_0: left promiscuous mode [ 1261.587187][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.248580][T10265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.253428][T10265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.256966][T10265] bond0 (unregistering): Released all slaves [ 1262.549615][ T9902] Bluetooth: hci4: command tx timeout [ 1262.616317][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.616481][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.616593][T10665] bridge_slave_0: entered allmulticast mode [ 1262.618792][T10665] bridge_slave_0: entered promiscuous mode [ 1262.621238][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.621387][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.621520][T10665] bridge_slave_1: entered allmulticast mode [ 1262.623259][T10665] bridge_slave_1: entered promiscuous mode [ 1262.770443][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.772752][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.867318][T10665] team0: Port device team_slave_0 added [ 1262.930071][T10665] team0: Port device team_slave_1 added [ 1263.032271][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.032305][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.032331][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.226790][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.226808][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.226832][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.464647][T10265] hsr_slave_0: left promiscuous mode [ 1263.467204][T10265] hsr_slave_1: left promiscuous mode [ 1263.471560][T10265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.471620][T10265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.499057][T10265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.499147][T10265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.549625][T10265] veth1_macvtap: left promiscuous mode [ 1263.549657][T10265] veth0_macvtap: left promiscuous mode [ 1263.551858][T10265] veth1_vlan: left promiscuous mode [ 1263.551927][T10265] veth0_vlan: left promiscuous mode [ 1263.910604][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13759'. [ 1263.910630][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13759'. [ 1264.247013][T10265] team0 (unregistering): Port device team_slave_1 removed [ 1264.282783][T10265] team0 (unregistering): Port device team_slave_0 removed [ 1264.524386][T10761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.608565][ T9902] Bluetooth: hci4: command tx timeout [ 1264.724210][T10665] hsr_slave_0: entered promiscuous mode [ 1264.727146][T10665] hsr_slave_1: entered promiscuous mode [ 1264.733543][T10665] debugfs: 'hsr0' already exists in 'hsr' [ 1264.733562][T10665] Cannot create hsr debugfs directory [ 1264.894236][T10756] lo: entered promiscuous mode [ 1264.894389][T10756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1265.755817][T10665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1265.761392][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.764200][T10665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1265.774734][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.776871][T10665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1265.800300][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.801422][T10665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1265.804859][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.932170][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.952988][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.969790][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.969856][T10265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.971558][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.971635][T10265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.093864][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.173039][T10665] veth0_vlan: entered promiscuous mode [ 1266.184438][T10665] veth1_vlan: entered promiscuous mode [ 1266.223028][T10665] veth0_macvtap: entered promiscuous mode [ 1266.235194][T10665] veth1_macvtap: entered promiscuous mode [ 1266.265119][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.279106][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.299295][T21248] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.299334][T21248] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.299375][T21248] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.299409][T21248] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.541762][T10265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.541783][T10265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.619736][T10279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.619773][T10279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.688721][ T9902] Bluetooth: hci4: command tx timeout [ 1266.802370][T10828] syzkaller1: entered promiscuous mode [ 1266.802392][T10828] syzkaller1: entered allmulticast mode [ 1267.924053][T10852] fuse: fd is not a fuse device [ 1268.312356][ T7229] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1268.480433][ T7229] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1268.483568][ T7229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.483597][ T7229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.483619][ T7229] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1268.483669][ T7229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.549993][ T7229] usb 10-1: config 0 descriptor?? [ 1268.699951][ T31] audit: type=1800 audit(1790771476.239:2520): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13767" name="file0" dev="tmpfs" ino=8878 res=0 errno=0 [ 1268.769739][ T9902] Bluetooth: hci4: command tx timeout [ 1268.970034][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970096][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970121][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970154][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970179][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970204][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970229][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970254][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970278][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.970302][ T7229] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 1268.977323][ T7229] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1269.084635][T10870] kvm: pic: non byte write [ 1269.084843][T10870] kvm: pic: non byte write [ 1269.084990][T10870] kvm: pic: non byte write [ 1269.087756][T10870] kvm: pic: non byte write [ 1269.103111][T10870] kvm: pic: non byte write [ 1269.103461][T10870] kvm: pic: non byte write [ 1269.103823][T10870] kvm: pic: non byte write [ 1269.104176][T10870] kvm: pic: non byte write [ 1269.109746][T10870] kvm: pic: non byte write [ 1269.110125][T10870] kvm: pic: non byte write [ 1270.972316][ T7229] usb 10-1: USB disconnect, device number 18 [ 1271.400357][T10923] TC_ACT_REPEAT abuse ? [ 1271.749103][T10935] netlink: 'syz.8.13790': attribute type 1 has an invalid length. [ 1271.801353][T10935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1271.882331][T10935] bond6: entered promiscuous mode [ 1271.914701][T10935] bond6: (slave dummy0): making interface the new active one [ 1271.914725][T10935] dummy0: entered promiscuous mode [ 1271.925572][T10935] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1271.956005][T10934] bond6: left promiscuous mode [ 1271.956026][T10934] dummy0: left promiscuous mode [ 1272.483235][T10955] lo: entered promiscuous mode [ 1272.500737][T10955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1272.609196][ C1] openvswitch: cpu_id mismatch with handler threads [ 1272.650786][T10961] netlink: 'syz.8.13799': attribute type 1 has an invalid length. [ 1272.685586][T10961] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1272.711519][T10961] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 1272.731538][T10961] bond6: (slave dummy0): Releasing active interface [ 1272.743222][T10961] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1272.764447][T10961] netlink: 'syz.8.13799': attribute type 10 has an invalid length. [ 1272.764466][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13799'. [ 1272.766724][T10961] dummy0: entered promiscuous mode [ 1272.789833][T10280] bond7: (slave dummy0): link status up again after 0 ms [ 1272.801119][T10273] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1272.812517][T10961] bond7: (slave dummy0): Releasing backup interface [ 1272.939174][T30547] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1275.581507][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1275.581534][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1275.581550][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1276.116424][T11042] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1276.116455][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1276.116568][T11042] vhci_hcd vhci_hcd.0: Device attached [ 1276.159198][T11042] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 1276.159223][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1276.159262][T11042] vhci_hcd vhci_hcd.0: Device attached [ 1276.168355][T11042] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 1276.168412][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1276.168549][T11042] vhci_hcd vhci_hcd.0: Device attached [ 1276.233141][T11048] vhci_hcd: connection closed [ 1276.233243][T11046] vhci_hcd: connection closed [ 1276.233438][T11043] vhci_hcd: connection closed [ 1276.233806][T10273] vhci_hcd vhci_hcd.8: stop threads [ 1276.233830][T10273] vhci_hcd vhci_hcd.8: release socket [ 1276.233857][T10273] vhci_hcd vhci_hcd.8: disconnect device [ 1276.236325][T10273] vhci_hcd vhci_hcd.8: stop threads [ 1276.236371][T10273] vhci_hcd vhci_hcd.8: release socket [ 1276.236391][T10273] vhci_hcd vhci_hcd.8: disconnect device [ 1276.253336][T10273] vhci_hcd vhci_hcd.8: stop threads [ 1276.253358][T10273] vhci_hcd vhci_hcd.8: release socket [ 1276.253379][T10273] vhci_hcd vhci_hcd.8: disconnect device [ 1276.752597][T11064] xt_hashlimit: size too large, truncated to 1048576 [ 1276.997305][T11074] netlink: 'syz.0.13831': attribute type 1 has an invalid length. [ 1277.010481][T11074] hsr0: entered promiscuous mode [ 1277.034929][T11073] hsr0: left promiscuous mode [ 1277.106493][T11076] netlink: 'syz.7.13832': attribute type 1 has an invalid length. [ 1277.354991][T11087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.527028][T11098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.542250][T11098] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1277.555488][T11098] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1277.731785][T11106] netlink: 'syz.9.13846': attribute type 1 has an invalid length. [ 1277.829507][T11106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1277.830843][T11110] bond1: entered promiscuous mode [ 1277.914937][T11106] bond1: (slave dummy0): making interface the new active one [ 1277.914962][T11106] dummy0: entered promiscuous mode [ 1277.973311][T11106] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1278.057046][T11105] bond1: left promiscuous mode [ 1278.057071][T11105] dummy0: left promiscuous mode [ 1279.263337][T11149] netlink: 'syz.7.13862': attribute type 1 has an invalid length. [ 1279.301627][T11149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1279.351492][T11152] loop4: detected capacity change from 0 to 7 [ 1279.370302][T11149] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1279.395259][T11152] loop4: [ 1279.395285][T11152] loop4: partition table partially beyond EOD, truncated [ 1279.418460][T10281] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1279.454662][T11149] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 1279.469287][T11149] netlink: 'syz.7.13862': attribute type 10 has an invalid length. [ 1279.469308][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13862'. [ 1279.520373][T11149] dummy0: entered promiscuous mode [ 1279.534492][T10280] bond1: (slave dummy0): link status up again after 0 ms [ 1279.548875][T10281] bond1: (slave dummy0): link status up again after 0 ms [ 1279.548922][T10281] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1279.550009][T11149] bond1: (slave dummy0): Releasing backup interface [ 1280.538061][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1280.666506][T11177] fuse: fd is not a fuse device [ 1280.692599][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1280.694733][ T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1280.696017][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1280.696066][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.701997][ T10] usb 10-1: config 0 descriptor?? [ 1280.923266][ T10] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1281.028214][T11186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1281.028241][T11186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1281.029713][T11186] vhci_hcd vhci_hcd.0: Device attached [ 1281.033935][T11186] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 1281.033958][T11186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1281.034047][T11186] vhci_hcd vhci_hcd.0: Device attached [ 1281.037103][T11186] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 1281.037123][T11186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1281.037176][T11186] vhci_hcd vhci_hcd.0: Device attached [ 1281.103956][T11188] bridge_slave_0: left allmulticast mode [ 1281.103980][T11188] bridge_slave_0: left promiscuous mode [ 1281.104200][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.135004][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13876'. [ 1281.136160][ T31] audit: type=1326 audit(1790771488.669:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.7.13876" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586919e159 code=0x0 [ 1281.170227][T11188] bridge_slave_1: left allmulticast mode [ 1281.170302][T11188] bridge_slave_1: left promiscuous mode [ 1281.185512][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.200772][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13876'. [ 1281.253907][T11188] bond0: (slave bond_slave_0): Releasing backup interface [ 1281.257693][T11188] bond0: (slave bond_slave_1): Releasing backup interface [ 1281.279306][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1281.282280][T11202] netlink: 'syz.0.13877': attribute type 1 has an invalid length. [ 1281.285828][T11188] team0: Port device team_slave_0 removed [ 1281.295085][T11188] team0: Port device team_slave_1 removed [ 1281.296904][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.296949][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.322257][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.322307][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.345838][T11188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1281.406530][T11193] vhci_hcd: connection closed [ 1281.410956][T11191] vhci_hcd: connection closed [ 1281.411140][T11189] vhci_hcd: connection reset by peer [ 1281.411351][T10279] vhci_hcd vhci_hcd.2: stop threads [ 1281.411370][T10279] vhci_hcd vhci_hcd.2: release socket [ 1281.411450][T10279] vhci_hcd vhci_hcd.2: disconnect device [ 1281.412445][T10279] vhci_hcd vhci_hcd.2: stop threads [ 1281.412463][T10279] vhci_hcd vhci_hcd.2: release socket [ 1281.412549][T10279] vhci_hcd vhci_hcd.2: disconnect device [ 1281.412764][T10279] vhci_hcd vhci_hcd.2: stop threads [ 1281.412778][T10279] vhci_hcd vhci_hcd.2: release socket [ 1281.412854][T10279] vhci_hcd vhci_hcd.2: disconnect device [ 1281.476306][ T5351] usb 10-1: USB disconnect, device number 19 [ 1282.082636][T11221] 0: reclassify loop, rule prio 0, protocol 800 [ 1282.421113][T11234] batman_adv: batadv0: Adding interface: veth0 [ 1282.421131][T11234] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.421168][T11234] batman_adv: batadv0: Interface activated: veth0 [ 1282.427552][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.427573][T11234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.444454][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.444497][T11234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.504596][T11234] batman_adv: batadv0: Interface deactivated: veth0 [ 1282.504618][T11234] batman_adv: batadv0: Removing interface: veth0 [ 1282.996243][ T31] audit: type=1800 audit(1790771490.529:2522): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13895" name="nullb0" dev="tmpfs" ino=8602 res=0 errno=0 [ 1283.503361][T11261] netlink: 'syz.0.13899': attribute type 1 has an invalid length. [ 1283.563276][T11264] netlink: 'syz.0.13899': attribute type 10 has an invalid length. [ 1283.563298][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13899'. [ 1283.563472][T11264] dummy0: entered promiscuous mode [ 1284.183069][T11280] fuse: fd is not a fuse device [ 1284.370141][T11284] netlink: 'syz.8.13908': attribute type 1 has an invalid length. [ 1284.492877][T11284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1284.529651][T11290] bond8: (slave geneve4): making interface the new active one [ 1284.546666][T11290] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1284.677710][T11297] @0Ùîô: renamed from dummy0 (while UP) [ 1284.797906][ T5351] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1284.850886][T11304] fuse: fd is not a fuse device [ 1284.948429][ T5351] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1284.949393][ T5351] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1284.949419][ T5351] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.949438][ T5351] usb 3-1: config 0 has no interface number 0 [ 1284.949477][ T5351] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.949499][ T5351] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1284.949521][ T5351] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1284.949560][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.952171][ T5351] usb 3-1: config 0 descriptor?? [ 1285.049045][ T5351] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1285.340038][ T5351] usb 3-1: USB disconnect, device number 106 [ 1285.341046][T21241] usb 3-1: Failed to submit usb control message: -71 [ 1285.341102][T21241] usb 3-1: unable to send the bmi data to the device: -71 [ 1285.341120][T21241] usb 3-1: unable to get target info from device [ 1285.341147][T21241] usb 3-1: could not get target info (-71) [ 1285.341234][T21241] usb 3-1: could not probe fw (-71) [ 1286.363430][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1287.095474][T11372] bond3: entered allmulticast mode [ 1287.095499][T11372] gre2: entered allmulticast mode [ 1287.098510][T31520] IPVS: starting estimator thread 0... [ 1287.118106][T11373] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1287.136825][T11372] pimreg: entered allmulticast mode [ 1287.188001][T11374] IPVS: using max 33 ests per chain, 79200 per kthread [ 1287.188969][T11371] bond3: left allmulticast mode [ 1287.188991][T11371] gre2: left allmulticast mode [ 1287.897903][ T7229] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1288.048192][ T7229] usb 3-1: Using ep0 maxpacket: 32 [ 1288.048861][ T7229] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1288.049779][ T7229] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1288.049801][ T7229] usb 3-1: config 0 has no interface number 0 [ 1288.049836][ T7229] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1288.049860][ T7229] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1288.051695][ T7229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.051718][ T7229] usb 3-1: Product: syz [ 1288.051732][ T7229] usb 3-1: Manufacturer: syz [ 1288.051746][ T7229] usb 3-1: SerialNumber: syz [ 1288.054368][ T7229] usb 3-1: config 0 descriptor?? [ 1288.508331][T11407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.815663][ T7229] appletouch 3-1:0.85: Geyser mode initialized. [ 1288.825923][ T7229] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input152 [ 1288.841864][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13957'. [ 1288.846649][ C0] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1289.048749][T26310] usb 3-1: USB disconnect, device number 107 [ 1289.048783][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1289.100631][ T4673] udevd[4673]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1289.100746][ T4673] udevd[4673]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1289.107692][T26310] appletouch 3-1:0.85: input: appletouch disconnected [ 1289.506444][T31520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.506481][T31520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.875342][T31520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.875378][T31520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.966159][T11435] @0Ùîô: renamed from dummy0 (while UP) [ 1290.081767][T31520] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 1290.085293][T31520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.085325][T31520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.221999][T31520] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1290.222944][T31520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.222976][T31520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.625318][T11456] netlink: 'syz.2.13974': attribute type 1 has an invalid length. [ 1290.729744][T11456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1290.807415][T11456] bond4: (slave geneve2): making interface the new active one [ 1290.820011][T11456] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1290.828484][T21250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.846820][T31513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.846859][T31513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.846894][T31513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.065204][T31520] bridge_slave_1: left allmulticast mode [ 1291.065233][T31520] bridge_slave_1: left promiscuous mode [ 1291.065463][T31520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.093155][T11471] fuse: fd is not a fuse device [ 1291.114028][T31520] bridge_slave_0: left allmulticast mode [ 1291.114075][T31520] bridge_slave_0: left promiscuous mode [ 1291.114254][T31520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.377182][T31520] erspan0 (unregistering): left promiscuous mode [ 1291.554105][T31520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.580673][T31520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.599256][T31520] bond0 (unregistering): Released all slaves [ 1292.470184][T31520] hsr_slave_0: left promiscuous mode [ 1292.474299][T31520] hsr_slave_1: left promiscuous mode [ 1292.475317][T31520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.475353][T31520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.498936][T31520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.498982][T31520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.572334][T31520] veth1_macvtap: left promiscuous mode [ 1292.572370][T31520] veth0_macvtap: left promiscuous mode [ 1292.572491][T31520] veth1_vlan: left promiscuous mode [ 1292.572558][T31520] veth0_vlan: left promiscuous mode [ 1292.898864][T11517] fuse: fd is not a fuse device [ 1293.256108][T31520] team0 (unregistering): Port device team_slave_1 removed [ 1293.285503][T31520] team0 (unregistering): Port device team_slave_0 removed [ 1293.644612][T11511] syz_tun: entered allmulticast mode [ 1293.644815][T11511] syz_tun: left allmulticast mode [ 1293.671943][T11513] pimreg: entered allmulticast mode [ 1293.675733][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1294.322186][T11541] netlink: 'syz.9.13996': attribute type 1 has an invalid length. [ 1294.489749][T11541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1294.666758][T11546] bond2: (slave geneve2): making interface the new active one [ 1294.686165][T11546] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1294.705435][T11550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.781003][T10280] IPVS: starting estimator thread 0... [ 1294.888472][T11553] IPVS: using max 38 ests per chain, 91200 per kthread [ 1295.734785][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1295.806697][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14008'. [ 1296.053474][ T31] audit: type=1800 audit(1790771503.589:2523): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14009" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1296.105591][T11597] batman_adv: batadv0: Adding interface: veth0 [ 1296.105608][T11597] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.105639][T11597] batman_adv: batadv0: Interface activated: veth0 [ 1296.167132][T11597] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1296.167149][T11597] batman_adv: batadv0: Removing interface: syzkaller0 [ 1296.184617][T11597] batman_adv: batadv0: Interface deactivated: gretap1 [ 1296.184636][T11597] batman_adv: batadv0: Removing interface: gretap1 [ 1296.216785][T11597] batman_adv: batadv0: Interface deactivated: veth0 [ 1296.216806][T11597] batman_adv: batadv0: Removing interface: veth0 [ 1297.136804][ T31] audit: type=1326 audit(1790771504.669:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.136920][ T31] audit: type=1326 audit(1790771504.669:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.164459][ T31] audit: type=1326 audit(1790771504.679:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.164509][ T31] audit: type=1326 audit(1790771504.679:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.164550][ T31] audit: type=1326 audit(1790771504.679:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.164589][ T31] audit: type=1326 audit(1790771504.689:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.219164][ T31] audit: type=1326 audit(1790771504.759:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798379e159 code=0x7ffc0000 [ 1297.219212][ T31] audit: type=1326 audit(1790771504.759:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f798379dec2 code=0x7ffc0000 [ 1297.229267][ T31] audit: type=1326 audit(1790771504.759:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.9.14032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f798379df57 code=0x7ffc0000 [ 1297.558003][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1298.090485][T11665] batman_adv: batadv0: Adding interface: veth0 [ 1298.090504][T11665] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.090710][T11665] batman_adv: batadv0: Interface activated: veth0 [ 1298.146195][T11665] batman_adv: batadv0: Interface deactivated: veth0 [ 1298.146218][T11665] batman_adv: batadv0: Removing interface: veth0 [ 1298.773010][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14037'. [ 1299.320978][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1299.988485][T26305] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1300.130163][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.130224][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.149529][T26305] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1300.155544][T26305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.155650][T26305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.193190][T26305] usb 10-1: config 0 descriptor?? [ 1300.411133][T26305] usbhid 10-1:0.0: can't add hid device: -71 [ 1300.411231][T26305] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1300.419327][T26305] usb 10-1: USB disconnect, device number 20 [ 1300.628596][T11723] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14048'. [ 1300.628882][T11723] unsupported nlmsg_type 40 [ 1300.887871][T22023] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1301.061204][T22023] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1301.062403][T22023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.062447][T22023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.080426][T22023] usb 10-1: config 0 descriptor?? [ 1301.098591][T11737] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1301.582192][T11754] fuse: fd is not a fuse device [ 1301.959696][T22023] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 1301.964607][T22023] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input153 [ 1302.297709][ T5351] usb 10-1: USB disconnect, device number 21 [ 1302.297731][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1302.640382][ T31] kauditd_printk_skb: 175 callbacks suppressed [ 1302.640401][ T31] audit: type=1800 audit(1790771510.179:2708): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.14075" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1304.083928][T11823] syz_tun: entered promiscuous mode [ 1304.084088][T11823] vlan3: entered promiscuous mode [ 1305.395788][T11853] bridge_slave_0: left allmulticast mode [ 1305.395815][T11853] bridge_slave_0: left promiscuous mode [ 1305.396371][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.426009][T11853] bridge_slave_1: left allmulticast mode [ 1305.426031][T11853] bridge_slave_1: left promiscuous mode [ 1305.426959][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.482291][T11853] bond0: (slave bond_slave_0): Releasing backup interface [ 1305.512968][T11853] bond0: (slave bond_slave_1): Releasing backup interface [ 1305.533994][T11853] team0: Port device team_slave_0 removed [ 1305.548747][T11853] team0: Port device team_slave_1 removed [ 1305.549594][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.549615][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.556012][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.556033][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.602715][T11853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1305.880975][T11871] picdev_write: 1 callbacks suppressed [ 1305.880993][T11871] kvm: pic: non byte write [ 1306.684399][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14112'. [ 1306.907132][ T31] audit: type=1800 audit(1790771514.439:2709): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14115" name="nullb0" dev="tmpfs" ino=8602 res=0 errno=0 [ 1307.323807][T11928] loop2: detected capacity change from 0 to 7 [ 1307.324645][T11928] loop2: [ 1307.324667][T11928] loop2: partition table partially beyond EOD, truncated [ 1307.646590][T11935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1307.746346][T11940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.807485][T11937] kvm: pic: non byte write [ 1307.892734][T11947] tipc: Started in network mode [ 1307.892755][T11947] tipc: Node identity 1000001, cluster identity 4369 [ 1307.892768][T11947] tipc: Node number set to 16777217 [ 1307.925278][T11947] tipc: New replicast peer: 127.0.0.1 [ 1307.933485][T11947] tipc: Enabled bearer , priority 10 [ 1307.983569][T11949] bond4: option mode: unable to set because the bond device is up [ 1308.140315][T11951] netlink: 'syz.9.14132': attribute type 1 has an invalid length. [ 1308.179008][T11951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1308.211981][T11951] bond3: (slave erspan1): making interface the new active one [ 1308.217192][T11951] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1308.906305][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14140'. [ 1308.906663][T11976] tipc: Resetting bearer [ 1309.034274][T11976] tipc: Disabling bearer [ 1310.617638][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14159'. [ 1310.667396][T12025] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1310.828108][T12035] syzkaller0: entered promiscuous mode [ 1312.731875][T12109] KVM: debugfs: duplicate directory 12109-6 [ 1312.916213][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14182'. [ 1313.445104][T12141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1313.518546][T12145] team0: Device wg1 is of different type [ 1313.524971][T12145] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1313.712973][T12149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1314.924142][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14197'. [ 1315.176847][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14211'. [ 1315.603868][T12220] tipc: Started in network mode [ 1315.603892][T12220] tipc: Node identity 1000001, cluster identity 4369 [ 1315.603905][T12220] tipc: Node number set to 16777217 [ 1315.611095][T12220] tipc: New replicast peer: 127.0.0.1 [ 1315.630621][T12220] tipc: Enabled bearer , priority 10 [ 1315.714469][T12224] fuse: fd is not a fuse device [ 1315.989878][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14212'. [ 1316.425099][T12253] netlink: 'syz.7.14216': attribute type 1 has an invalid length. [ 1316.518924][T12253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.057518][T12374] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1320.912319][T12381] input: syz1 as /devices/virtual/input/input154 [ 1322.700048][T12427] fuse-io-uring is disabled by module parameter [ 1322.700091][T12427] fuse-io-uring is disabled by module parameter [ 1322.700122][T12427] fuse-io-uring is disabled by module parameter [ 1322.700152][T12427] fuse-io-uring is disabled by module parameter [ 1322.700182][T12427] fuse-io-uring is disabled by module parameter [ 1322.700212][T12427] fuse-io-uring is disabled by module parameter [ 1322.701826][T12427] fuse-io-uring is disabled by module parameter [ 1322.701861][T12427] fuse-io-uring is disabled by module parameter [ 1322.701891][T12427] fuse-io-uring is disabled by module parameter [ 1322.701921][T12427] fuse-io-uring is disabled by module parameter [ 1323.500621][ T9902] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1324.058252][T22033] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1324.208659][T22033] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1324.210096][T22033] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 1324.210120][T22033] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.210138][T22033] usb 10-1: config 0 has no interfaces? [ 1324.210166][T22033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.213222][T22033] usb 10-1: config 0 descriptor?? [ 1324.427238][T22033] usb 10-1: USB disconnect, device number 22 [ 1325.638684][T12461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.208276][T12481] futex_wake_op: syz.0.14297 tries to shift op by 144; fix this program [ 1327.793442][T12520] fuse: fd is not a fuse device [ 1327.877273][T12524] netlink: 'syz.9.14314': attribute type 1 has an invalid length. [ 1327.940161][T12524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1327.979217][T12524] bond4: (slave gretap1): making interface the new active one [ 1327.980712][T12524] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1328.276451][T12542] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1329.272488][ T31] audit: type=1326 audit(1790771536.809:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.0.14337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9df9e159 code=0x0 [ 1330.045310][T12617] netlink: 72 bytes leftover after parsing attributes in process `syz.9.14349'. [ 1330.357386][T26315] hid_parser_main: 4 callbacks suppressed [ 1330.357407][T26315] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 1330.383868][T26315] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1331.826472][T12674] netlink: 72 bytes leftover after parsing attributes in process `syz.7.14365'. [ 1332.026277][T12681] fuse: fd is not a fuse device [ 1333.820625][T26315] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1333.978435][T26315] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1333.979817][T26315] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1333.979842][T26315] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.979860][T26315] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1333.979900][T26315] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.981638][T26315] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1333.981662][T26315] usb 10-1: Product: syz [ 1333.981677][T26315] usb 10-1: Manufacturer: syz [ 1334.063648][T26315] cdc_wdm 10-1:1.0: skipping garbage [ 1334.063669][T26315] cdc_wdm 10-1:1.0: skipping garbage [ 1334.065648][T26315] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1334.065666][T26315] cdc_wdm 10-1:1.0: Unknown control protocol [ 1334.267534][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.267702][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.268003][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.268026][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.274928][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.274954][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.281256][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.281279][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.288285][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.288308][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.294585][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.294606][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.301611][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.301636][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.301924][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.301944][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.302149][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.302172][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.302379][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1334.302399][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1334.336691][T26315] usb 10-1: USB disconnect, device number 23 [ 1334.336784][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1334.678688][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14388'. [ 1334.726494][T12755] fuse: fd is not a fuse device [ 1334.746079][T12752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1334.786901][T12756] macvlan2: entered promiscuous mode [ 1334.786928][T12756] macvlan2: entered allmulticast mode [ 1334.831306][T12756] bond1: entered promiscuous mode [ 1334.833350][T12756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1334.893688][T12756] bond1: left promiscuous mode [ 1335.379271][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14397'. [ 1335.379296][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14397'. [ 1335.477954][T26315] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1335.512074][T21241] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.512118][T21241] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.568629][T31520] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.571120][T21248] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.638140][T26315] usb 3-1: Using ep0 maxpacket: 8 [ 1335.638926][T26315] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1335.640552][T26315] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1335.640595][T26315] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1335.640614][T26315] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1335.640637][T26315] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1335.640657][T26315] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1335.640694][T26315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.805326][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14399'. [ 1335.941180][T26315] usb 3-1: GET_CAPABILITIES returned 0 [ 1335.941238][T26315] usbtmc 3-1:16.0: can't read capabilities [ 1336.035889][T12782] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1336.174708][T26305] usb 3-1: USB disconnect, device number 108 [ 1336.924929][T12813] batman_adv: batadv0: Adding interface: syzkaller0 [ 1336.925007][T12813] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.925421][T12813] batman_adv: batadv0: Interface activated: syzkaller0 [ 1337.015669][T12813] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1337.094168][T12813] batman_adv: batadv0: Removing interface: syzkaller0 [ 1337.650882][T12844] netlink: 48 bytes leftover after parsing attributes in process `syz.9.14421'. [ 1337.691855][T12844] bond6: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1337.724694][T12844] netlink: 48 bytes leftover after parsing attributes in process `syz.9.14421'. [ 1337.724727][T12844] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 1338.267340][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14428'. [ 1338.267369][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14428'. [ 1338.267386][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14428'. [ 1339.111766][T12896] netlink: 64 bytes leftover after parsing attributes in process `syz.8.14440'. [ 1339.308920][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14432'. [ 1340.218679][T22033] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1340.300480][T12919] fuse: fd is not a fuse device [ 1340.369471][T22033] usb 10-1: Using ep0 maxpacket: 8 [ 1340.442474][T12921] netlink: 'syz.8.14449': attribute type 1 has an invalid length. [ 1340.473769][T22033] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1340.473818][T22033] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1340.474620][T22033] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1340.474653][T22033] usb 10-1: can't read configurations, error -71 [ 1341.089270][ C1] openvswitch: cpu_id mismatch with handler threads [ 1341.264078][T12954] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1341.375657][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14461'. [ 1341.395623][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14461'. [ 1341.395941][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14461'. [ 1341.414762][T21241] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.419905][T31520] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.420034][T31520] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.420140][T31520] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.528890][T22033] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1341.699802][T22033] usb 10-1: Using ep0 maxpacket: 8 [ 1341.701843][T22033] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1341.703238][T22033] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1341.703291][T22033] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1341.703330][T22033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1341.703363][T22033] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1341.703395][T22033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1341.703421][T22033] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.703471][T22033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.929192][T22033] usb 10-1: usb_control_msg returned -32 [ 1341.929240][T22033] usbtmc 10-1:16.0: can't read capabilities [ 1342.139619][T12979] netlink: 'syz.0.14470': attribute type 1 has an invalid length. [ 1342.168670][T12979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1342.189174][T12979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1342.193138][T12979] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1342.193780][T12979] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1342.245516][T12982] mac80211_hwsim hwsim63 wlan1: entered promiscuous mode [ 1342.260425][T12982] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1342.296437][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1342.296605][T12983] usbtmc 10-1:16.0: Unable to send data, error -71 [ 1342.297134][T12983] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 1342.374429][T22033] usb 10-1: USB disconnect, device number 25 [ 1342.783398][T12997] syzkaller1: entered promiscuous mode [ 1342.783413][T12997] syzkaller1: entered allmulticast mode [ 1342.963399][T13001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14477'. [ 1342.963424][T13001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14477'. [ 1342.963440][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14477'. [ 1342.976472][T13001] Failed to decode metaid 3 dlen 0 err -22 [ 1343.144674][T13007] netlink: 'syz.2.14480': attribute type 1 has an invalid length. [ 1343.180874][T13007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1343.203917][T13007] bond5: (slave gretap2): making interface the new active one [ 1343.218355][T13007] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1343.397946][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1343.548000][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1343.548675][ T10] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1343.550345][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.550369][ T10] usb 10-1: config 0 has no interfaces? [ 1343.552389][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.552413][ T10] usb 10-1: Product: syz [ 1343.552430][ T10] usb 10-1: Manufacturer: syz [ 1343.552446][ T10] usb 10-1: SerialNumber: syz [ 1343.555383][ T10] usb 10-1: config 0 descriptor?? [ 1343.794504][T26315] usb 10-1: USB disconnect, device number 26 [ 1344.937862][T22033] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1345.098165][T22033] usb 3-1: Using ep0 maxpacket: 32 [ 1345.100144][T22033] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1345.102015][T22033] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1345.102064][T22033] usb 3-1: config 0 has no interface number 0 [ 1345.102105][T22033] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1345.102127][T22033] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1345.104299][T22033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.104326][T22033] usb 3-1: Product: syz [ 1345.104343][T22033] usb 3-1: Manufacturer: syz [ 1345.104375][T22033] usb 3-1: SerialNumber: syz [ 1345.107504][T22033] usb 3-1: config 0 descriptor?? [ 1345.126872][T22033] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1345.127438][T22033] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1345.391711][T22033] usb 3-1: USB disconnect, device number 109 [ 1345.685784][T13064] fuse: fd is not a fuse device [ 1346.298557][T13083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.184142][T13110] netlink: 15143 bytes leftover after parsing attributes in process `syz.0.14524'. [ 1347.197997][T26315] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1347.358075][T26315] usb 10-1: Using ep0 maxpacket: 32 [ 1347.358592][T26315] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1347.359473][T26315] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1347.361971][T26315] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1347.361994][T26315] usb 10-1: Product: syz [ 1347.362009][T26315] usb 10-1: Manufacturer: syz [ 1347.362044][T26315] usb 10-1: SerialNumber: syz [ 1347.367139][T26315] usb 10-1: config 0 descriptor?? [ 1347.367848][T13099] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1347.384244][T26315] hub 10-1:0.0: bad descriptor, ignoring hub [ 1347.384268][T26315] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1347.663809][T13125] fuse: fd is not a fuse device [ 1347.711801][T22033] usb 10-1: USB disconnect, device number 27 [ 1347.880324][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14535'. [ 1347.882574][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14535'. [ 1347.883265][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14535'. [ 1348.006497][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14539'. [ 1348.235651][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14543'. [ 1348.249723][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14543'. [ 1348.259973][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14543'. [ 1348.703691][T13169] ================================================================== [ 1348.703715][T13169] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 1348.703752][T13169] Read of size 8 at addr ffff88802bbe0218 by task syz.2.14549/13169 [ 1348.703770][T13169] [ 1348.703784][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.2.14549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.703814][T13169] Tainted: [L]=SOFTLOCKUP [ 1348.703823][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1348.703836][T13169] Call Trace: [ 1348.703845][T13169] [ 1348.703854][T13169] dump_stack_lvl+0xe8/0x150 [ 1348.703884][T13169] print_address_description+0x55/0x1e0 [ 1348.703912][T13169] ? dvb_device_open+0xc4/0x340 [ 1348.703941][T13169] print_report+0x58/0x70 [ 1348.703966][T13169] kasan_report+0x117/0x150 [ 1348.703994][T13169] ? dvb_device_open+0xc4/0x340 [ 1348.704029][T13169] dvb_device_open+0xc4/0x340 [ 1348.704059][T13169] ? do_raw_spin_unlock+0xf5/0x200 [ 1348.704090][T13169] chrdev_open+0x4d9/0x600 [ 1348.704115][T13169] ? __pfx_chrdev_open+0x10/0x10 [ 1348.704139][T13169] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1348.704165][T13169] ? __pfx_chrdev_open+0x10/0x10 [ 1348.704188][T13169] do_dentry_open+0x816/0x1380 [ 1348.704217][T13169] vfs_open+0x3b/0x340 [ 1348.704241][T13169] ? path_openat+0x1428/0x1d60 [ 1348.704264][T13169] path_openat+0x1443/0x1d60 [ 1348.704294][T13169] do_file_open+0x23e/0x4a0 [ 1348.704318][T13169] ? __pfx_do_file_open+0x10/0x10 [ 1348.704350][T13169] ? _raw_spin_unlock+0x28/0x50 [ 1348.704375][T13169] ? alloc_fd+0x651/0x6c0 [ 1348.704407][T13169] do_sys_openat2+0x115/0x200 [ 1348.704434][T13169] ? __se_sys_futex+0x3a8/0x450 [ 1348.704462][T13169] ? __pfx_do_sys_openat2+0x10/0x10 [ 1348.704491][T13169] ? rcu_is_watching+0x16/0xb0 [ 1348.704519][T13169] __x64_sys_openat+0x138/0x170 [ 1348.704549][T13169] do_syscall_64+0x166/0x520 [ 1348.704577][T13169] ? trace_irq_disable+0x3b/0x140 [ 1348.704599][T13169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.704621][T13169] ? clear_bhb_loop+0x70/0xc0 [ 1348.704644][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.704665][T13169] RIP: 0033:0x7fe52255e98e [ 1348.704688][T13169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1348.704715][T13169] RSP: 002b:00007fe5234e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1348.704738][T13169] RAX: ffffffffffffffda RBX: 00007fe5234e56c0 RCX: 00007fe52255e98e [ 1348.704755][T13169] RDX: 0000000000040d00 RSI: 00007fe5234e4c00 RDI: ffffffffffffff9c [ 1348.704770][T13169] RBP: 00007fe5234e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1348.704784][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1348.704798][T13169] R13: 00007fe522826038 R14: 00007fe522825fa0 R15: 00007fe52294fa48 [ 1348.704823][T13169] [ 1348.704831][T13169] [ 1348.704837][T13169] Allocated by task 12730: [ 1348.704856][T13169] kasan_save_track+0x3e/0x80 [ 1348.704880][T13169] __kasan_kmalloc+0x93/0xb0 [ 1348.704902][T13169] __kmalloc_noprof+0x36b/0x720 [ 1348.704921][T13169] io_cache_alloc_new+0x40/0x100 [ 1348.704941][T13169] __io_prep_rw+0x281/0xe70 [ 1348.704962][T13169] io_prep_read+0x33/0x110 [ 1348.704981][T13169] io_submit_sqes+0xbde/0x2310 [ 1348.705001][T13169] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1348.705023][T13169] do_syscall_64+0x166/0x520 [ 1348.705048][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.705067][T13169] [ 1348.705073][T13169] Freed by task 12730: [ 1348.705083][T13169] kasan_save_track+0x3e/0x80 [ 1348.705104][T13169] kasan_save_free_info+0x40/0x50 [ 1348.705133][T13169] __kasan_slab_free+0x5c/0x80 [ 1348.705155][T13169] kfree+0x1c5/0x650 [ 1348.705182][T13169] io_clean_op+0x298/0x330 [ 1348.705204][T13169] __io_submit_flush_completions+0xea3/0x10d0 [ 1348.705225][T13169] io_submit_sqes+0x1cec/0x2310 [ 1348.705245][T13169] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1348.705267][T13169] do_syscall_64+0x166/0x520 [ 1348.705292][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.705311][T13169] [ 1348.705317][T13169] The buggy address belongs to the object at ffff88802bbe0200 [ 1348.705317][T13169] which belongs to the cache kmalloc-256 of size 256 [ 1348.705335][T13169] The buggy address is located 24 bytes inside of [ 1348.705335][T13169] freed 256-byte region [ffff88802bbe0200, ffff88802bbe0300) [ 1348.705374][T13169] [ 1348.705380][T13169] The buggy address belongs to the physical page: [ 1348.705400][T13169] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bbe0200 pfn:0x2bbe0 [ 1348.705422][T13169] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1348.705439][T13169] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1348.705460][T13169] page_type: f5(slab) [ 1348.705480][T13169] raw: 00fff00000000240 ffff88801b041b40 ffffea0000c25190 ffffea0001448d10 [ 1348.705499][T13169] raw: ffff88802bbe0200 000000000010000f 00000000f5000000 0000000000000000 [ 1348.705518][T13169] head: 00fff00000000240 ffff88801b041b40 ffffea0000c25190 ffffea0001448d10 [ 1348.705537][T13169] head: ffff88802bbe0200 000000000010000f 00000000f5000000 0000000000000000 [ 1348.705556][T13169] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1348.705575][T13169] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1348.705586][T13169] page dumped because: kasan: bad access detected [ 1348.705604][T13169] page_owner tracks the page as allocated [ 1348.705613][T13169] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16596866296 [ 1348.705647][T13169] post_alloc_hook+0x1f9/0x250 [ 1348.705680][T13169] get_page_from_freelist+0x2209/0x2280 [ 1348.705711][T13169] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1348.705735][T13169] allocate_slab+0x7d/0x620 [ 1348.705762][T13169] refill_objects+0x2d5/0x350 [ 1348.705791][T13169] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1348.705818][T13169] __kmalloc_cache_noprof+0x39b/0x600 [ 1348.705840][T13169] bus_add_driver+0x162/0x670 [ 1348.705859][T13169] driver_register+0x23a/0x320 [ 1348.705886][T13169] usb_register_driver+0x1e4/0x390 [ 1348.705914][T13169] do_one_initcall+0x250/0x870 [ 1348.705942][T13169] do_initcall_level+0x10a/0x1a0 [ 1348.705987][T13169] do_initcalls+0x59/0xa0 [ 1348.706008][T13169] kernel_init_freeable+0x29d/0x3e0 [ 1348.706030][T13169] kernel_init+0x22/0x1d0 [ 1348.706049][T13169] ret_from_fork+0x514/0xb70 [ 1348.706066][T13169] page_owner free stack trace missing [ 1348.706074][T13169] [ 1348.706080][T13169] Memory state around the buggy address: [ 1348.706093][T13169] ffff88802bbe0100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1348.706107][T13169] ffff88802bbe0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1348.706121][T13169] >ffff88802bbe0200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.706132][T13169] ^ [ 1348.706144][T13169] ffff88802bbe0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.706158][T13169] ffff88802bbe0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1348.706169][T13169] ================================================================== [ 1348.706302][T13169] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1349.403005][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.2.14549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.414058][T13169] Tainted: [L]=SOFTLOCKUP [ 1349.418403][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1349.428478][T13169] Call Trace: [ 1349.431773][T13169] [ 1349.434721][T13169] vpanic+0x56d/0xa60 [ 1349.438743][T13169] ? __pfx_vpanic+0x10/0x10 [ 1349.443271][T13169] ? __pfx___schedule+0x10/0x10 [ 1349.448155][T13169] panic+0xc5/0xd0 [ 1349.451915][T13169] ? __pfx_panic+0x10/0x10 [ 1349.456349][T13169] ? preempt_schedule_thunk+0x16/0x40 [ 1349.461755][T13169] ? dvb_device_open+0xc4/0x340 [ 1349.466675][T13169] check_panic_on_warn+0x89/0xb0 [ 1349.471665][T13169] ? dvb_device_open+0xc4/0x340 [ 1349.476564][T13169] end_report+0x73/0x170 [ 1349.480836][T13169] ? dvb_device_open+0xc4/0x340 [ 1349.485724][T13169] kasan_report+0x128/0x150 [ 1349.490260][T13169] ? dvb_device_open+0xc4/0x340 [ 1349.495151][T13169] dvb_device_open+0xc4/0x340 [ 1349.499863][T13169] ? do_raw_spin_unlock+0xf5/0x200 [ 1349.505023][T13169] chrdev_open+0x4d9/0x600 [ 1349.509477][T13169] ? __pfx_chrdev_open+0x10/0x10 [ 1349.514457][T13169] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1349.520822][T13169] ? __pfx_chrdev_open+0x10/0x10 [ 1349.525829][T13169] do_dentry_open+0x816/0x1380 [ 1349.530639][T13169] vfs_open+0x3b/0x340 [ 1349.534740][T13169] ? path_openat+0x1428/0x1d60 [ 1349.539529][T13169] path_openat+0x1443/0x1d60 [ 1349.544146][T13169] do_file_open+0x23e/0x4a0 [ 1349.548680][T13169] ? __pfx_do_file_open+0x10/0x10 [ 1349.553733][T13169] ? _raw_spin_unlock+0x28/0x50 [ 1349.558607][T13169] ? alloc_fd+0x651/0x6c0 [ 1349.562982][T13169] do_sys_openat2+0x115/0x200 [ 1349.567692][T13169] ? __se_sys_futex+0x3a8/0x450 [ 1349.572572][T13169] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.577850][T13169] ? rcu_is_watching+0x16/0xb0 [ 1349.582683][T13169] __x64_sys_openat+0x138/0x170 [ 1349.587574][T13169] do_syscall_64+0x166/0x520 [ 1349.592247][T13169] ? trace_irq_disable+0x3b/0x140 [ 1349.597302][T13169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.603396][T13169] ? clear_bhb_loop+0x70/0xc0 [ 1349.608101][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.614021][T13169] RIP: 0033:0x7fe52255e98e [ 1349.618463][T13169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1349.638119][T13169] RSP: 002b:00007fe5234e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1349.646563][T13169] RAX: ffffffffffffffda RBX: 00007fe5234e56c0 RCX: 00007fe52255e98e [ 1349.654562][T13169] RDX: 0000000000040d00 RSI: 00007fe5234e4c00 RDI: ffffffffffffff9c [ 1349.662555][T13169] RBP: 00007fe5234e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.670546][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1349.678547][T13169] R13: 00007fe522826038 R14: 00007fe522825fa0 R15: 00007fe52294fa48 [ 1349.686569][T13169] [ 1349.690198][T13169] Kernel Offset: disabled [ 1349.694544][T13169] Rebooting in 86400 seconds..