last executing test programs: 1m34.161223826s ago: executing program 4 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m19.935954135s ago: executing program 4 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1m17.294291476s ago: executing program 4 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYBLOB, @ANYRES32=r1], 0x30}}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r6, 0x3, 0x80000}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x64}}, 0x2000400c) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000340)) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 1m14.574005441s ago: executing program 4 (id=134): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0xa001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x8084) socket$packet(0x11, 0x3, 0x300) 1m11.830096024s ago: executing program 4 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1m8.786569831s ago: executing program 4 (id=143): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff2600", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a05001c0012800900010069706970000000000c00028008000200c0000200"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6000}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8878}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1188e99141d4d296204c0a588a8", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) poll(&(0x7f0000000340)=[{r3}, {r2, 0x100}, {r0, 0x4002}, {r3, 0x5004}, {0xffffffffffffffff, 0x132}, {r4, 0x80}], 0x6, 0xa) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000380)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x10000, 0x6, 0x3, 0x1, {0x0, 0x9, 0x2111, 0x1, 0x89, 0x6, 0x9, 0x7fffffff, 0x20000000, 0x8001, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000300)=0xa1) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x200000000000025f, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x2, @void}, 0x10) r7 = inotify_init1(0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f00000003c0)=0x8) 49.681017036s ago: executing program 32 (id=143): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff2600", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a05001c0012800900010069706970000000000c00028008000200c0000200"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6000}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8878}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1188e99141d4d296204c0a588a8", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) poll(&(0x7f0000000340)=[{r3}, {r2, 0x100}, {r0, 0x4002}, {r3, 0x5004}, {0xffffffffffffffff, 0x132}, {r4, 0x80}], 0x6, 0xa) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000380)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x10000, 0x6, 0x3, 0x1, {0x0, 0x9, 0x2111, 0x1, 0x89, 0x6, 0x9, 0x7fffffff, 0x20000000, 0x8001, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000300)=0xa1) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x200000000000025f, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x2, @void}, 0x10) r7 = inotify_init1(0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f00000003c0)=0x8) 24.253742423s ago: executing program 1 (id=197): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0x10004007, 0x99]) 18.89767072s ago: executing program 1 (id=202): msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(0x0, &(0x7f00000002c0), 0x8, 0x0, 0x800) msgctl$IPC_RMID(0x0, 0x0) 17.738602668s ago: executing program 1 (id=205): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x8, 0x200000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100d789d0c4dd16841ae5f1b34ffb07000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 14.55698269s ago: executing program 1 (id=210): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, 0x0, 0xc4) 13.534910631s ago: executing program 1 (id=211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9000, @empty, 0x2}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x9) 10.926917412s ago: executing program 1 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, 0x0, 0x0) close_range(r0, r0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000480)={0x990000, 0x2, 0x2804d606, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0xa00964, 0x3, '\x00', @p_u32=&(0x7f0000000400)=0x1}}) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 10.783249839s ago: executing program 2 (id=219): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x8, 0x200000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100d789d0c4dd16841ae5f1b34ffb07000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 9.412919956s ago: executing program 0 (id=220): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, 0x0, 0xc4) 8.967865712s ago: executing program 2 (id=222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.457410834s ago: executing program 0 (id=223): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x72a, 0x7, 0x5, 0xb}, 0x3, [0x3, 0x0, 0x1, 0x2, 0x9, 0xe, 0x0, 0xfffff29c, 0x2, 0xfffffff8, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x4, 0xe8e2, 0x3, 0x1c, 0x80, 0x5, 0x1, 0x1, 0x4, 0x7, 0x10001, 0xf, 0x7, 0xfffffff7, 0x4, 0x71, 0x100, 0x2, 0x610aacb2, 0x6, 0x9, 0xe, 0x9879, 0x9, 0xfffffe7f, 0x1ff, 0x3, 0x1, 0x5, 0x800, 0x2d3, 0xffff, 0xfc400000, 0x5, 0x10000, 0x0, 0x18ee0791, 0x1, 0x5b9f, 0x800, 0x80, 0x6, 0x7fffffff, 0x9, 0x9, 0x5, 0x9], [0x400, 0x9, 0x2, 0x2, 0x9, 0x5, 0xc, 0x4, 0x70, 0xffff3f0a, 0x7, 0x2, 0x7fff, 0x2, 0x57d4, 0x2, 0x3, 0xd169, 0x5, 0xfffffff8, 0x9, 0x800, 0x0, 0xffffff48, 0xffff75f7, 0x64e4, 0x4, 0xffff, 0x5, 0x7, 0x2, 0x1000, 0x9, 0x40, 0x0, 0x3, 0x9, 0x80, 0x2, 0xb, 0xfffffff8, 0xd193, 0x3, 0xb, 0xb1e, 0x200, 0x7, 0xff, 0x7, 0x5, 0x6, 0x3, 0x9, 0xfffffffb, 0x3, 0x4, 0x3, 0x4fd, 0x1, 0x0, 0x8c6, 0xb6, 0x40, 0x1], [0xfffffffe, 0xb, 0x2, 0x9, 0x942fc72, 0x4, 0x6, 0xfffffff7, 0x1, 0x80, 0x8, 0x2, 0x101, 0x3, 0x5, 0x8001, 0x6, 0xb, 0x3, 0x5, 0x7d, 0x5, 0x1, 0xfffffff9, 0x4f, 0x4, 0x0, 0x80, 0x7, 0x4, 0x9, 0x5, 0x101, 0x3, 0x5, 0x10000, 0x8, 0x4, 0x2, 0x3b, 0x80000000, 0x3, 0x9, 0x2, 0x4, 0x10000, 0x8, 0x1, 0xf6, 0xd3d, 0x7, 0x2, 0x6, 0x8, 0x10, 0x7ff, 0x1, 0x2, 0xf7b, 0x8, 0x9, 0x3, 0x6, 0x4], [0x1, 0x8, 0x8001, 0x7, 0x6, 0x86, 0x9, 0xd, 0x1, 0x0, 0x4, 0xe0, 0x5, 0x6, 0xffff, 0xfffff001, 0x1, 0x1, 0x4, 0x8, 0xfffffffb, 0x5ef5, 0x9, 0x8, 0xff, 0x1, 0x1, 0x5, 0x3, 0x3, 0x9, 0x8, 0x0, 0xc0, 0x3df5, 0x5, 0x9, 0x800, 0x80000001, 0x8, 0x0, 0x8, 0x4, 0x7, 0x3, 0xfff, 0x3bda, 0x1, 0x2, 0x8000, 0x80, 0x80, 0x4, 0x7fff, 0x8, 0x6ba8, 0x7fff, 0x4e, 0x6, 0x5, 0x8, 0x0, 0x0, 0x9]}, 0x45c) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) shmctl$IPC_RMID(r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000", 0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x78a1, 0x700, 0x10000, 0x5, {{0x6, 0x4, 0x0, 0x15, 0x18, 0x67, 0x0, 0xd, 0x2f, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r10, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) 7.508841892s ago: executing program 2 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000) 7.356976436s ago: executing program 3 (id=226): r0 = socket$inet6(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.522825609s ago: executing program 2 (id=227): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xdddd0000, 0x1000, &(0x7f0000007000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 6.227579512s ago: executing program 3 (id=228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd25, 0x25cfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, 0x34}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) 5.26064189s ago: executing program 2 (id=229): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0xba, 0xe, 0x54, 0x5, 0xff, 0x8, 0x2c, 0x40, 0x0, 0x5, 0x5, 0x2, 0x80, 0x9, 0x5, 0x5d}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff7f00000000006700080008", @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) 5.24497733s ago: executing program 3 (id=230): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0xfe0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 4.782235364s ago: executing program 0 (id=231): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x8, 0x200000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100d789d0c4dd16841ae5f1b34ffb07000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 3.410595812s ago: executing program 3 (id=232): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, 0x0, 0xc4) 2.512515227s ago: executing program 0 (id=233): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.777885598s ago: executing program 3 (id=234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2028) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x5, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xecd, 0x2, 0x5, 0xc000, 0x802, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x21c01c98, 0x0, 0x4, 0x6, 0xff, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffb, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0x9, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0x12}}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x45) 1.296145036s ago: executing program 0 (id=235): r0 = msgget$private(0x0, 0xba) msgsnd(r0, 0x0, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0), 0x8, 0x0, 0x800) msgctl$IPC_RMID(r0, 0x0) 820.194581ms ago: executing program 0 (id=236): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x178a, &(0x7f0000000140)={0x0, 0x52bd, 0x8, 0xfffffffe, 0xc}) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 119.040898ms ago: executing program 3 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0x800, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(r2, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 2 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 178.177082][ T5559] cgroup: Unknown subsys name 'net' [ 178.324780][ T5559] cgroup: Unknown subsys name 'cpuset' [ 178.345433][ T5559] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 184.501936][ T5559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 189.149589][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.158299][ T5581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.167546][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.180638][ T5581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.189411][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.202120][ T5581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.216261][ T5581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.231483][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.232595][ T5581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.244013][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.257297][ T5586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.262062][ T5581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.280589][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.293016][ T5586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.307648][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.316003][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.360329][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.371577][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.388122][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.405349][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.496224][ T4878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.505869][ T4878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.515657][ T4878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.533937][ T4878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.549303][ T4878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.369095][ T48] Bluetooth: hci1: command tx timeout [ 191.369515][ T4878] Bluetooth: hci2: command tx timeout [ 191.375285][ T48] Bluetooth: hci0: command tx timeout [ 191.454821][ T48] Bluetooth: hci3: command tx timeout [ 191.606180][ T48] Bluetooth: hci4: command tx timeout [ 193.445301][ T48] Bluetooth: hci2: command tx timeout [ 193.451072][ T4878] Bluetooth: hci0: command tx timeout [ 193.456954][ T5579] Bluetooth: hci1: command tx timeout [ 193.524825][ T48] Bluetooth: hci3: command tx timeout [ 193.620239][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.628251][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.637359][ T5583] bridge_slave_0: entered allmulticast mode [ 193.648301][ T5583] bridge_slave_0: entered promiscuous mode [ 193.686155][ T48] Bluetooth: hci4: command tx timeout [ 193.767136][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.780514][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.804227][ T5583] bridge_slave_1: entered allmulticast mode [ 193.814097][ T5583] bridge_slave_1: entered promiscuous mode [ 194.076121][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.098810][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.485121][ T5583] team0: Port device team_slave_0 added [ 194.567821][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.578450][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.586417][ T5592] bridge_slave_0: entered allmulticast mode [ 194.595400][ T5592] bridge_slave_0: entered promiscuous mode [ 194.619000][ T5583] team0: Port device team_slave_1 added [ 194.652445][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.660428][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.668240][ T5577] bridge_slave_0: entered allmulticast mode [ 194.677230][ T5577] bridge_slave_0: entered promiscuous mode [ 194.688979][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.699118][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.707919][ T5592] bridge_slave_1: entered allmulticast mode [ 194.720504][ T5592] bridge_slave_1: entered promiscuous mode [ 194.770036][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.778589][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.787578][ T5578] bridge_slave_0: entered allmulticast mode [ 194.798078][ T5578] bridge_slave_0: entered promiscuous mode [ 194.816003][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.846203][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.854004][ T5577] bridge_slave_1: entered allmulticast mode [ 194.869511][ T5577] bridge_slave_1: entered promiscuous mode [ 194.987561][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.995373][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.002928][ T5578] bridge_slave_1: entered allmulticast mode [ 195.012326][ T5578] bridge_slave_1: entered promiscuous mode [ 195.153234][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.160704][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.194761][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.267131][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.294944][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.307470][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.318593][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.327719][ T5582] bridge_slave_0: entered allmulticast mode [ 195.338544][ T5582] bridge_slave_0: entered promiscuous mode [ 195.358769][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.366607][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.426279][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.494187][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.513137][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.536179][ T48] Bluetooth: hci2: command tx timeout [ 195.541959][ T4878] Bluetooth: hci0: command tx timeout [ 195.547778][ T5579] Bluetooth: hci1: command tx timeout [ 195.565645][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.573369][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.581318][ T5582] bridge_slave_1: entered allmulticast mode [ 195.590006][ T5582] bridge_slave_1: entered promiscuous mode [ 195.606352][ T4878] Bluetooth: hci3: command tx timeout [ 195.643945][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.748009][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.765073][ T4878] Bluetooth: hci4: command tx timeout [ 195.773883][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.821642][ T5577] team0: Port device team_slave_0 added [ 195.861294][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.903005][ T5592] team0: Port device team_slave_0 added [ 195.916809][ T5577] team0: Port device team_slave_1 added [ 196.041993][ T5592] team0: Port device team_slave_1 added [ 196.091451][ T5583] hsr_slave_0: entered promiscuous mode [ 196.100431][ T5583] hsr_slave_1: entered promiscuous mode [ 196.117759][ T5582] team0: Port device team_slave_0 added [ 196.132746][ T5578] team0: Port device team_slave_0 added [ 196.198010][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.205287][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.231590][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.252071][ T5582] team0: Port device team_slave_1 added [ 196.266137][ T5578] team0: Port device team_slave_1 added [ 196.302869][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.310032][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.336430][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.400643][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.408097][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.434499][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.545301][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.552527][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.579229][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.612266][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.619824][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.646281][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.662782][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.670121][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.696584][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.758513][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.765792][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.792184][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.806564][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.813668][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.840050][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.004293][ T5577] hsr_slave_0: entered promiscuous mode [ 197.013208][ T5577] hsr_slave_1: entered promiscuous mode [ 197.021575][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 197.027533][ T5577] Cannot create hsr debugfs directory [ 197.225615][ T5592] hsr_slave_0: entered promiscuous mode [ 197.234653][ T5592] hsr_slave_1: entered promiscuous mode [ 197.242787][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 197.248795][ T5592] Cannot create hsr debugfs directory [ 197.313502][ T5582] hsr_slave_0: entered promiscuous mode [ 197.322518][ T5582] hsr_slave_1: entered promiscuous mode [ 197.330886][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 197.336814][ T5582] Cannot create hsr debugfs directory [ 197.385324][ T5578] hsr_slave_0: entered promiscuous mode [ 197.394073][ T5578] hsr_slave_1: entered promiscuous mode [ 197.402428][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 197.408435][ T5578] Cannot create hsr debugfs directory [ 197.614748][ T4878] Bluetooth: hci0: command tx timeout [ 197.620566][ T48] Bluetooth: hci2: command tx timeout [ 197.626344][ T5579] Bluetooth: hci1: command tx timeout [ 197.684874][ T4878] Bluetooth: hci3: command tx timeout [ 197.844782][ T4878] Bluetooth: hci4: command tx timeout [ 198.600825][ T5583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.618575][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.685951][ T5583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.705195][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.732910][ T5583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.751107][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.779400][ T5583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.799096][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.897728][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.929368][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.941611][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.960937][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.974328][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.998885][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.035611][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.056735][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.248029][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.271303][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.306754][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.328495][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.342487][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.366540][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.415624][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.439522][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.573841][ T5578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.601258][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.612554][ T5578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.634328][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.671077][ T5578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.692915][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.709778][ T5578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.731545][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.012166][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.034068][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.045534][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.065019][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.096844][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.121210][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.134126][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.155964][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.281672][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.526310][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.621224][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.663654][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.671145][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.787945][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.795607][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.866436][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.968631][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.976224][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.042270][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.130854][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.138281][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.239083][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.252892][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.352072][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.359514][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.433875][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.441298][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.530432][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.583530][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.701847][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.709530][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.882549][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.890165][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.943890][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.056567][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.064022][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.161910][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.169570][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.933714][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.940488][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.888784][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.463029][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.752882][ T5583] veth0_vlan: entered promiscuous mode [ 205.838489][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.018760][ T5583] veth1_vlan: entered promiscuous mode [ 206.280490][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.395458][ T5577] veth0_vlan: entered promiscuous mode [ 206.441318][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.595102][ T5577] veth1_vlan: entered promiscuous mode [ 206.756502][ T5583] veth0_macvtap: entered promiscuous mode [ 206.882200][ T5583] veth1_macvtap: entered promiscuous mode [ 207.053794][ T5578] veth0_vlan: entered promiscuous mode [ 207.129657][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.200793][ T5582] veth0_vlan: entered promiscuous mode [ 207.216916][ T5578] veth1_vlan: entered promiscuous mode [ 207.256063][ T5577] veth0_macvtap: entered promiscuous mode [ 207.273313][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.349127][ T5577] veth1_macvtap: entered promiscuous mode [ 207.383799][ T5582] veth1_vlan: entered promiscuous mode [ 207.429219][ T97] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.466825][ T97] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.477097][ T1024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.523373][ T1024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.727429][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.809111][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.864766][ T5592] veth0_vlan: entered promiscuous mode [ 207.948496][ T5578] veth0_macvtap: entered promiscuous mode [ 207.962934][ T97] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.979557][ T97] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.016962][ T97] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.032025][ T97] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.066163][ T5592] veth1_vlan: entered promiscuous mode [ 208.126490][ T5578] veth1_macvtap: entered promiscuous mode [ 208.191516][ T5582] veth0_macvtap: entered promiscuous mode [ 208.319109][ T5582] veth1_macvtap: entered promiscuous mode [ 208.472195][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.596096][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.659271][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.740825][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.842848][ T5592] veth0_macvtap: entered promiscuous mode [ 208.864317][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.881993][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.912608][ T1024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.943907][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.959027][ T1024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.014830][ T1024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.027967][ T1024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.061544][ T5592] veth1_macvtap: entered promiscuous mode [ 209.138676][ T1024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.432268][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.585121][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.799769][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.818162][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.880198][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.927678][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.663297][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.724081][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.914086][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.951139][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.423433][ T5583] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 214.164168][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.206339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.455783][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.498937][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.468620][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.740448][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.771751][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.990525][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.041861][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.222292][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.248702][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.432871][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.464676][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.695957][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.746525][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.075538][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.129763][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.040022][ T5861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.140816][ T5861] Zero length message leads to an empty skb [ 218.846797][ T5868] 9pnet_virtio: no channels available for device syz [ 219.160682][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.170471][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.316251][ T5873] bridge0: entered allmulticast mode [ 219.431241][ T5872] bridge_slave_1: left allmulticast mode [ 219.480565][ T5872] bridge_slave_1: left promiscuous mode [ 219.566517][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.651455][ T5872] bridge_slave_0: left allmulticast mode [ 219.681182][ T5872] bridge_slave_0: left promiscuous mode [ 219.718082][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.958759][ T5890] binder: 5874:5890 ioctl c0306201 800001c0 returned -14 [ 228.845130][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 229.059739][ T24] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 229.086049][ T24] usb 3-1: config 1 has no interface number 0 [ 229.109420][ T24] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 229.152379][ T24] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 229.207984][ T24] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.243878][ T24] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 229.277065][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.305067][ T24] usb 3-1: Product: syz [ 229.320903][ T24] usb 3-1: Manufacturer: syz [ 229.336580][ T24] usb 3-1: SerialNumber: syz [ 229.391158][ T5907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.675676][ T5580] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 229.875040][ T5580] usb 2-1: Using ep0 maxpacket: 8 [ 229.903207][ T5580] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.950813][ T5580] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.962191][ T5580] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.012150][ T5580] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.106974][ T5580] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 230.151681][ T5580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.254136][ T5580] usb 2-1: config 0 descriptor?? [ 230.775868][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.849026][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.953374][ T5580] usbhid 2-1:0.0: can't add hid device: -71 [ 230.981717][ T5580] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.070529][ T5580] usb 2-1: USB disconnect, device number 2 [ 232.820851][ T5944] netlink: 196 bytes leftover after parsing attributes in process `syz.3.31'. [ 232.867887][ T5944] netlink: 196 bytes leftover after parsing attributes in process `syz.3.31'. [ 232.915300][ T24] usb 3-1: Error in usbnet_get_endpoints (-71) [ 233.055627][ T24] usb 3-1: USB disconnect, device number 2 [ 233.376627][ T5947] process 'syz.0.32' launched './file2' with NULL argv: empty string added [ 235.185349][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.357352][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 235.418019][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.466330][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 235.540347][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 235.592002][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.627277][ T24] usb 4-1: Product: syz [ 235.651009][ T24] usb 4-1: Manufacturer: syz [ 235.663298][ T24] usb 4-1: SerialNumber: syz [ 236.006272][ T5580] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.188071][ T5580] usb 5-1: Using ep0 maxpacket: 8 [ 236.224214][ T5580] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.281814][ T5580] usb 5-1: config 0 has no interface number 0 [ 236.309296][ T5580] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.350952][ T5580] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 236.391527][ T5580] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.421164][ T5580] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 236.482534][ T5580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.538580][ T5580] usb 5-1: config 0 descriptor?? [ 236.656868][ T5580] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 236.853332][ T5580] usb 5-1: USB disconnect, device number 2 [ 236.949228][ T5580] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 236.967315][ T24] usb 4-1: USB disconnect, device number 2 [ 237.046393][ T5970] syzkaller0: entered promiscuous mode [ 237.094642][ T5970] syzkaller0: entered allmulticast mode [ 237.374006][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.302439][ T5580] IPVS: starting estimator thread 0... [ 238.378801][ T5977] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.395968][ T5981] IPVS: using max 192 ests per chain, 9600 per kthread [ 240.189000][ T5998] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 240.447940][ T5998] team0: Port device macvlan0 added [ 240.471524][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 240.955436][ T5684] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.148335][ T5684] usb 2-1: Using ep0 maxpacket: 32 [ 241.210556][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.255240][ T5684] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 241.327818][ T5684] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 241.375347][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.442438][ T5684] usb 2-1: Product: syz [ 241.462554][ T5684] usb 2-1: Manufacturer: syz [ 241.500615][ T5684] usb 2-1: SerialNumber: syz [ 242.401307][ T24] IPVS: starting estimator thread 0... [ 242.535489][ T6026] IPVS: using max 288 ests per chain, 14400 per kthread [ 243.121100][ T5684] usb 2-1: USB disconnect, device number 3 [ 244.102650][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.591777][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 245.216393][ T6048] vlan2: entered promiscuous mode [ 245.253438][ T6048] bridge0: entered promiscuous mode [ 247.884918][ T5678] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 248.108445][ T5678] usb 2-1: Using ep0 maxpacket: 32 [ 248.175581][ T5678] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.231889][ T5678] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 248.324855][ T5678] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 248.386170][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.422663][ T5678] usb 2-1: Product: syz [ 248.443691][ T5678] usb 2-1: Manufacturer: syz [ 248.483869][ T5678] usb 2-1: SerialNumber: syz [ 249.693735][ T5678] usb 2-1: USB disconnect, device number 4 [ 250.257018][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.372208][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 251.404934][ T6101] binder: 6098:6101 ioctl c0285840 80000000 returned -22 [ 256.202877][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 256.227759][ T6134] binder: 6131:6134 ioctl c0285840 80000000 returned -22 [ 256.242737][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 257.078710][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 257.189183][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.233573][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 257.301367][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 257.325595][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.372958][ T24] usb 4-1: Product: syz [ 257.387241][ T24] usb 4-1: Manufacturer: syz [ 257.407301][ T24] usb 4-1: SerialNumber: syz [ 257.416082][ T6136] bridge0: port 3(vlan3) entered blocking state [ 257.445774][ T6136] bridge0: port 3(vlan3) entered disabled state [ 257.480856][ T6136] vlan3: entered allmulticast mode [ 257.507583][ T6136] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 257.560256][ T6136] vlan3: entered promiscuous mode [ 257.630318][ T6136] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 260.975003][ T24] usb 4-1: USB disconnect, device number 3 [ 261.068408][ T6153] syzkaller0: entered promiscuous mode [ 261.111121][ T6153] syzkaller0: entered allmulticast mode [ 261.220451][ T6152] tipc: Started in network mode [ 261.260671][ T6152] tipc: Node identity 0ac3cc9f7c16, cluster identity 4711 [ 261.280701][ T6152] tipc: Enabled bearer , priority 0 [ 261.522219][ T6160] tipc: Resetting bearer [ 261.566775][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.649389][ T6151] tipc: Resetting bearer [ 261.787110][ T24] IPVS: starting estimator thread 0... [ 262.551502][ T6151] tipc: Disabling bearer [ 262.585303][ T5684] tipc: Node number set to 1993723039 [ 262.616160][ T6168] IPVS: using max 240 ests per chain, 12000 per kthread [ 263.724914][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 263.752035][ T6180] binder: 6178:6180 ioctl c0285840 80000000 returned -22 [ 264.847320][ T29] audit: type=1800 audit(1780639181.930:2): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.105" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 265.377616][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.385484][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.248968][ T5678] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 267.805823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.908530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 268.490285][ T5678] usb 3-1: Using ep0 maxpacket: 32 [ 269.159460][ T5678] usb 3-1: device descriptor read/all, error -71 [ 273.845053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.765887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.175685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.814563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 276.916491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 279.476364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.296114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 280.705123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 282.523077][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 282.560886][ T6246] binder: 6242:6246 ioctl c0285840 80000000 returned -22 [ 283.220696][ T4878] Bluetooth: hci4: link tx timeout [ 283.227067][ T4878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.245778][ T5579] Bluetooth: hci4: link tx timeout [ 283.251179][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.268482][ T5579] Bluetooth: hci4: link tx timeout [ 283.274219][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.301115][ T5579] Bluetooth: hci4: link tx timeout [ 283.306768][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.320026][ T5579] Bluetooth: hci4: link tx timeout [ 283.325871][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.337234][ T5579] Bluetooth: hci4: link tx timeout [ 283.342901][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.351359][ T5579] Bluetooth: hci4: link tx timeout [ 283.357243][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.379368][ T5579] Bluetooth: hci4: link tx timeout [ 283.387867][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.397066][ T5579] Bluetooth: hci4: link tx timeout [ 283.402867][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.411376][ T5579] Bluetooth: hci4: link tx timeout [ 283.417369][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.426917][ T5579] Bluetooth: hci4: link tx timeout [ 283.435797][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.449254][ T5579] Bluetooth: hci4: link tx timeout [ 283.456735][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.465341][ T5579] Bluetooth: hci4: link tx timeout [ 283.477527][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.488697][ T5579] Bluetooth: hci4: link tx timeout [ 283.494582][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.507787][ T5579] Bluetooth: hci4: link tx timeout [ 283.513460][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.522577][ T5579] Bluetooth: hci4: link tx timeout [ 283.533317][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.545611][ T5579] Bluetooth: hci4: link tx timeout [ 283.551071][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.605247][ T5579] Bluetooth: hci4: link tx timeout [ 283.610744][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.653057][ T5579] Bluetooth: hci4: link tx timeout [ 283.660867][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.676682][ T5579] Bluetooth: hci4: link tx timeout [ 283.687542][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.696427][ T5579] Bluetooth: hci4: link tx timeout [ 283.702111][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.713540][ T5579] Bluetooth: hci4: link tx timeout [ 283.719508][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.729046][ T5579] Bluetooth: hci4: link tx timeout [ 283.737921][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.749155][ T5579] Bluetooth: hci4: link tx timeout [ 283.759862][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.793390][ T5579] Bluetooth: hci4: link tx timeout [ 283.801628][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.811413][ T5579] Bluetooth: hci4: link tx timeout [ 283.817447][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.828927][ T5579] Bluetooth: hci4: link tx timeout [ 283.839592][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.852311][ T5579] Bluetooth: hci4: link tx timeout [ 283.858439][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.869879][ T5579] Bluetooth: hci4: link tx timeout [ 283.885366][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.899591][ T5579] Bluetooth: hci4: link tx timeout [ 283.908253][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.921779][ T5579] Bluetooth: hci4: link tx timeout [ 283.928579][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.937248][ T5579] Bluetooth: hci4: link tx timeout [ 283.945991][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.957256][ T5579] Bluetooth: hci4: link tx timeout [ 283.962864][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.976001][ T5579] Bluetooth: hci4: link tx timeout [ 283.989028][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.000691][ T5579] Bluetooth: hci4: link tx timeout [ 284.009019][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.020844][ T5579] Bluetooth: hci4: link tx timeout [ 284.038437][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.051329][ T5579] Bluetooth: hci4: link tx timeout [ 284.057291][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.065492][ T5579] Bluetooth: hci4: link tx timeout [ 284.073860][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.089623][ T5579] Bluetooth: hci4: link tx timeout [ 284.103555][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.113444][ T5579] Bluetooth: hci4: link tx timeout [ 284.119285][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.166426][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 284.275785][ T5579] Bluetooth: hci4: link tx timeout [ 284.283428][ T5579] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.080312][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 285.286942][ T5579] Bluetooth: hci4: command 0x0406 tx timeout [ 285.696427][ T5678] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 285.837849][ T6269] syz.0.128 uses obsolete (PF_INET,SOCK_PACKET) [ 285.859217][ T5678] usb 3-1: Using ep0 maxpacket: 32 [ 285.891376][ T5678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.947532][ T5678] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 286.027349][ T5678] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 286.091788][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.135374][ T5678] usb 3-1: Product: syz [ 286.154214][ T5678] usb 3-1: Manufacturer: syz [ 286.177048][ T5678] usb 3-1: SerialNumber: syz [ 289.123516][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 289.230951][ T6293] binder: 6288:6293 ioctl c0285840 80000000 returned -22 [ 290.152080][ T5678] usb 3-1: USB disconnect, device number 5 [ 292.552505][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'. [ 293.343724][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.659610][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 294.369918][ T5678] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.553922][ T5678] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.651653][ T5678] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.707695][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 294.711751][ T5678] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.914102][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.031956][ T6313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.190831][ T5678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.213610][ T5684] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 295.510771][ T5684] usb 3-1: Using ep0 maxpacket: 32 [ 295.856940][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.152008][ T5684] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 296.330974][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 296.607789][ T5684] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 296.625996][ T6320] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.806389][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.820777][ T6320] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 297.023978][ T5684] usb 3-1: Product: syz [ 297.129120][ T5684] usb 3-1: Manufacturer: syz [ 297.224940][ T5684] usb 3-1: SerialNumber: syz [ 299.270523][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 299.299105][ T6337] binder: 6333:6337 ioctl c0285840 80000000 returned -22 [ 301.256222][ T5684] usb 3-1: can't set config #1, error -71 [ 301.375405][ T5684] usb 3-1: USB disconnect, device number 6 [ 301.761545][ T5678] usb 2-1: USB disconnect, device number 5 [ 301.998220][ T6340] 9p: Bad value for 'rfdno' [ 302.850594][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 304.733324][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.191612][ T6362] Bluetooth: MGMT ver 1.23 [ 307.749878][ T5677] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 307.969652][ T5677] usb 2-1: Using ep0 maxpacket: 32 [ 308.022192][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.043185][ T5677] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 308.180488][ T5677] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 308.253828][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.322655][ T5677] usb 2-1: Product: syz [ 308.373634][ T5677] usb 2-1: Manufacturer: syz [ 308.379452][ T5677] usb 2-1: SerialNumber: syz [ 309.150582][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 309.923099][ T6373] binder: 6371:6373 ioctl c0285840 80000000 returned -22 [ 313.925095][ T4878] Bluetooth: hci3: command 0x0406 tx timeout [ 313.931435][ T4878] Bluetooth: hci1: command 0x0406 tx timeout [ 313.938201][ T6378] Bluetooth: hci0: command 0x0406 tx timeout [ 313.940439][ T4878] Bluetooth: hci2: command 0x0406 tx timeout [ 314.532409][ T6382] 9p: Bad value for 'rfdno' [ 314.658384][ T5677] usb 2-1: USB disconnect, device number 6 [ 315.181922][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 316.360237][ T6354] udevd[6354]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.772184][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.784727][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.839432][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.880949][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.921110][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.990139][ T5677] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 318.218546][ T5677] usb 2-1: Using ep0 maxpacket: 8 [ 318.242822][ T5677] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.313448][ T5677] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.031679][ T5677] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.057511][ T5677] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.123829][ T5677] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.141497][ T48] Bluetooth: hci5: command tx timeout [ 319.203967][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.490885][ T5677] usb 2-1: GET_CAPABILITIES returned 2f [ 319.503931][ T5677] usbtmc 2-1:16.0: can't read capabilities [ 319.804134][ T5677] usb 2-1: USB disconnect, device number 7 [ 321.209896][ T48] Bluetooth: hci5: command tx timeout [ 321.471492][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 321.563776][ T6415] binder: 6412:6415 ioctl c0285840 80000000 returned -22 [ 323.120100][ T5678] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 323.285050][ T48] Bluetooth: hci5: command tx timeout [ 323.350115][ T5678] usb 3-1: Using ep0 maxpacket: 32 [ 323.423484][ T5678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.473962][ T5678] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 323.559958][ T5678] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 323.602660][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.672763][ T5678] usb 3-1: Product: syz [ 323.730403][ T5678] usb 3-1: Manufacturer: syz [ 323.751048][ T5678] usb 3-1: SerialNumber: syz [ 325.370054][ T48] Bluetooth: hci5: command tx timeout [ 325.838821][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 326.063446][ T5678] usb 3-1: USB disconnect, device number 7 [ 326.836003][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.842713][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.336140][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.514991][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 334.534872][ T6461] binder: 6453:6461 ioctl c0285840 80000000 returned -22 [ 334.872020][ T5678] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 338.479855][ T5678] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 338.710528][ T5678] usb 3-1: Using ep0 maxpacket: 32 [ 340.488930][ T5678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.600571][ T5678] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 341.093740][ T5684] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 341.294700][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.383249][ T5684] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.471057][ T5678] usb 3-1: string descriptor 0 read error: -71 [ 341.482795][ T5678] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 341.542680][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.574542][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.687383][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 341.781739][ T5678] usb 3-1: can't set config #1, error -71 [ 341.824051][ T5678] usb 3-1: USB disconnect, device number 8 [ 341.929418][ T5684] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 342.023572][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.125431][ T5684] usb 2-1: Product: syz [ 342.189685][ T5684] usb 2-1: Manufacturer: syz [ 342.224865][ T5684] usb 2-1: SerialNumber: syz [ 342.320087][ T5684] usb 2-1: config 0 descriptor?? [ 342.372443][ T6486] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 342.463410][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.890589][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.054891][ T5684] rc_core: IR keymap rc-streamzap not found [ 343.111160][ T5684] Registered IR keymap rc-empty [ 343.161306][ T5684] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 343.263915][ T5684] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 343.282101][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.588089][ T5684] usb 2-1: USB disconnect, device number 8 [ 345.139022][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.191024][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.242615][ T6390] bridge_slave_0: entered allmulticast mode [ 345.309647][ T6390] bridge_slave_0: entered promiscuous mode [ 345.551647][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.642256][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 345.657869][ T6514] binder: 6512:6514 ioctl c0285840 80000000 returned -22 [ 345.672594][ T6514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'. [ 345.749190][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.763552][ T6390] bridge_slave_1: entered allmulticast mode [ 345.777532][ T6390] bridge_slave_1: entered promiscuous mode [ 346.601854][ T34] bridge_slave_1: left allmulticast mode [ 347.663769][ T34] bridge_slave_1: left promiscuous mode [ 347.910049][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.975674][ T34] bridge_slave_0: left allmulticast mode [ 348.032012][ T34] bridge_slave_0: left promiscuous mode [ 348.063251][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.409596][ T5684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 348.616371][ T5684] usb 4-1: Using ep0 maxpacket: 32 [ 348.635958][ T5684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.650682][ T5684] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 348.714024][ T5684] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 348.769027][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.823990][ T5684] usb 4-1: Product: syz [ 348.861049][ T5684] usb 4-1: Manufacturer: syz [ 348.880013][ T5684] usb 4-1: SerialNumber: syz [ 350.420204][ T5684] usb 4-1: USB disconnect, device number 5 [ 350.944279][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.657241][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.745824][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.809483][ T34] bond0 (unregistering): Released all slaves [ 351.904501][ T34] bond1 (unregistering): Released all slaves [ 352.132153][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.225841][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.262452][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 352.522793][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 352.554028][ T6551] binder: 6547:6551 ioctl c0285840 80000000 returned -22 [ 352.600381][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.219'. [ 353.701011][ T6390] team0: Port device team_slave_0 added [ 353.791582][ T6390] team0: Port device team_slave_1 added [ 354.297775][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.392705][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.545107][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.676225][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.728327][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.923887][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.246465][ T34] hsr_slave_0: left promiscuous mode [ 355.314371][ T34] hsr_slave_1: left promiscuous mode [ 355.360285][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.433294][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.485342][ T5678] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 355.497783][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.539632][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.689351][ T5678] usb 1-1: Using ep0 maxpacket: 32 [ 355.722423][ T34] veth1_macvtap: left promiscuous mode [ 355.761605][ T34] veth0_macvtap: left promiscuous mode [ 355.779733][ T5678] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.830765][ T34] veth1_vlan: left promiscuous mode [ 355.847558][ T5678] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 355.858901][ T34] veth0_vlan: left promiscuous mode [ 355.980021][ T5678] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 356.022726][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.068879][ T5678] usb 1-1: Product: syz [ 356.097864][ T5678] usb 1-1: Manufacturer: syz [ 356.126297][ T5678] usb 1-1: SerialNumber: syz [ 357.560700][ T5678] usb 1-1: USB disconnect, device number 2 [ 358.970699][ T6354] udevd[6354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.582446][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 359.605691][ T6594] binder: 6590:6594 ioctl c0285840 80000000 returned -22 [ 359.633391][ T6594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.231'. [ 360.979953][ T34] team0 (unregistering): Port device team_slave_1 removed [ 361.187852][ T34] team0 (unregistering): Port device team_slave_0 removed [ 362.048253][ T29] audit: type=1800 audit(1780639279.130:3): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.234" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 362.231287][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 362.287140][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.634867][ T5678] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 362.814769][ T5678] usb 1-1: Using ep0 maxpacket: 8 [ 362.892460][ T5678] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.942671][ T6390] hsr_slave_0: entered promiscuous mode [ 362.949061][ T5678] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.983208][ T6390] hsr_slave_1: entered promiscuous mode [ 362.990286][ T5678] usb 1-1: config 1 has no interface number 0 [ 363.014222][ T5678] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.042330][ T6390] debugfs: 'hsr0' already exists in 'hsr' [ 363.061362][ T6390] Cannot create hsr debugfs directory [ 363.087383][ T5678] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 363.116593][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.138800][ T5678] usb 1-1: Product: syz [ 363.143911][ T5678] usb 1-1: Manufacturer: syz [ 363.151625][ T5678] usb 1-1: SerialNumber: syz [ 363.528714][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.237'. [ 363.582935][ T34] IPVS: stop unused estimator thread 0... [ 363.947139][ T6611] ===================================================== [ 363.959885][ T6611] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 363.970160][ T6611] mptcp_established_options+0x112f/0x3530 [ 363.976370][ T6611] tcp_established_options+0x312/0xcc0 [ 363.982021][ T6611] __tcp_transmit_skb+0x5dc/0x5fe0 [ 363.987474][ T6611] __tcp_send_ack+0x967/0xad0 [ 363.992323][ T6611] tcp_send_ack+0x3d/0x60 [ 363.997014][ T6611] mptcp_subflow_shutdown+0x164/0x690 [ 364.002614][ T6611] mptcp_check_send_data_fin+0x31b/0x3d0 [ 364.008662][ T6611] __mptcp_close+0x860/0x1360 [ 364.013646][ T6611] mptcp_close+0x42/0x260 [ 364.018287][ T6611] inet_release+0x1ee/0x2a0 [ 364.023024][ T6611] sock_close+0xd6/0x2f0 [ 364.027557][ T6611] __fput+0x60e/0x1010 [ 364.031797][ T6611] ____fput+0x25/0x30 [ 364.036104][ T6611] task_work_run+0x208/0x2b0 [ 364.040853][ T6611] exit_to_user_mode_loop+0x505/0x2420 [ 364.046634][ T6611] __do_fast_syscall_32+0x2dc/0x470 [ 364.052013][ T6611] do_fast_syscall_32+0x37/0x80 [ 364.062019][ T6611] do_SYSENTER_32+0x1f/0x30 [ 364.068358][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.075073][ T6611] [ 364.077497][ T6611] Local variable opts created at: [ 364.082598][ T6611] __tcp_transmit_skb+0x4d/0x5fe0 [ 364.087932][ T6611] __tcp_send_ack+0x967/0xad0 [ 364.092808][ T6611] [ 364.095396][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.3.237 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 364.106514][ T6611] Tainted: [L]=SOFTLOCKUP [ 364.110938][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.121285][ T6611] ===================================================== [ 364.128456][ T6611] Disabling lock debugging due to kernel taint [ 364.134915][ T6611] Kernel panic - not syncing: kmsan.panic set ... [ 364.141489][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.3.237 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 364.152466][ T6611] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 364.158117][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.168319][ T6611] Call Trace: [ 364.171712][ T6611] [ 364.174752][ T6611] __dump_stack+0x26/0x30 [ 364.179274][ T6611] dump_stack_lvl+0x50/0x1c0 [ 364.184047][ T6611] ? dump_stack+0x12/0x25 [ 364.188546][ T6611] dump_stack+0x1e/0x25 [ 364.192880][ T6611] vpanic+0x7b4/0x1430 [ 364.197179][ T6611] panic+0x15d/0x160 [ 364.201355][ T6611] kmsan_report+0x31a/0x320 [ 364.206086][ T6611] ? __msan_warning+0x1b/0x30 [ 364.210957][ T6611] ? mptcp_established_options+0x112f/0x3530 [ 364.217152][ T6611] ? tcp_established_options+0x312/0xcc0 [ 364.222971][ T6611] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 364.228443][ T6611] ? __tcp_send_ack+0x967/0xad0 [ 364.233462][ T6611] ? tcp_send_ack+0x3d/0x60 [ 364.238236][ T6611] ? mptcp_subflow_shutdown+0x164/0x690 [ 364.243971][ T6611] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 364.249968][ T6611] ? __mptcp_close+0x860/0x1360 [ 364.255067][ T6611] ? mptcp_close+0x42/0x260 [ 364.259724][ T6611] ? inet_release+0x1ee/0x2a0 [ 364.264631][ T6611] ? sock_close+0xd6/0x2f0 [ 364.269203][ T6611] ? __fput+0x60e/0x1010 [ 364.273612][ T6611] ? ____fput+0x25/0x30 [ 364.277950][ T6611] ? task_work_run+0x208/0x2b0 [ 364.282896][ T6611] ? exit_to_user_mode_loop+0x505/0x2420 [ 364.288788][ T6611] ? __do_fast_syscall_32+0x2dc/0x470 [ 364.294322][ T6611] ? do_fast_syscall_32+0x37/0x80 [ 364.299503][ T6611] ? do_SYSENTER_32+0x1f/0x30 [ 364.304349][ T6611] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.311076][ T6611] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.317890][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.323242][ T6611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.329293][ T6611] ? mptcp_established_options+0xc1/0x3530 [ 364.335262][ T6611] ? filter_irq_stacks+0x49/0x190 [ 364.340410][ T6611] ? stack_depot_save_flags+0x35/0x790 [ 364.345992][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.351248][ T6611] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 364.357731][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.362997][ T6611] __msan_warning+0x1b/0x30 [ 364.367624][ T6611] mptcp_established_options+0x112f/0x3530 [ 364.373696][ T6611] tcp_established_options+0x312/0xcc0 [ 364.379325][ T6611] __tcp_transmit_skb+0x5dc/0x5fe0 [ 364.384574][ T6611] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 364.390911][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.396151][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.401399][ T6611] ? kmsan_get_metadata+0xf1/0x160 [ 364.406675][ T6611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.412683][ T6611] ? __alloc_skb+0xb7d/0x1190 [ 364.417551][ T6611] __tcp_send_ack+0x967/0xad0 [ 364.422408][ T6611] tcp_send_ack+0x3d/0x60 [ 364.426876][ T6611] mptcp_subflow_shutdown+0x164/0x690 [ 364.432376][ T6611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.438318][ T6611] mptcp_check_send_data_fin+0x31b/0x3d0 [ 364.444111][ T6611] __mptcp_close+0x860/0x1360 [ 364.448947][ T6611] ? __pfx_mptcp_close+0x10/0x10 [ 364.454023][ T6611] mptcp_close+0x42/0x260 [ 364.458471][ T6611] ? __pfx_mptcp_close+0x10/0x10 [ 364.463500][ T6611] inet_release+0x1ee/0x2a0 [ 364.468154][ T6611] ? __pfx_inet_release+0x10/0x10 [ 364.473397][ T6611] sock_close+0xd6/0x2f0 [ 364.477767][ T6611] ? __pfx_sock_close+0x10/0x10 [ 364.482736][ T6611] __fput+0x60e/0x1010 [ 364.486950][ T6611] ? __pfx_____fput+0x10/0x10 [ 364.491752][ T6611] ____fput+0x25/0x30 [ 364.495854][ T6611] task_work_run+0x208/0x2b0 [ 364.500637][ T6611] exit_to_user_mode_loop+0x505/0x2420 [ 364.506342][ T6611] ? __ia32_sys_close_range+0x96/0xe0 [ 364.511902][ T6611] __do_fast_syscall_32+0x2dc/0x470 [ 364.517309][ T6611] do_fast_syscall_32+0x37/0x80 [ 364.522343][ T6611] do_SYSENTER_32+0x1f/0x30 [ 364.527009][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.533536][ T6611] RIP: 0023:0xf702f01c [ 364.537739][ T6611] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 364.557511][ T6611] RSP: 002b:00000000ffecce7c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 364.566116][ T6611] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 364.574203][ T6611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.582277][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.590366][ T6611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 364.598440][ T6611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.606576][ T6611] [ 364.610355][ T6611] Kernel Offset: disabled [ 364.614766][ T6611] Rebooting in 86400 seconds..