last executing test programs: 20m31.097091284s ago: executing program 32 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 19m5.913936889s ago: executing program 1 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd41, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val, {0x8100, 0x1, 0x0, 0xffc}}, {@llc_tr={0x11, {@llc={0xf8, 0xaa, '\f', "75b0c8f3dc42f4c34efa62ced639ae0f03e0b91f4c8d7ef1c74d0df3ffe3ca09fdb8abc368592fbc8b5807d5f50340af48c041e3595507de494c52209457b26b88f347491d836a4133130cfbead8843a7eb91f00268cdddc4445ac150414ed1999eeab23b7cba3c2304f3f12a645065bd0d9a5cfb185e20598370d6f2c8dacc2fb8a7c14e549e72921f6c561a2f2c4f780166060d6e4673a2b43306db57a74c5129642dd1fc5d14586ceefc406c5e2f20e14894dce8959b18bc5b5bf337673c1805827c6d951283397b197f9a96897ba27fbbb5f4d571ee0375ea7a8b847e26b18dadbf086449af6036439c03dab79767280e156011266d71a0fb63585435f0043c520eb4c67189a4e2e01b2215d01dd68a94b79d823a4edde9ae0323ada02175ea166a9511494f7e55f56f1bf49967022bf501f07286137b8ea790a91279e10ef075daeb38b01a2950e8ffee10e1f1ef9cbad871b14eb47bbf9533006829ec0180c3318ef3a97985b12a5a0fff81e8f2acc1ff41b74206ed5b262e48994b5d7187ea331a8fcf7bcc21f93f5ed0eba26e2e40eefd4099f93238cedb3120b1d493edba9f7d290044280e72d584fd178dba12238a7a8de2f20bc4111ab6eab783f37c3be7a881ad67e9947ca56c3a914205bbe34a31620fa6fef86e0eda6776911f43e07fa9b90d754a56e460da16699eaa52b6e795ac6d9895c11b863c1fec646f18b177e2e160ed820cb69df63ab083c285225516468c3f11b0da70b74ac4a92ce0278106e6fbad5ad5dcaf88d0f8d138856f491dce9a4c1a3e2fc60019b6f56dcd1b16993d6bc6702b38960a94a0cc3ee3a2072cd16a7209c379f660a5c6795cec2bf8aca0fd839421ec72969b492a1a1d12b80a56d2b5fe56906a484c9021c47d68f874d4a30abc6dc8857e7ca44fe985a61fc87afdb4109153f274c9f7a421a2a2e2c723f4ad2a63087d78b97459b025ddccf84af6c48872dfc326c3deb11ca4d45f0724ba15f70fc53b7f175074818dc936f006b1f6eb5a6b7f7e3706b0fabd8d219ecfd491b65b5e782df6b6ee928549ededf02cb0298d5dcfc87152bac80e8098e3f2b0c60584cd5bf29a4f1d55a7bd9e50788c89a9dd58a9d56d66d89944f18fea38d9b5ba2b20650740c66728d8a62c6678d50f1345506833f6f7aa5ed63467bd676e0a826dda33a0b7b11e2d7bd28b27bfaaed677b9e80ea3094b50880e256cdae6b0f54f9de9c1c30c39d03f1a3c97ad6efdb6d3235002036bccf042077b7c943a6411be3b5ac6ee1a3924db98f596b0af82e99640e7197f86da3406f50814888952704f981321366cbe740ec7b149405e8706cbfa608d5929575ea73676cb091b47c85b2dcdfb2b8bcc16dee941616592b97611d2e0dd4ca74c1fc6bb0e3c6cf828e28e499ba4059d974ef4b9c7a7238b916da85268fa8efdb4acc5d14c706ee3444be9c52d2bcefff1cdceb98fb16d6e4cc8a169f7436ba1e3289918f56200dd0661e2672b4e466bf7c947c9f22e1e9dfc8be183a0adc7de1d5ab09584fd573ee1f5607b62a7e9d95920d15bdda041af003cb9df406539d2c1036dee3c57c98ad2cea2e0994bbaac4573a3ad608ad49dd7cb03f6a95e6d0e9e08d2b82aab066744aa149e1bdd11917e54463799576639fb08f4bb9b5c615e7115f68c01896d6c16859c1fa191638c49c96e2667d62b2fa9eea7efff1e7d9e018c36cd527c591997c9249323c942ebcbf92fd3b61b39357a2d3162d252c52da714ec6d708fab963e8053992ac8a790a5e47928b895eb473a31f7ce71e8447fe0b17823e53ae66e5d389d2f2af491d498b70aa1a0d01fda2ccc78e5f89a68ba11bb1a14aa01fd0ecebcc5f521e9b972e9fc042c88f6ce1f4cbc08995e0fbfb27aa2a119e3de2c68b96240c8057f1836c846af4e7364ff224179cb3d77e9bd1485da08daea1dcc4e1058888e9e69092aa71c7e47d443df91246fa32c7def212736dac3bcab031870f87a7e0a461d6bd3812c92347e9238565978001a215b4c8b376cb88db26fce47e122e597f5a7d7724048d31f3f7d831b438d3e852e459aafddd1d8949341bcdb25f88b91b1c32ab76e41a67364ffea56cf6aec759527350fdc0e00ab504a559d4739698c28c06dfe5282ace104203e2e7fd4c13ab3aa4e82c4abd9823c411e3db78aca0aefa85402f3ee792a6c26986d752932febd841ee93240ee806daaeb67a387f946e1232535d0efa45c750f94b784df8ea6d26d900691b0b81369f4eff601da06a43d64ac56006f5b69c1066abdd561b5a9c3947ccde38d17fbbfe247446e2a3ff86845e9aee25493978c578c1817b1c280d20a0aed52403574a9d420e6f306d7cf7bc45b19f07da4b6ebc9a114fcd9fd1eb70efc892e31c11732d5d11a4cbaf362c20a34a6ac08c8952ef31fce839b0125fc2f7a9975ad370f77080755e9e56dd7d0e8f1e022807e381e67df94a728ef34ef1fd1c8bf41f9d11e6a672f01e3090753a7b9b46323459a02b68351a63bf405e88a1ede14490fad6a718d54b31bf463cc1636974b33d241586870c82c5f79c9286c47558e2abbcba6c63f2f379abd56c8ff70e9e26213a49ca6e06595d4eacb99a651cc49bc5d15eb21a6d238d879b96e79fe36ea0bd871a8543c2928f8a8788c81e38c07799240a3a774c8f57290df9d55681584ed2fb8cbdfbc7410e7103892d1fffb6afc683e998a655ad5dca6e36a8c7cf4e9576dbd6a77f46da3fb9f36de3a76d5bb9297879417315a773da2029ecf44c4cfdd80357b31f7129317f76b4b7f1fba80b4e3b2b3fb422f270c29a08f065921b5f4f50c53579a2bc58d11ebc7f21028bbe53c293c37d8d80e263236525bf253f45276776356c1c1a801fe2a62a032f0201bb0f70ad1fd65748bd2eaacc0fc5e27e7694f2aee8dd0e2f1a123a867c5146923c76583154496c1b7f02b8d5223b596359d20ca911d0f9a230f537efd0e4cf8e30d63eff244279ffe60128c06a5a44ff59d62362a4f25a7f9132c63bdfbc2e2c48d15b2c792f4b3f3039720e083d77b80a3ff663c15eaf127704e64bb3e9b55726e9c63b6475ffc092df15cb706cfea0f58de4e2d41ea3a63827950fa920ea4a16bd6b2596ef547aa9fdd9a8b91764516fb588dffd406bc2ce666971b9c2752e7d83f17c376653cd30f60b1352e010e144c6f093f1359e1e98cfcaa99f3ac62ea689ee1733d8d329d5d8caf220c01a55f9b27f3dd4cd5b20b44ea444ee42084b669a84c35700d7b9b64c0349746def9e8b1dfeb29a0810075b1cf192659720c5ff7e058324376b550c9720c9a48e894e75ce6cd62aaebbfb0ece04a5e1be3f78f07bb8a31c11ef2a32b63fa37b2726f3e7e101a7343ea639303499cabe5b9ed5ea308d4c37f03419b5cdf439a5547f6b406e57d238fbf532dbc2c0468361202364b4ac6a56c4d84af7d384dd4a521fe69170b43441cdc34e6d5c798ad84508c48244400f40079c3b31df1f34e307c197d13132bee8296eeef222b5e7e1898efd8579f0002c7ca794d0c84bb00312115819fa41fd437864c4c0ba232b03098fd7752e5f96e9ae83588ccf688278edc04d0a7d216d5e0e189d2d33bc726f8c7943de7303e2438c312540ee3b98913b3fe05ebe5da444704257307b03f5351c793dc9a65da2d59c78e2a1640d573480f66016c4a37f25e0904c63c91651cc203ced111981da53ab812f2e63e3c3cb210356d076b124cf26920f1ce8e042d28d28e203588e218d8b775367db009990a0da057aecef6619362f4e2be054609aebe6abd1989fbc1b950764458497f281ecd489f5616dce3b507709402fb365c209e050bcd06fd876cbbdb94f862ce3d52d3452aaa5b6f501aa873d6e080aeee111241a692c5dabee23689f287430ce255931993d7bddc16ecb9f2e99b703ffa9b8794841e035a663433907a3e675a38801ba75656a0133b59d54cb8011df11b35337e6fa7592c84ca288b29af6ec6589c3edd9096742f132bf4f0f8bba6fe56b0659bd64502a950aa84d735d3b8e56e5460dbdf4ca3a4ee873ab01b26c0dac91fabf9cfa04dbe758090a76153ebb3711e686369f80475697aecc457dc2b8d205d36c69f1553a0835a6e0584b102254a0b21ba3f0021b18299d82d270597d7630c176d973706003ad748b2be55ca9f8ef143a6c6a4e6eca5ad78016325a2a89a0b155d4f5be1479e01a7ab9bf7fc33e8cf90dc831ce7794171cf4fdedd950db3f64032e9327f1eef535b43d0b5241b043607c7478c10e86a7d3663461e8bab42f557ca65de9d63486370687022e944e51b99f0ab8f61487742681a6642d715de890d63cc9b579414b41c896aa9f46b22984eb09183d348af1bb918ae550decdff18c16352f9677f7dea442fc7d76a62f77c6e63a7b64d6e1d6f6d1e3d70569150652d82dc546123fd7bcc27d12afe768a5247ca1a1b6229f5609627b9d1b12ac38b2a54a9a3729ad2d8d41d33a96b4a0d45c3cb185ef98e8877fe10c34f15677119ffe55a5db4f0b4a28034368db0a20727319d9e26ff85e44dc0fee4fbae76192bf14b85ec18c275ebf6be7a161df5aab408264ba6e2e3a0722997929fb295bba5db0120bfeff52f8e706cd8fe72e17c19797e0b729e0b251483e02d5fc2dcac3a0c5e0d188d2a2baf47abb909db4c9103df7207bbb811850d4056b6b5946658420a5bdb18ce8b4331dfd12c8101467b2ce370e270ba7afbc27f369ea58e37d35d9f543575e912ae5a5ab9f"}}}}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r4, &(0x7f0000000400)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x62, '\x00', 0x800000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19m2.402116378s ago: executing program 1 (id=341): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x800) kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04", 0xa5, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m1.077909358s ago: executing program 1 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x26, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast2, @rand_addr=0x64010102}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0x4, 0x1, 0x2, 0xff80, 0x65, 0x8, 0x1, 0x8, 0x7ff, @empty, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) 19m0.820386465s ago: executing program 1 (id=348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m57.806995996s ago: executing program 1 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 18m57.534183215s ago: executing program 1 (id=358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x26, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast2, @rand_addr=0x64010102}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0x4, 0x1, 0x2, 0xff80, 0x65, 0x8, 0x1, 0x8, 0x7ff, @empty, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) 18m56.29828315s ago: executing program 33 (id=321): unshare(0x60000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) 18m50.852088334s ago: executing program 34 (id=334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51059928}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 18m45.855608159s ago: executing program 35 (id=347): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000180140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18m41.333911125s ago: executing program 36 (id=358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x26, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast2, @rand_addr=0x64010102}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0x4, 0x1, 0x2, 0xff80, 0x65, 0x8, 0x1, 0x8, 0x7ff, @empty, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) 18m9.514217211s ago: executing program 6 (id=416): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 18m6.213550046s ago: executing program 6 (id=418): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xc0, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x15, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 18m5.61797642s ago: executing program 6 (id=419): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m52.60311622s ago: executing program 6 (id=440): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0xfffffffffffffffe, 0x7, {0x3, 0x0, 0x6, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x2, 0x0, 0x4000005, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x7fc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004015) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00 ', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) 17m50.753473937s ago: executing program 6 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 17m46.910567614s ago: executing program 6 (id=450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m31.630027434s ago: executing program 37 (id=450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m22.460451057s ago: executing program 9 (id=3953): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 5m21.091411003s ago: executing program 9 (id=3959): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000006c9b406f047fff000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc818a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x4b) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x1a}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208b01, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/66}) 5m18.915033162s ago: executing program 4 (id=3966): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x204, 0x6, 0x45, 0x6, 0x1, "03000000000000010000ebff0000ffffffff0e", 0x4009, 0x80005}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r2, 0x0, 0x10ffff) 5m17.498838525s ago: executing program 9 (id=3974): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) 5m16.281872305s ago: executing program 9 (id=3977): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f25fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x401, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0xa000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 5m15.637744401s ago: executing program 4 (id=3981): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/177, 0xb1}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 5m15.604881739s ago: executing program 3 (id=3983): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x400, @multicast2}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read(r0, &(0x7f00000001c0)=""/106, 0x6a) 5m15.370233975s ago: executing program 4 (id=3984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000006c9b406f047fff000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc818a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x4b) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x1a}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208b01, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/66}) 5m15.337799824s ago: executing program 3 (id=3986): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x803, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty, 0xfffffffd}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 5m15.115429823s ago: executing program 9 (id=3988): io_uring_setup(0x72ce, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 5m13.369048316s ago: executing program 3 (id=3993): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5m13.367349781s ago: executing program 9 (id=3994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 5m13.089835867s ago: executing program 3 (id=3995): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40806685, 0x0) 5m12.88568381s ago: executing program 3 (id=3996): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/177, 0xb1}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 5m12.576737921s ago: executing program 3 (id=3997): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 5m11.942863767s ago: executing program 4 (id=4000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x9}, &(0x7f0000000180)=0x8) 5m11.554988726s ago: executing program 4 (id=4001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000c453dd3818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000114000000b7030000000000008500000083000100bfd24e00000000005509010000000000950000000000000085100000fcffffff1840000001000000000000000000000085100000fd"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 5m11.085032117s ago: executing program 4 (id=4003): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m58.274701877s ago: executing program 38 (id=3994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 4m57.43136062s ago: executing program 39 (id=3997): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 4m55.616196937s ago: executing program 40 (id=4003): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 25.662066378s ago: executing program 7 (id=4503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x200, 0x0, 0x2}, {0x0, 0xc2c, 0x2002}, {0x0, 0x4, 0x800, 0xb3}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x8, 0x4) 15.686186529s ago: executing program 7 (id=4517): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="8b6c77", 0x3}], 0x1, 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x7, 0x8) 14.051292882s ago: executing program 5 (id=4519): r0 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 13.985848249s ago: executing program 0 (id=4520): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xc0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x154, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752b"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x59}}, 0x8040) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13.687957571s ago: executing program 7 (id=4522): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100) syz_io_uring_setup(0x2aa8, 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000080), 0x4003) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000033c0)={0x2020}, 0x2042) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 13.626069331s ago: executing program 5 (id=4523): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r1, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab000028009"], 0xec}}, 0xc804) 13.555865793s ago: executing program 2 (id=4524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000840)={0x40, 0xf, 0x6, "ea3557ace8cc"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000980)={0x40, 0x7, 0x6, "6ed31fee1ad9"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x1, 0x5, "d84f5633fc"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x3, "2b3995"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "d8"}, 0x0}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x40884) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.262411727s ago: executing program 7 (id=4526): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000140)={[0x4]}, 0x0, 0x8) 9.929392198s ago: executing program 0 (id=4527): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000039"], 0x10}}], 0x1, 0x4000000) 9.672193328s ago: executing program 5 (id=4529): memfd_create(&(0x7f00000002c0)='[\vx\'\xa5)\xf7\xa0x\xff\x01\x00\x00\x00\x00\xf9\xff\xd0m\xff\xff\xff\xffX\xa8%,\x16\x1a\xaf\xf6\xca!\x1ae\x01\x00\x00\x00\x00\xfb\xff\xe9\x1f\x9a\xe29\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xfc\xf1\xb3\x89\xbf\x17\xaeq\t\x14\x1bx2\x85/\xff\xd4\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\x80z8y\xd2}\xf5\xe4\x9f5\x9b7r\x14\xf4\xd3\xcd\xfd\x00'/133, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendto$inet(r1, &(0x7f00000019c0), 0x0, 0x4002, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.232841579s ago: executing program 0 (id=4530): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000001040)={0x0, 0x21, 0x2}, &(0x7f0000001080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = getpgrp(0xffffffffffffffff) timer_create(0x4, &(0x7f0000000100)={0x0, 0x15, 0x2, @tid=r1}, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xe, 0x6) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) 8.737983168s ago: executing program 8 (id=4532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 8.490640559s ago: executing program 5 (id=4533): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000007600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.090963553s ago: executing program 8 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 6.281961434s ago: executing program 7 (id=4535): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 6.056800951s ago: executing program 5 (id=4536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.000567295s ago: executing program 8 (id=4537): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xc0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x154, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752b"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x59}}, 0x8040) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.397896812s ago: executing program 2 (id=4538): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fe"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x41240001, @mcast1, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.320086942s ago: executing program 8 (id=4539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newsa={0x154, 0x10, 0x633, 0x10000000, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4000000, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x1}, [@encap={0x1c, 0x4, {0x1, 0x0, 0xfffd, @in6=@empty}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) 5.228859438s ago: executing program 5 (id=4540): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f804090507020002040266072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) write$UHID_INPUT(r3, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000001c0)={0x1f97}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x2, [@enum64={0x2, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x8, 0xb, 0xf324}, {0x4, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x2}, @fwd={0xc}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x0, 0x3}, {0xd, 0x3}, {0x7, 0x5}, {0x6}]}, @volatile={0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0xa, 0x4}, {0x4, 0x3}]}, @typedef={0x8}]}}, 0x0, 0xda}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4006840) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000527e1a30806860f006f6e646e616d650000080003000300009a71819c8495c617c73175213a6e61a5cc082a4ad3a327370c93b77806c821060c289d31c1c55190f7442b269e8e65623f6822fc4a45f62dc48a005b7539dc6c5a78546b22bb8072cfc201a590999524c6e7111c2aca39e85b5cf9394bfa8311ecf59f7c6fd62a624719ce8ae438841e1e89207835310beac12594fc2fc1a9da8aff447f5cd9d26fa2725f3272a765a6cde728"], 0x2c}}, 0x800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xd4, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xf560}, {0x5, 0x12, 0x6e}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x24004050) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r8, 0x540e, 0xb1) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x1, 0x3}, 0x8) 4.944706346s ago: executing program 0 (id=4541): r0 = socket(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000440)={0x4c, 0x3e9, 0x600, 0x70bd27, 0x25dfdbfd, {0x10, 0xd5, 0x6, 0x4, {0x4e21, 0x4e24, [0x7fff, 0x400, 0x7, 0x101], [0x3, 0x0, 0x8, 0x80], 0x0, [0x81, 0x3]}, 0x2, 0xfff}}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) 4.942737521s ago: executing program 2 (id=4542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) semget(0x3, 0x0, 0x608) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000180)=@nullb, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) 4.365866248s ago: executing program 0 (id=4543): memfd_create(&(0x7f00000002c0)='[\vx\'\xa5)\xf7\xa0x\xff\x01\x00\x00\x00\x00\xf9\xff\xd0m\xff\xff\xff\xffX\xa8%,\x16\x1a\xaf\xf6\xca!\x1ae\x01\x00\x00\x00\x00\xfb\xff\xe9\x1f\x9a\xe29\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xfc\xf1\xb3\x89\xbf\x17\xaeq\t\x14\x1bx2\x85/\xff\xd4\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\x80z8y\xd2}\xf5\xe4\x9f5\x9b7r\x14\xf4\xd3\xcd\xfd\x00'/133, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendto$inet(r1, &(0x7f00000019c0), 0x0, 0x4002, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.358964055s ago: executing program 8 (id=4544): socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c0001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x2, 0xc8080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 3.995653868s ago: executing program 0 (id=4545): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000140)={[0x4]}, 0x0, 0x8) 3.665049713s ago: executing program 2 (id=4546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x6cf646d1a0df3ac) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000700)=@ethtool_gstrings={0x1b, 0x3, 0x1e, "8334c9fc463ba24e8014fe71214c03a46a493c463af86dba2a3d5d4c1b2e"}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 1.804852601s ago: executing program 2 (id=4547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x2001) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000048ffca945f64009400ff0325010ebc000000000000277900f0fffeffe809005300fff5ddfcffff0f0002000400100007000140040000", 0x57}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e2, &(0x7f0000000140)) mlockall(0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0d050781"], 0x10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) 668.961082ms ago: executing program 8 (id=4548): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x5}) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90002012}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000000)=']-[&,#\\T\x00', 0x0, &(0x7f0000000100)={@align=0x46, {0x302, 0x0, 0xfffff26b}}, 0xeb3, &(0x7f0000000140), &(0x7f0000000180)}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r8) recvmmsg(r8, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r9, r9, 0x0, 0x80000000) r10 = socket$inet(0x2, 0x3, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x39, 0x1c, 0x64, 0x0, 0x7, 0x11, 0x0, @loopback, @multicast2}, {0x4e22, 0x4e22, 0x8}}}}}, 0x0) epoll_pwait(r4, &(0x7f0000000000), 0x0, 0x5, 0x0, 0x0) 117.60229ms ago: executing program 2 (id=4549): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xc0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x154, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752b"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x59}}, 0x8040) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 7 (id=4550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x8, 0x4) kernel console output (not intermixed with test programs): imeout [ 825.255689][T14505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 825.286214][T14505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.287808][T14505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 825.344944][T14505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 825.346789][T14505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 825.395030][T14505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 825.396486][T14505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 825.520459][T14505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.849656][T14505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.892601][T14505] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.926779][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.926984][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.345450][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.349069][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.495996][T14669] mmap: syz.8.2793 (14669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 827.561175][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.116671][T14683] fuse: fd is not a fuse device [ 828.498212][T14505] veth0_vlan: entered promiscuous mode [ 828.542609][T14505] veth1_vlan: entered promiscuous mode [ 828.619259][T14505] veth0_macvtap: entered promiscuous mode [ 828.642421][T14505] veth1_macvtap: entered promiscuous mode [ 828.679293][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.700678][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.899987][ T167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.906415][ T167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.906939][ T167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.909029][ T167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.438806][ T7282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.438843][ T7282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.564927][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.564949][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.243695][T14771] fuse: Bad value for 'fd' [ 837.448455][T14820] fuse: fd is not a fuse device [ 839.934203][T14860] fuse: fd is not a fuse device [ 840.292582][T14863] fuse: Unknown parameter 'group_i00000000000000000000' [ 841.421067][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2864'. [ 841.943867][T14897] 9p: Bad value for 'wfdno' [ 842.910176][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2876'. [ 846.505753][ T5606] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 846.859265][T14985] 9p: Bad value for 'wfdno' [ 847.907878][ T5606] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 848.140419][ T6002] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 848.323305][ T6002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.323326][ T6002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.323338][ T6002] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 848.323371][ T6002] usb 5-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 848.323384][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.431866][ T6002] usb 5-1: config 0 descriptor?? [ 848.494497][T15015] 9p: Bad value for 'wfdno' [ 849.621170][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 850.966868][T15052] 9p: Bad value for 'wfdno' [ 851.444418][ T6002] usbhid 5-1:0.0: can't add hid device: -71 [ 851.444539][ T6002] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 851.532726][ T6002] usb 5-1: USB disconnect, device number 5 [ 851.753555][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 854.370433][T14702] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 854.536904][T14702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.536940][T14702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.536963][T14702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 854.537008][T14702] usb 5-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 854.537031][T14702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.619453][T14702] usb 5-1: config 0 descriptor?? [ 857.078752][T15142] fuse: fd is not a fuse device [ 858.079954][T14702] usbhid 5-1:0.0: can't add hid device: -71 [ 858.080072][T14702] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 858.213517][T14702] usb 5-1: USB disconnect, device number 6 [ 858.482787][T15172] fuse: fd is not a fuse device [ 860.782836][T15214] fuse: fd is not a fuse device [ 863.728512][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 864.099957][T15264] fuse: fd is not a fuse device [ 865.260182][ T5606] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 865.498303][T15297] fuse: fd is not a fuse device [ 866.300695][ T5606] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 868.313682][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 870.219325][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.219376][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.112342][ T5606] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 871.484307][T15398] fuse: fd is not a fuse device [ 872.549646][ T5606] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 873.369431][T15438] fuse: fd is not a fuse device [ 874.647567][T15472] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3089'. [ 874.902721][T15476] fuse: fd is not a fuse device [ 875.692994][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3101'. [ 876.769798][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3112'. [ 877.031826][T15538] fuse: fd is not a fuse device [ 877.138124][ T36] audit: type=1326 audit(1779566050.444:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15539 comm="syz.7.3117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19b37bce59 code=0x0 [ 877.346741][T15546] fuse: fd is not a fuse device [ 878.287710][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3126'. [ 878.579704][T15578] fuse: fd is not a fuse device [ 878.664194][T15581] fuse: fd is not a fuse device [ 878.964001][T15586] fuse: fd is not a fuse device [ 879.361147][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3138'. [ 880.758956][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3152'. [ 882.080436][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3167'. [ 882.275891][T15675] fuse: fd is not a fuse device [ 885.726716][T15692] fuse: fd is not a fuse device [ 886.189868][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3181'. [ 886.439316][T15711] fuse: fd is not a fuse device [ 886.638548][T15718] fuse: fd is not a fuse device [ 887.250689][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3196'. [ 887.485121][T15744] fuse: fd is not a fuse device [ 887.614470][T15750] fuse: Unknown parameter 'user_i00000000000000000000' [ 888.116328][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3209'. [ 888.509694][T15777] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 888.538999][T15779] fuse: Unknown parameter 'user_i00000000000000000000' [ 889.144696][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 889.469579][T15808] fuse: fd is not a fuse device [ 889.779784][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.805472][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.843830][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.870603][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.875361][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 890.570628][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3238'. [ 891.092691][ T3378] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.586725][ T3378] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.950393][ T5606] Bluetooth: hci4: command tx timeout [ 891.955217][ T3378] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.413172][ T3378] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.875150][T15809] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.875314][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.875457][T15809] bridge_slave_0: entered allmulticast mode [ 892.876982][T15809] bridge_slave_0: entered promiscuous mode [ 892.879085][T15809] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.879226][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.879366][T15809] bridge_slave_1: entered allmulticast mode [ 892.929838][T15809] bridge_slave_1: entered promiscuous mode [ 892.977648][T15809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.006436][T15891] fuse: Bad value for 'fd' [ 893.022667][T15809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.114054][T15809] team0: Port device team_slave_0 added [ 893.133517][T15809] team0: Port device team_slave_1 added [ 893.289484][T15809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.289502][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.289528][T15809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.341509][T15809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.341525][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.341546][T15809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.686503][T15809] hsr_slave_0: entered promiscuous mode [ 893.833774][T15809] hsr_slave_1: entered promiscuous mode [ 893.925117][T15809] debugfs: 'hsr0' already exists in 'hsr' [ 893.977046][T15809] Cannot create hsr debugfs directory [ 894.185999][ T5606] Bluetooth: hci4: command tx timeout [ 894.880487][T15912] tmpfs: Bad value for 'nr_inodes' [ 896.270546][ T5606] Bluetooth: hci4: command tx timeout [ 896.448381][ T3378] bridge_slave_1: left allmulticast mode [ 896.448417][ T3378] bridge_slave_1: left promiscuous mode [ 896.448640][ T3378] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.714035][ T3378] bridge_slave_0: left allmulticast mode [ 896.714073][ T3378] bridge_slave_0: left promiscuous mode [ 896.714243][ T3378] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.350446][ T5606] Bluetooth: hci4: command tx timeout [ 898.588259][ T3378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.674998][ T3378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.677252][ T13] smbdirect: ib_dev[syz1] removed [ 898.848218][ T3378] bond0 (unregistering): Released all slaves [ 900.126946][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 901.443339][T16053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 901.910627][ T3378] hsr_slave_0: left promiscuous mode [ 901.951328][ T3378] hsr_slave_1: left promiscuous mode [ 901.952290][ T3378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.952306][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.012270][ T3378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.012296][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.181290][ T3378] veth1_macvtap: left promiscuous mode [ 902.181352][ T3378] veth0_macvtap: left promiscuous mode [ 902.181486][ T3378] veth1_vlan: left promiscuous mode [ 902.181577][ T3378] veth0_vlan: left promiscuous mode [ 902.451261][T16075] fuse: fd is not a fuse device [ 903.620828][ T3378] team0 (unregistering): Port device team_slave_1 removed [ 903.681298][ T3378] team0 (unregistering): Port device team_slave_0 removed [ 904.110771][T16097] fuse: fd is not a fuse device [ 904.657792][T16113] fuse: fd is not a fuse device [ 904.937587][T15809] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 905.060473][T15809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.064307][T15809] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 905.176347][T15809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.179420][T15809] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 905.272396][T15809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.295400][T15809] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 905.423769][T15809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.701741][T15809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.733976][T15809] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.745406][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.745621][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.778162][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.778295][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.358590][T16168] fuse: Unknown parameter 'group_id00000000000000000000' [ 908.345880][T15809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.917908][T15809] veth0_vlan: entered promiscuous mode [ 908.947294][T15809] veth1_vlan: entered promiscuous mode [ 909.119235][T15809] veth0_macvtap: entered promiscuous mode [ 909.147621][T15809] veth1_macvtap: entered promiscuous mode [ 909.209261][T15809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.229397][T15809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.261858][ T3378] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.261908][ T3378] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.261942][ T3378] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.261974][ T3378] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.194998][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.195019][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.555365][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.555386][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.611009][T16230] fuse: fd is not a fuse device [ 911.967839][T16233] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.978509][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 913.024244][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 913.025570][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 913.027009][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 913.027753][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 915.283483][ T5606] Bluetooth: hci3: command tx timeout [ 915.744258][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 915.749296][T16271] fuse: fd is not a fuse device [ 915.824088][T16273] fuse: Unknown parameter '0x0000000000000004' [ 916.195042][T16286] fuse: Unknown parameter 'user_id00000000000000000000' [ 916.433637][ T92] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.872282][ T5606] Bluetooth: hci3: command tx timeout [ 918.039437][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.039564][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.039682][T16240] bridge_slave_0: entered allmulticast mode [ 918.070883][T16240] bridge_slave_0: entered promiscuous mode [ 919.361613][ T92] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.396583][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.396715][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.396947][T16240] bridge_slave_1: entered allmulticast mode [ 919.416124][T16240] bridge_slave_1: entered promiscuous mode [ 919.506460][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.524254][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.651679][T16240] team0: Port device team_slave_0 added [ 919.657095][T16240] team0: Port device team_slave_1 added [ 919.934331][T16326] fuse: fd is not a fuse device [ 919.960673][ T5606] Bluetooth: hci3: command tx timeout [ 919.998721][ T92] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.063975][T16330] fuse: Unknown parameter '0x0000000000000004' [ 920.091609][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.091620][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.091635][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.093119][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.093129][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.093144][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.222942][T16240] hsr_slave_0: entered promiscuous mode [ 920.224262][T16240] hsr_slave_1: entered promiscuous mode [ 920.225149][T16240] debugfs: 'hsr0' already exists in 'hsr' [ 920.225172][T16240] Cannot create hsr debugfs directory [ 920.636061][ T92] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.714721][T16343] fuse: fd is not a fuse device [ 922.042569][ T5606] Bluetooth: hci3: command tx timeout [ 922.153361][T16355] fuse: Bad value for 'fd' [ 922.336598][T16361] fuse: fd is not a fuse device [ 922.762072][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3398'. [ 924.094574][ T5606] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 924.264346][ T92] bridge_slave_1: left allmulticast mode [ 924.264382][ T92] bridge_slave_1: left promiscuous mode [ 924.264621][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.412198][ T92] bridge_slave_0: left allmulticast mode [ 924.412236][ T92] bridge_slave_0: left promiscuous mode [ 924.412478][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.467163][T16399] fuse: Bad value for 'fd' [ 924.767722][T16404] fuse: Bad value for 'fd' [ 924.769170][T16405] fuse: Unknown parameter 'fd0x0000000000000004' [ 925.118717][T16411] fuse: fd is not a fuse device [ 925.622753][T16421] fuse: Bad value for 'fd' [ 925.853871][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.930830][T16425] fuse: Unknown parameter 'fd0x0000000000000004' [ 925.934963][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.977571][ T92] bond0 (unregistering): Released all slaves [ 926.018378][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 926.018655][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3410'. [ 926.675074][T16444] fuse: fd is not a fuse device [ 927.274748][T16461] fuse: Unknown parameter '0x0000000000000003' [ 927.689287][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 927.756510][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3431'. [ 928.566541][T16483] fuse: fd is not a fuse device [ 929.190818][ T92] hsr_slave_0: left promiscuous mode [ 929.241227][ T92] hsr_slave_1: left promiscuous mode [ 929.242194][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.242218][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.291567][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.291596][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.365818][ T92] veth1_macvtap: left promiscuous mode [ 929.366074][ T92] veth1_vlan: left promiscuous mode [ 929.366243][ T92] veth0_vlan: left promiscuous mode [ 929.416545][T16491] 9p: Bad value for 'rfdno' [ 929.498428][T16495] fuse: Unknown parameter '0x0000000000000003' [ 930.342390][ T92] team0 (unregistering): Port device team_slave_1 removed [ 930.422622][ T92] team0 (unregistering): Port device team_slave_0 removed [ 930.548998][T16519] 9p: Bad value for 'rfdno' [ 930.959674][T16523] fuse: Unknown parameter '0x0000000000000003' [ 931.308647][T16499] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3442'. [ 931.405986][T16530] fuse: Unknown parameter 'group_id00000000000000000000' [ 931.591065][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.591146][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.597824][T16555] fuse: fd is not a fuse device [ 932.697649][T16240] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 932.724105][T16558] 9p: Bad value for 'rfdno' [ 932.796004][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 932.853380][T16240] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 932.902852][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.904399][T16240] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 932.955478][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.956644][T16240] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 932.978080][T16566] fuse: Unknown parameter '0x0000000000000003' [ 933.017150][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.497405][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.568482][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.669225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.669500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.745980][T16595] fuse: fd is not a fuse device [ 933.759644][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.762338][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.936051][T16629] fuse: Unknown parameter '0x0000000000000003' [ 935.218837][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.836529][T16240] veth0_vlan: entered promiscuous mode [ 935.847650][T16240] veth1_vlan: entered promiscuous mode [ 935.942825][T16240] veth0_macvtap: entered promiscuous mode [ 935.953385][T16240] veth1_macvtap: entered promiscuous mode [ 935.997818][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.010558][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.026773][ T7277] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.027096][ T7277] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.027134][ T7277] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.027168][ T7277] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.780544][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.780567][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.959251][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.959273][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.083841][T16655] fuse: Bad value for 'user_id' [ 937.083862][T16655] fuse: Bad value for 'user_id' [ 937.163968][T16657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.175685][T14510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.249433][T14510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.362982][T14510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.369834][T14510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.376979][T14510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.750472][T14510] Bluetooth: hci5: command 0x0406 tx timeout [ 939.897114][ T4916] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 939.988734][ T161] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.523270][ T4916] Bluetooth: hci0: command tx timeout [ 940.593627][ T161] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.263257][ T161] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.397134][ T4916] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 941.803111][ T161] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.375424][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.375491][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.375848][T16678] bridge_slave_0: entered allmulticast mode [ 942.383162][T16678] bridge_slave_0: entered promiscuous mode [ 942.487760][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.487860][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.488062][T16678] bridge_slave_1: entered allmulticast mode [ 942.512113][T16678] bridge_slave_1: entered promiscuous mode [ 942.589206][T16678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.590415][ T4916] Bluetooth: hci0: command tx timeout [ 942.610025][T16678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.741964][T16678] team0: Port device team_slave_0 added [ 942.754129][T16678] team0: Port device team_slave_1 added [ 943.020698][T16678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.020721][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.020748][T16678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.097442][T16678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.097458][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.097483][T16678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.112960][T16805] fuse: fd is not a fuse device [ 944.222130][ T161] bridge_slave_1: left allmulticast mode [ 944.222162][ T161] bridge_slave_1: left promiscuous mode [ 944.222403][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.395413][ T161] bridge_slave_0: left allmulticast mode [ 944.395448][ T161] bridge_slave_0: left promiscuous mode [ 944.395847][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.670364][ T4916] Bluetooth: hci0: command tx timeout [ 945.865131][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.941359][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.987174][ T161] bond0 (unregistering): Released all slaves [ 946.053723][T16678] hsr_slave_0: entered promiscuous mode [ 946.061334][T16678] hsr_slave_1: entered promiscuous mode [ 946.070485][T16678] debugfs: 'hsr0' already exists in 'hsr' [ 946.070510][T16678] Cannot create hsr debugfs directory [ 946.117973][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 946.750316][ T4916] Bluetooth: hci0: command tx timeout [ 948.328778][T16868] fuse: Bad value for 'rootmode' [ 948.469473][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 950.016118][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 950.300707][ T161] hsr_slave_0: left promiscuous mode [ 950.320804][ T161] hsr_slave_1: left promiscuous mode [ 950.321848][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.321871][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.419313][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.419340][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.578965][ T161] veth1_macvtap: left promiscuous mode [ 950.579077][ T161] veth0_macvtap: left promiscuous mode [ 950.579510][ T161] veth1_vlan: left promiscuous mode [ 950.579678][ T161] veth0_vlan: left promiscuous mode [ 951.281573][T16919] fuse: Bad value for 'rootmode' [ 953.653592][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'. [ 953.985940][T16943] fuse: fd is not a fuse device [ 954.061924][ T161] team0 (unregistering): Port device team_slave_1 removed [ 954.144940][ T161] team0 (unregistering): Port device team_slave_0 removed [ 958.299521][T16962] fuse: fd is not a fuse device [ 960.300592][ T161] IPVS: stop unused estimator thread 0... [ 962.693980][T16678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 963.707750][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 963.833165][T16678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.854909][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 963.857168][T16678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 963.905836][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.907387][T16678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 963.968823][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.131238][T17028] fuse: Unknown parameter 'use00000000000000000000' [ 964.356802][T16678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.424047][T16678] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.475353][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.475557][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.557973][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.559253][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.518200][T16678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.621570][T17093] syzkaller0: entered promiscuous mode [ 965.621596][T17093] syzkaller0: entered allmulticast mode [ 966.076684][T17108] fuse: fd is not a fuse device [ 966.591983][T16678] veth0_vlan: entered promiscuous mode [ 966.611280][T16678] veth1_vlan: entered promiscuous mode [ 966.685918][T16678] veth0_macvtap: entered promiscuous mode [ 966.705286][T16678] veth1_macvtap: entered promiscuous mode [ 966.743944][T16678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.889372][T16678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.918641][ T1192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.919950][ T1192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.919991][ T1192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.920027][ T1192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.950534][ T6002] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 967.151661][ T6002] usb 9-1: device descriptor read/64, error -71 [ 967.444262][T17133] fuse: fd is not a fuse device [ 967.713456][ T6002] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 967.799566][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.799587][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.850305][ T6002] usb 9-1: device descriptor read/64, error -71 [ 967.879260][T17136] fuse: Unknown parameter 'use00000000000000000000' [ 967.895742][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.895762][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.963457][ T6002] usb usb9-port1: attempt power cycle [ 968.400307][ T6002] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 968.434300][ T6002] usb 9-1: device descriptor read/8, error -71 [ 968.690481][ T6002] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 968.712309][ T6002] usb 9-1: device descriptor read/8, error -71 [ 968.833201][ T6002] usb usb9-port1: unable to enumerate USB device [ 969.226731][T14510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 969.266269][T14510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 969.268031][T14510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 969.269449][T14510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 969.282802][T14510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 970.552055][T17190] fuse: Unknown parameter 'use00000000000000000000' [ 971.400317][ T4916] Bluetooth: hci1: command tx timeout [ 971.654793][T17163] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.654932][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.655044][T17163] bridge_slave_0: entered allmulticast mode [ 971.656560][T17163] bridge_slave_0: entered promiscuous mode [ 971.658748][T17163] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.658866][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.659003][T17163] bridge_slave_1: entered allmulticast mode [ 971.660795][T17163] bridge_slave_1: entered promiscuous mode [ 971.722882][T17163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.726165][T17163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.788794][T17163] team0: Port device team_slave_0 added [ 971.797902][T17163] team0: Port device team_slave_1 added [ 971.822048][ T6002] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 971.938521][T17163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.938534][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.938549][T17163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.941473][T17163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.941488][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.941512][T17163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.950461][ T6002] usb 9-1: device descriptor read/64, error -71 [ 972.210405][ T6002] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 972.251100][T17163] hsr_slave_0: entered promiscuous mode [ 972.252730][T17163] hsr_slave_1: entered promiscuous mode [ 972.383658][ T6002] usb 9-1: device descriptor read/64, error -71 [ 972.491633][ T6002] usb usb9-port1: attempt power cycle [ 972.843109][ T6002] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 972.868597][ T6002] usb 9-1: device descriptor read/8, error -71 [ 973.167345][ T6002] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 973.193060][ T6002] usb 9-1: device descriptor read/8, error -71 [ 973.300629][ T6002] usb usb9-port1: unable to enumerate USB device [ 973.368436][ T67] bridge_slave_1: left allmulticast mode [ 973.368468][ T67] bridge_slave_1: left promiscuous mode [ 973.368747][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.450995][T17242] fuse: Unknown parameter 'user_i00000000000000000000' [ 973.470412][ T4916] Bluetooth: hci1: command tx timeout [ 973.511973][ T67] bridge_slave_0: left allmulticast mode [ 973.512002][ T67] bridge_slave_0: left promiscuous mode [ 973.514096][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.721043][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.810899][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.864869][ T67] bond0 (unregistering): Released all slaves [ 974.926369][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 975.550794][ T4916] Bluetooth: hci1: command tx timeout [ 976.029450][T17294] fuse: Unknown parameter 'user_i00000000000000000000' [ 976.324683][ T6002] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 976.470291][ T6002] usb 8-1: device descriptor read/64, error -71 [ 976.743901][ T6002] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 976.880268][ T6002] usb 8-1: device descriptor read/64, error -71 [ 976.924303][ T67] hsr_slave_0: left promiscuous mode [ 976.971286][ T67] hsr_slave_1: left promiscuous mode [ 976.972285][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.991156][ T6002] usb usb8-port1: attempt power cycle [ 977.032067][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.374591][ T6002] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 977.415507][ T6002] usb 8-1: device descriptor read/8, error -71 [ 977.631480][ T4916] Bluetooth: hci1: command tx timeout [ 977.670321][ T6002] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 977.701465][ T6002] usb 8-1: device descriptor read/8, error -71 [ 977.800841][ T67] team0 (unregistering): Port device team_slave_1 removed [ 977.820727][ T6002] usb usb8-port1: unable to enumerate USB device [ 977.891520][ T67] team0 (unregistering): Port device team_slave_0 removed [ 978.453917][T17335] fuse: Unknown parameter 'user_i00000000000000000000' [ 980.484923][ T67] IPVS: stop unused estimator thread 0... [ 980.937826][T17163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 981.052039][T17163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.057039][T17163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.118359][T17163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.124738][T17163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 981.181438][T17163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 981.183821][T17163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 981.275387][T17163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.634898][T17407] fuse: Unknown parameter 'use00000000000000000000' [ 981.651458][T17163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.784947][T17163] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.876610][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.876812][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.888508][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.888715][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.895130][T17163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.012557][T17163] veth0_vlan: entered promiscuous mode [ 983.037943][T17163] veth1_vlan: entered promiscuous mode [ 983.106718][T17163] veth0_macvtap: entered promiscuous mode [ 983.131300][T17163] veth1_macvtap: entered promiscuous mode [ 983.167545][T17163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.196151][T17163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.231488][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.231720][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.231882][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.231909][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.170184][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.170205][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.397809][ T7277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.397829][ T7277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.112159][T17469] fuse: Unknown parameter 'use00000000000000000000' [ 985.524419][T17485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 985.524437][T17485] IPv6: NLM_F_CREATE should be set when creating new route [ 985.839590][T17482] netlink: 'syz.3.3700': attribute type 8 has an invalid length. [ 986.867170][T17517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 986.867192][T17517] IPv6: NLM_F_CREATE should be set when creating new route [ 987.048976][T17521] fuse: Unknown parameter 'use00000000000000000000' [ 987.170405][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3713'. [ 987.561938][T17528] loop5: detected capacity change from 0 to 1 [ 987.696177][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 987.696850][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.697055][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 987.697919][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.697948][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 987.698743][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.698771][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 987.786628][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.786665][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 987.869834][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.869866][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 988.016548][T17534] tmpfs: Unsupported parameter 'huge' [ 988.265155][T17536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 988.933629][T17552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 988.933642][T17552] IPv6: NLM_F_CREATE should be set when creating new route [ 990.353522][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 990.354683][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 990.354712][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 990.358169][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 990.358201][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 990.402894][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 990.402928][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 990.446562][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 990.447523][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 990.762407][T17571] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3733'. [ 991.054847][T17577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.746813][T17597] fuse: Bad value for 'fd' [ 993.200084][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.201337][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.829435][T17626] fuse: Bad value for 'fd' [ 997.118124][T17664] fuse: Bad value for 'fd' [ 997.508323][T17675] fuse: Bad value for 'fd' [ 999.905885][T17700] fuse: Unknown parameter 'user_i00000000000000000000' [ 1003.082201][T17757] fuse: Unknown parameter 'user_id00000000000000000000' [ 1005.847601][T17782] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1008.322084][T17805] fuse: Unknown parameter 'user_id00000000000000000000' [ 1009.689332][T17835] ªªªªªª: renamed from vlan0 (while UP) [ 1009.752953][T17839] cgroup: Unexpected value for 'all' [ 1009.852875][ T4916] Bluetooth: hci5: unexpected event for opcode 0x4889 [ 1010.404858][T17853] fuse: Unknown parameter 'user_id00000000000000000000' [ 1010.931677][ T955] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1011.110258][ T955] usb 8-1: Using ep0 maxpacket: 32 [ 1011.149329][ T955] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1011.149359][ T955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.149379][ T955] usb 8-1: Product: syz [ 1011.149392][ T955] usb 8-1: Manufacturer: syz [ 1011.149407][ T955] usb 8-1: SerialNumber: syz [ 1011.219985][ T955] usb 8-1: config 0 descriptor?? [ 1011.637422][ T955] airspy 8-1:0.0: Board ID: 00 [ 1011.637444][ T955] airspy 8-1:0.0: Firmware version: [ 1012.449841][ T955] airspy 8-1:0.0: usb_control_msg() failed -32 request 0f [ 1012.472143][ T955] airspy 8-1:0.0: Registered as swradio24 [ 1012.472165][ T955] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1012.480093][ T955] usb 8-1: USB disconnect, device number 12 [ 1013.085240][T17900] fuse: Bad value for 'fd' [ 1014.139678][T17915] loop5: detected capacity change from 1 to 0 [ 1014.670414][ T5734] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1014.840341][ T5734] usb 10-1: Using ep0 maxpacket: 32 [ 1014.849621][ T5734] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1014.849647][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.849657][ T5734] usb 10-1: Product: syz [ 1014.849665][ T5734] usb 10-1: Manufacturer: syz [ 1014.849672][ T5734] usb 10-1: SerialNumber: syz [ 1014.869168][ T5734] usb 10-1: config 0 descriptor?? [ 1015.342049][ T5734] airspy 10-1:0.0: Board ID: 00 [ 1015.342071][ T5734] airspy 10-1:0.0: Firmware version: [ 1015.570433][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 1016.152804][ T5734] airspy 10-1:0.0: usb_control_msg() failed -32 request 0f [ 1016.344610][ T5734] airspy 10-1:0.0: Registered as swradio24 [ 1016.344633][ T5734] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1016.389148][ T5734] usb 10-1: USB disconnect, device number 3 [ 1021.456905][T18001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1021.456928][T18001] IPv6: NLM_F_CREATE should be set when creating new route [ 1030.063846][T18159] fuse: Bad value for 'fd' [ 1030.833153][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3958'. [ 1031.110016][T18175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1031.850274][ T6002] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1032.027274][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.027303][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.027345][ T6002] usb 10-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1032.027367][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.099557][ T6002] usb 10-1: config 0 descriptor?? [ 1032.131910][ T6002] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1033.544674][T18201] fuse: Bad value for 'fd' [ 1034.787925][ T5853] usb 10-1: USB disconnect, device number 4 [ 1036.046794][T14510] Bluetooth: hci3: command 0x0406 tx timeout [ 1036.631169][T18242] fuse: Bad value for 'fd' [ 1037.350368][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1037.518210][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.518240][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1037.518284][ T5853] usb 5-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1037.518304][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.655861][ T5853] usb 5-1: config 0 descriptor?? [ 1037.725141][ T5853] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1039.402235][T18280] fuse: Bad value for 'fd' [ 1040.209963][T18287] fuse: Bad value for 'fd' [ 1040.458525][ T6002] usb 5-1: USB disconnect, device number 7 [ 1040.857969][T18292] fuse: Bad value for 'group_id' [ 1040.857988][T18292] fuse: Bad value for 'group_id' [ 1042.506899][T18310] fuse: Bad value for 'fd' [ 1043.273658][T18318] fuse: Bad value for 'fd' [ 1043.890283][T14702] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1044.070807][T14702] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.070838][T14702] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1044.070862][T14702] usb 8-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1044.070874][T14702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.075881][T14702] usb 8-1: config 0 descriptor?? [ 1044.137321][T14702] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1046.882618][ T54] usb 8-1: USB disconnect, device number 13 [ 1047.673877][T18333] fuse: Bad value for 'group_id' [ 1047.673889][T18333] fuse: Bad value for 'group_id' [ 1051.860293][ T5853] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1052.037404][ T5853] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.037456][ T5853] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1052.037480][ T5853] usb 9-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1052.037493][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.093715][ T5853] usb 9-1: config 0 descriptor?? [ 1052.149909][ T5853] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1054.315263][T14510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.331608][T14510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.393807][T14510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.399138][T14510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.423732][T14510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1054.446653][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.446720][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.042878][ T5734] usb 9-1: USB disconnect, device number 11 [ 1055.210096][T14510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1055.227571][T14510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1055.324094][T14510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1055.349915][T14510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1055.358400][T14510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1057.023312][ T5606] Bluetooth: hci2: command tx timeout [ 1057.029488][T14510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1057.039724][T14510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1057.041749][T14510] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1057.043869][T14510] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1057.044831][T14510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1057.550510][ T4916] Bluetooth: hci6: command tx timeout [ 1058.679729][ T5712] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1058.855671][ T5712] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.855722][ T5712] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1058.855765][ T5712] usb 9-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1058.855788][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.943276][ T5712] usb 9-1: config 0 descriptor?? [ 1058.959683][ T5712] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1059.100561][ T4916] Bluetooth: hci2: command tx timeout [ 1059.319105][ T4916] Bluetooth: hci7: command tx timeout [ 1060.069549][T14510] Bluetooth: hci6: command tx timeout [ 1061.150306][ T4916] Bluetooth: hci2: command tx timeout [ 1061.593710][ T4916] Bluetooth: hci7: command tx timeout [ 1061.760239][ T31] usb 9-1: USB disconnect, device number 12 [ 1062.120374][ T4916] Bluetooth: hci6: command tx timeout [ 1062.271442][ T4916] Bluetooth: hci0: command 0x0406 tx timeout [ 1063.234628][T14510] Bluetooth: hci2: command tx timeout [ 1063.630234][T14510] Bluetooth: hci7: command tx timeout [ 1064.158729][T14510] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 1064.230160][T14510] Bluetooth: hci6: command tx timeout [ 1065.624498][ T56] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.710218][T14510] Bluetooth: hci7: command tx timeout [ 1066.188222][ T56] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.655190][ T56] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.684944][T18396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.685135][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.685333][T18396] bridge_slave_0: entered allmulticast mode [ 1066.686916][T18396] bridge_slave_0: entered promiscuous mode [ 1066.716464][T18396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.716651][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.716794][T18396] bridge_slave_1: entered allmulticast mode [ 1066.718988][T18396] bridge_slave_1: entered promiscuous mode [ 1067.054705][ T56] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.118879][T18396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.155512][T18396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.228751][T18369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.228953][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.229172][T18369] bridge_slave_0: entered allmulticast mode [ 1067.263759][T18369] bridge_slave_0: entered promiscuous mode [ 1067.348395][T18369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.348520][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.349047][T18369] bridge_slave_1: entered allmulticast mode [ 1067.372336][T18369] bridge_slave_1: entered promiscuous mode [ 1067.377368][T18396] team0: Port device team_slave_0 added [ 1067.420529][T18396] team0: Port device team_slave_1 added [ 1067.573302][T18376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.573510][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.573715][T18376] bridge_slave_0: entered allmulticast mode [ 1067.577181][T18376] bridge_slave_0: entered promiscuous mode [ 1067.664951][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.665072][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.665299][T18376] bridge_slave_1: entered allmulticast mode [ 1067.667762][T18376] bridge_slave_1: entered promiscuous mode [ 1067.693775][T18369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.764260][T18369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.765113][T18396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.765125][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.765145][T18396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.867281][T18396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.867292][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.867308][T18396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.881677][T18376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.978117][T18376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.979787][T18369] team0: Port device team_slave_0 added [ 1068.069158][T18369] team0: Port device team_slave_1 added [ 1068.330654][T18376] team0: Port device team_slave_0 added [ 1068.397579][T18376] team0: Port device team_slave_1 added [ 1068.399294][T18369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.399306][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.399321][T18369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.468574][T18396] hsr_slave_0: entered promiscuous mode [ 1068.477937][T18396] hsr_slave_1: entered promiscuous mode [ 1068.481042][T18396] debugfs: 'hsr0' already exists in 'hsr' [ 1068.481067][T18396] Cannot create hsr debugfs directory [ 1068.525135][T18369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.525151][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.525177][T18369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.965300][T18376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.965317][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.965342][T18376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.032136][T18376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.032154][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.032180][T18376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.572273][ T56] bridge_slave_1: left allmulticast mode [ 1069.572307][ T56] bridge_slave_1: left promiscuous mode [ 1069.572565][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.691641][ T56] bridge_slave_0: left allmulticast mode [ 1069.691665][ T56] bridge_slave_0: left promiscuous mode [ 1069.691882][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.903465][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.963202][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.004768][ T56] bond0 (unregistering): Released all slaves [ 1071.159030][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4065'. [ 1071.189266][T18369] hsr_slave_0: entered promiscuous mode [ 1071.247845][T18369] hsr_slave_1: entered promiscuous mode [ 1071.251043][T18369] debugfs: 'hsr0' already exists in 'hsr' [ 1071.251068][T18369] Cannot create hsr debugfs directory [ 1071.531239][T18376] hsr_slave_0: entered promiscuous mode [ 1071.535140][T18376] hsr_slave_1: entered promiscuous mode [ 1071.537830][T18376] debugfs: 'hsr0' already exists in 'hsr' [ 1071.537857][T18376] Cannot create hsr debugfs directory [ 1071.758372][T18539] input: syz0 as /devices/virtual/input/input7 [ 1074.233523][ T56] hsr_slave_0: left promiscuous mode [ 1074.270288][ T56] hsr_slave_1: left promiscuous mode [ 1074.271265][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.271288][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.332816][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.332841][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.421808][ T56] veth1_macvtap: left promiscuous mode [ 1074.421887][ T56] veth0_macvtap: left promiscuous mode [ 1074.422927][ T56] veth1_vlan: left promiscuous mode [ 1074.423027][ T56] veth0_vlan: left promiscuous mode [ 1075.290818][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1075.340960][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1077.295025][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1078.354468][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1079.323408][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1080.089255][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1082.007438][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.197480][ T5712] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1084.230340][ T5712] usb 8-1: Using ep0 maxpacket: 16 [ 1084.233086][ T5712] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.233118][ T5712] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.233142][ T5712] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1084.233184][ T5712] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1084.233208][ T5712] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.238786][ T5712] usb 8-1: config 0 descriptor?? [ 1084.629727][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.772672][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772710][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772767][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772795][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772821][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772848][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772883][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772910][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772938][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.772964][ T5712] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1084.907696][ T5712] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input8 [ 1085.055228][ T36] audit: type=1326 audit(1779566258.364:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18671 comm="syz.7.4082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15c38ce59 code=0x0 [ 1085.363125][ T5712] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1085.410934][ T5712] usb 8-1: USB disconnect, device number 14 [ 1085.438228][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.579385][T18702] fido_id[18702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1086.535047][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.914894][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.398467][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.163119][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.026575][T18396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1094.215569][T18396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.240005][T18396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1094.305985][T18396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.557361][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.625039][T18396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1094.721887][T18396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.860445][T17676] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1094.905927][T18396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1094.939860][T18396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.024747][T17676] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.024774][T17676] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.027191][T17676] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1095.027219][T17676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1095.027239][T17676] usb 8-1: SerialNumber: syz [ 1095.503843][T17676] usb 8-1: 0:2 : does not exist [ 1095.513030][T17676] usb 8-1: unit 5: unexpected type 0x09 [ 1095.559602][T18369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1095.686780][T18369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1095.737252][T18369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1095.991085][T18369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1096.176088][T17676] usb 8-1: USB disconnect, device number 15 [ 1096.269715][T18369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.413810][T18369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1096.439171][T18369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1096.484980][T18369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1097.156308][T15002] udevd[15002]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.543325][ T56] bridge_slave_1: left allmulticast mode [ 1098.543356][ T56] bridge_slave_1: left promiscuous mode [ 1098.543588][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.722630][ T56] bridge_slave_0: left allmulticast mode [ 1098.722655][ T56] bridge_slave_0: left promiscuous mode [ 1098.722808][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.220582][ T56] bridge_slave_1: left allmulticast mode [ 1099.220606][ T56] bridge_slave_1: left promiscuous mode [ 1099.220755][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.371448][ T56] bridge_slave_0: left allmulticast mode [ 1099.371480][ T56] bridge_slave_0: left promiscuous mode [ 1099.371718][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.591070][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.671631][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.712425][ T56] bond0 (unregistering): Released all slaves [ 1102.340969][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.423205][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.462195][ T56] bond0 (unregistering): Released all slaves [ 1102.602853][T18376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1102.706374][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1102.730987][T18376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1102.907296][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1102.937124][T18376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1103.023088][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.057167][T18376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1103.185978][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1103.329514][T18396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.901261][T18396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.963695][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.964056][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.132937][T18369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.151292][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.151369][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.765555][T18369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.789030][T19003] Bluetooth: MGMT ver 1.23 [ 1104.814290][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.814452][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.889966][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.900743][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.026913][T18376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.106337][T18376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.653195][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.655069][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.812794][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.812906][ T9519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.209010][ T56] hsr_slave_0: left promiscuous mode [ 1108.245034][ T56] hsr_slave_1: left promiscuous mode [ 1108.246088][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.246113][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.302090][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.302116][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.501246][ T56] hsr_slave_0: left promiscuous mode [ 1108.541529][ T56] hsr_slave_1: left promiscuous mode [ 1108.542616][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.542634][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.601897][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.601924][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.629682][ T56] veth1_macvtap: left promiscuous mode [ 1110.629786][ T56] veth0_macvtap: left promiscuous mode [ 1110.630030][ T56] veth1_vlan: left promiscuous mode [ 1110.653196][ T56] veth0_vlan: left promiscuous mode [ 1110.801005][ T56] veth1_macvtap: left promiscuous mode [ 1110.801103][ T56] veth0_macvtap: left promiscuous mode [ 1110.801365][ T56] veth1_vlan: left promiscuous mode [ 1110.801532][ T56] veth0_vlan: left promiscuous mode [ 1112.589965][T19075] binder: 19074:19075 ioctl c0306201 200000000080 returned -14 [ 1112.611001][T19075] binder: 19074:19075 ioctl c0306201 2000000003c0 returned -14 [ 1112.790895][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1112.837060][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1112.982614][T19077] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4125'. [ 1113.620912][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1113.663429][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1114.968536][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1115.039176][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1115.050311][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1115.051709][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1115.065729][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1115.171718][T18396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.904611][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.904681][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.303568][T14510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1116.337332][T14510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1116.346183][T14510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1116.457395][T14510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1116.465544][T14510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1117.230235][ T4916] Bluetooth: hci1: command tx timeout [ 1117.733879][T14510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1117.753957][T14510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1117.823623][T14510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1117.856928][T14510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1117.857654][T14510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1118.670268][ T4916] Bluetooth: hci2: command tx timeout [ 1119.310449][ T4916] Bluetooth: hci1: command tx timeout [ 1119.950243][ T4916] Bluetooth: hci4: command tx timeout [ 1120.720266][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1120.750247][ T4916] Bluetooth: hci2: command tx timeout [ 1120.878804][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.891493][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.891523][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.891543][ T10] usb 9-1: Product: syz [ 1120.891557][ T10] usb 9-1: Manufacturer: syz [ 1120.891572][ T10] usb 9-1: SerialNumber: syz [ 1121.393771][ T4916] Bluetooth: hci1: command tx timeout [ 1121.929513][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.929687][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.929890][T19110] bridge_slave_0: entered allmulticast mode [ 1121.939177][T19110] bridge_slave_0: entered promiscuous mode [ 1121.978417][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.978535][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.978745][T19110] bridge_slave_1: entered allmulticast mode [ 1122.005670][T19110] bridge_slave_1: entered promiscuous mode [ 1122.006836][ T10] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1122.006871][ T10] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 1122.031599][ T4916] Bluetooth: hci4: command tx timeout [ 1122.211234][ T10] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 1122.502740][ T10] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1122.527119][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.991187][T14510] Bluetooth: hci2: command tx timeout [ 1123.991222][T14510] Bluetooth: hci1: command tx timeout [ 1124.017904][ T10] usb 9-1: USB disconnect, device number 13 [ 1124.027066][ T10] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1124.073104][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.110518][ T5606] Bluetooth: hci4: command tx timeout [ 1124.617718][T19110] team0: Port device team_slave_0 added [ 1124.696172][T19110] team0: Port device team_slave_1 added [ 1125.099093][T19131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.099217][T19131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.099402][T19131] bridge_slave_0: entered allmulticast mode [ 1125.104100][T19131] bridge_slave_0: entered promiscuous mode [ 1125.106799][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.106813][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.106838][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.260946][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.260964][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.260990][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.261773][T19131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.261845][T19131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.261958][T19131] bridge_slave_1: entered allmulticast mode [ 1125.265662][T19131] bridge_slave_1: entered promiscuous mode [ 1125.918571][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.030614][ T5606] Bluetooth: hci2: command tx timeout [ 1126.032693][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.089764][T19159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.089884][T19159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.090047][T19159] bridge_slave_0: entered allmulticast mode [ 1126.097466][T19159] bridge_slave_0: entered promiscuous mode [ 1126.183609][T19159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.183721][T19159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.184056][T19159] bridge_slave_1: entered allmulticast mode [ 1126.190192][ T5606] Bluetooth: hci4: command tx timeout [ 1126.196154][T19159] bridge_slave_1: entered promiscuous mode [ 1126.331055][T19110] hsr_slave_0: entered promiscuous mode [ 1126.335069][T19110] hsr_slave_1: entered promiscuous mode [ 1126.491310][T19131] team0: Port device team_slave_0 added [ 1126.552096][T19131] team0: Port device team_slave_1 added [ 1126.644409][T19159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.755930][T19159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.610502][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.610520][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.610547][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.834912][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.834929][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.834954][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.893983][T19159] team0: Port device team_slave_0 added [ 1130.935199][T19159] team0: Port device team_slave_1 added [ 1131.477460][T19159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.477482][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.477502][T19159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.566748][T19159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.566764][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.566789][T19159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.589557][T19131] hsr_slave_0: entered promiscuous mode [ 1131.591668][T19131] hsr_slave_1: entered promiscuous mode [ 1131.592627][T19131] debugfs: 'hsr0' already exists in 'hsr' [ 1131.592650][T19131] Cannot create hsr debugfs directory [ 1132.663992][T19159] hsr_slave_0: entered promiscuous mode [ 1132.665584][T19159] hsr_slave_1: entered promiscuous mode [ 1132.667737][T19159] debugfs: 'hsr0' already exists in 'hsr' [ 1132.667759][T19159] Cannot create hsr debugfs directory [ 1138.410435][ T56] bridge_slave_1: left allmulticast mode [ 1138.410469][ T56] bridge_slave_1: left promiscuous mode [ 1138.410722][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.541772][ T56] bridge_slave_0: left allmulticast mode [ 1138.541806][ T56] bridge_slave_0: left promiscuous mode [ 1138.542060][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.832571][ T56] bridge_slave_1: left allmulticast mode [ 1138.832604][ T56] bridge_slave_1: left promiscuous mode [ 1138.832903][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.361129][ T56] bridge_slave_0: left allmulticast mode [ 1140.361153][ T56] bridge_slave_0: left promiscuous mode [ 1140.361304][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.540319][ T56] bridge_slave_1: left allmulticast mode [ 1140.540346][ T56] bridge_slave_1: left promiscuous mode [ 1140.540516][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.631140][ T56] bridge_slave_0: left allmulticast mode [ 1140.631166][ T56] bridge_slave_0: left promiscuous mode [ 1140.631333][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.490839][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.571786][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.592608][ T56] bond0 (unregistering): Released all slaves [ 1142.191904][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.273532][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.322682][ T56] bond0 (unregistering): Released all slaves [ 1143.000860][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.040770][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.062169][ T56] bond0 (unregistering): Released all slaves [ 1143.080575][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4161'. [ 1143.175093][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1144.748166][ T56] hsr_slave_0: left promiscuous mode [ 1144.788686][ T56] hsr_slave_1: left promiscuous mode [ 1144.789630][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.836022][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.050722][ T56] hsr_slave_0: left promiscuous mode [ 1145.092789][ T56] hsr_slave_1: left promiscuous mode [ 1145.093638][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.141629][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.335107][ T56] hsr_slave_0: left promiscuous mode [ 1145.370477][ T56] hsr_slave_1: left promiscuous mode [ 1145.373703][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.422630][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.680970][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1147.723480][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1148.261156][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1148.303524][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1148.991617][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1149.073286][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1153.045941][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1156.225325][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1156.429442][T19577] fuse: Unknown parameter '0x0000000000000003' [ 1157.689834][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1157.754790][T19110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1159.114063][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1159.136893][T19110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1159.321000][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1159.334556][T19110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1159.416632][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.418640][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1159.469922][T19110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1160.096305][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.475320][T19131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1160.503775][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1160.519559][T19131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1160.556695][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.644636][T19131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1160.699486][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1160.752742][T19131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1160.774930][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1161.188566][T19159] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1161.229100][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.246313][T19159] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1161.276452][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1161.301093][T19159] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1161.344637][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1161.368725][T19159] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1161.404968][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1161.520515][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.779230][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.890752][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.890882][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.617207][T19131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.632743][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1164.695681][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.695912][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.845099][T19131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.926709][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.928330][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.020035][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.020316][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.220917][T19159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.399923][T19159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.445149][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.445314][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.723215][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.723350][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.912860][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.147818][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1168.173455][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.323421][T19110] veth0_vlan: entered promiscuous mode [ 1168.433115][T19110] veth1_vlan: entered promiscuous mode [ 1168.601247][T19131] veth0_vlan: entered promiscuous mode [ 1168.687857][T19110] veth0_macvtap: entered promiscuous mode [ 1168.705169][T19131] veth1_vlan: entered promiscuous mode [ 1168.731551][T19110] veth1_macvtap: entered promiscuous mode [ 1168.844216][T19110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.920972][T19110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.981438][T19131] veth0_macvtap: entered promiscuous mode [ 1168.999187][T19159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.015113][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.029061][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.042390][T19131] veth1_macvtap: entered promiscuous mode [ 1169.049855][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.076102][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.391046][T19131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.632337][T19131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.894326][ T9519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.896209][ T9519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.920461][ T9519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.957267][ T7277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.974159][ T7277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.974179][ T7277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.730237][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.730259][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.937442][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.937461][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.082474][ T7277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.082494][ T7277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.131170][T19159] veth0_vlan: entered promiscuous mode [ 1171.159594][T19159] veth1_vlan: entered promiscuous mode [ 1173.044719][T19159] veth0_macvtap: entered promiscuous mode [ 1173.094020][T19159] veth1_macvtap: entered promiscuous mode [ 1173.125272][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1173.325447][T19159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.438208][T19159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.840847][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.585352][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.744440][ T7277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.766524][ T161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.318687][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.318755][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.906696][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1177.972402][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1177.976054][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1178.003568][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1178.014526][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.106040][T19787] fuse: Unknown parameter 'grou00000000000000000000' [ 1181.292299][ T4916] Bluetooth: hci5: command tx timeout [ 1183.148876][T19780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.149099][T19780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.149281][T19780] bridge_slave_0: entered allmulticast mode [ 1183.175767][T19780] bridge_slave_0: entered promiscuous mode [ 1183.179218][T19780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.179442][T19780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.179634][T19780] bridge_slave_1: entered allmulticast mode [ 1183.211693][T19780] bridge_slave_1: entered promiscuous mode [ 1183.269132][T19780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.296628][T19780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.352192][T19780] team0: Port device team_slave_0 added [ 1183.355886][T19780] team0: Port device team_slave_1 added [ 1183.428354][T19780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.428371][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.428397][T19780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.475328][T19780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.475344][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.475369][T19780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.599304][T19780] hsr_slave_0: entered promiscuous mode [ 1183.606980][T19780] hsr_slave_1: entered promiscuous mode [ 1183.608022][T19780] debugfs: 'hsr0' already exists in 'hsr' [ 1183.608046][T19780] Cannot create hsr debugfs directory [ 1184.035255][ T5606] Bluetooth: hci5: command tx timeout [ 1185.489088][T19780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.833760][ T5606] Bluetooth: hci5: command tx timeout [ 1187.091531][T19876] fuse: Unknown parameter 'grou00000000000000000000' [ 1187.270480][T19780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.510474][ T5606] Bluetooth: hci5: command tx timeout [ 1190.394620][T19780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.892803][T19780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.980158][ T5734] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1192.130205][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 1192.132536][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1192.135490][ T5734] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1192.138201][ T5734] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1192.138229][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.138250][ T5734] usb 3-1: Product: syz [ 1192.138272][ T5734] usb 3-1: Manufacturer: syz [ 1192.138286][ T5734] usb 3-1: SerialNumber: syz [ 1192.570846][ T5734] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1192.570983][ T5734] usb 3-1: MIDIStreaming interface descriptor not found [ 1192.692184][ T1192] bridge_slave_1: left allmulticast mode [ 1192.692220][ T1192] bridge_slave_1: left promiscuous mode [ 1192.692480][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.932228][ T5734] usb 3-1: USB disconnect, device number 3 [ 1194.029471][ T1192] bridge_slave_0: left allmulticast mode [ 1194.029507][ T1192] bridge_slave_0: left promiscuous mode [ 1194.029738][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.550645][T19955] udevd[19955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.186135][ T1192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.295368][ T1192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.350123][ T1192] bond0 (unregistering): Released all slaves [ 1205.308322][ T1192] hsr_slave_0: left promiscuous mode [ 1205.350800][ T1192] hsr_slave_1: left promiscuous mode [ 1205.351863][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.351887][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.420516][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.420543][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.564316][ T1192] veth1_macvtap: left promiscuous mode [ 1205.564421][ T1192] veth0_macvtap: left promiscuous mode [ 1205.564796][ T1192] veth1_vlan: left promiscuous mode [ 1205.564985][ T1192] veth0_vlan: left promiscuous mode [ 1208.140902][ T1192] team0 (unregistering): Port device team_slave_1 removed [ 1208.207278][ T1192] team0 (unregistering): Port device team_slave_0 removed [ 1208.744032][T19985] syz_tun: entered allmulticast mode [ 1208.768963][T19985] syz_tun: left allmulticast mode [ 1211.121798][T19780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1211.169500][T19780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.177047][T19780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1211.492975][T19780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.499074][T19780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1211.538542][T19780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.576383][T19780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1211.644666][T19780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.093951][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1212.243873][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.243904][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1212.243943][ T10] usb 1-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1212.243965][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.274487][T19780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.313238][ T10] usb 1-1: config 0 descriptor?? [ 1212.319417][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1212.421284][T19780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.516347][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.516488][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.572485][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.572631][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.873111][ T5734] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1213.064031][ T5734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.064067][ T5734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.064098][ T5734] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1213.064141][ T5734] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1213.064164][ T5734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.170484][ T5734] usb 8-1: config 0 descriptor?? [ 1213.678480][ T5734] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 1213.679257][ T5734] plantronics 0003:047F:FFFF.0003: parse failed [ 1213.679362][ T5734] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 1213.886585][ T6002] usb 8-1: USB disconnect, device number 16 [ 1214.387672][T19780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.913428][T19801] usb 1-1: USB disconnect, device number 4 [ 1215.086766][T19780] veth0_vlan: entered promiscuous mode [ 1215.104495][T19780] veth1_vlan: entered promiscuous mode [ 1215.147888][T19780] veth0_macvtap: entered promiscuous mode [ 1215.158165][T19780] veth1_macvtap: entered promiscuous mode [ 1215.176722][T19780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.199900][T19780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.237447][ T7277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.237707][ T7277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.259869][ T7277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.273416][ T7277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.108063][ T9508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.108077][ T9508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.560927][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.560948][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.329652][T20137] 9p: Bad value for 'rfdno' [ 1217.600232][ T5853] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1218.880126][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 1218.913425][ T5853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.913446][ T5853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.913458][ T5853] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1218.913483][ T5853] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1218.913495][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.984704][ T5853] usb 9-1: config 0 descriptor?? [ 1219.511415][ T5853] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1219.533351][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533387][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533414][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533451][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533478][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533506][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533540][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533568][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533596][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.533623][ T5853] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1219.644432][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.827366][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.870903][ T5853] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1219.870939][ T5853] microsoft 0003:045E:07DA.0004: no inputs found [ 1219.870953][ T5853] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 1220.117121][ T10] usb 9-1: USB disconnect, device number 14 [ 1220.141710][T20161] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4277'. [ 1220.320305][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1220.334877][T20156] fido_id[20156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1220.473601][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.473632][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1220.473674][ T5853] usb 6-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1220.473696][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.568236][ T5853] usb 6-1: config 0 descriptor?? [ 1220.589327][ T5853] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1223.359601][ T6002] usb 6-1: USB disconnect, device number 3 [ 1225.060308][T20218] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4288'. [ 1230.232321][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1230.382692][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.382724][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1230.382762][ T10] usb 1-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1230.382786][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.399299][ T10] usb 1-1: config 0 descriptor?? [ 1230.489011][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1230.903539][ T6002] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1231.061919][ T6002] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1231.061947][ T6002] usb 6-1: config 1 has no interface number 0 [ 1231.062003][ T6002] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1231.062035][ T6002] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1231.062075][ T6002] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 1231.064229][ T6002] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1231.064253][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.064264][ T6002] usb 6-1: Product: syz [ 1231.064272][ T6002] usb 6-1: Manufacturer: syz [ 1231.064279][ T6002] usb 6-1: SerialNumber: syz [ 1231.393023][ T6002] usb 6-1: 1:0 : does not exist [ 1231.393214][ T6002] usb 6-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1231.430444][ T6002] usb 6-1: 1:3 : does not exist [ 1231.430539][ T6002] usb 6-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 1231.866429][ T6002] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1231.887297][ T6002] usb 6-1: USB disconnect, device number 4 [ 1232.087965][T19955] udevd[19955]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.446668][ T5712] usb 1-1: USB disconnect, device number 5 [ 1238.772244][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.772317][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.007204][T14510] Bluetooth: hci2: command 0x0406 tx timeout [ 1241.007240][T14510] Bluetooth: hci1: command 0x0406 tx timeout [ 1243.395214][ T9088] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1243.542038][ T9088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.542064][ T9088] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1243.542089][ T9088] usb 6-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1243.542102][ T9088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.545555][ T9088] usb 6-1: config 0 descriptor?? [ 1243.607447][ T9088] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1247.697045][ T31] usb 6-1: USB disconnect, device number 5 [ 1250.859997][T20442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1250.928749][T20445] fuse: Bad value for 'user_id' [ 1250.928768][T20445] fuse: Bad value for 'user_id' [ 1252.170204][ T31] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1252.487173][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.487205][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1252.487247][ T31] usb 8-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1252.487270][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.538367][ T31] usb 8-1: config 0 descriptor?? [ 1253.240341][ T31] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1256.113998][ T6002] usb 8-1: USB disconnect, device number 17 [ 1256.442633][T20488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4357'. [ 1258.470187][ T6002] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1258.624481][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.624511][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1258.624552][ T6002] usb 9-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1258.624573][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.673638][ T6002] usb 9-1: config 0 descriptor?? [ 1258.700859][ T6002] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1260.343674][T20527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4370'. [ 1262.486520][T19801] usb 9-1: USB disconnect, device number 15 [ 1264.836439][ T36] audit: type=1326 audit(1779566438.144:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836491][ T36] audit: type=1326 audit(1779566438.144:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836533][ T36] audit: type=1326 audit(1779566438.144:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836574][ T36] audit: type=1326 audit(1779566438.144:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836614][ T36] audit: type=1326 audit(1779566438.144:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836655][ T36] audit: type=1326 audit(1779566438.144:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836697][ T36] audit: type=1326 audit(1779566438.144:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836758][ T36] audit: type=1326 audit(1779566438.144:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836799][ T36] audit: type=1326 audit(1779566438.144:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1264.836838][ T36] audit: type=1326 audit(1779566438.144:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.8.4374" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4970ce59 code=0x7fc00000 [ 1266.920183][T19801] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1267.081540][T19801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.081558][T19801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1267.081581][T19801] usb 3-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1267.081593][T19801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.106979][T19801] usb 3-1: config 0 descriptor?? [ 1267.159828][T19801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1269.271189][T20599] syz_tun: entered allmulticast mode [ 1269.846738][T19801] usb 3-1: USB disconnect, device number 4 [ 1270.043997][T20597] syz_tun: left allmulticast mode [ 1275.653668][T19801] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1275.806610][T19801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.806642][T19801] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1275.806779][T19801] usb 8-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1275.806803][T19801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.888564][T19801] usb 8-1: config 0 descriptor?? [ 1276.231661][T19801] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1279.174626][ T955] usb 8-1: USB disconnect, device number 18 [ 1279.532283][T19801] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1281.570119][T19801] usb 3-1: Using ep0 maxpacket: 8 [ 1281.576214][T19801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.576240][T19801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.576264][T19801] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1281.576276][T19801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.596565][T19801] usb 3-1: config 0 descriptor?? [ 1282.805648][T19801] usbhid 3-1:0.0: can't add hid device: -71 [ 1282.864247][T19801] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1282.896621][T19801] usb 3-1: USB disconnect, device number 5 [ 1286.154094][T20691] fuse: Unknown parameter '0x0000000000000003' [ 1286.360654][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1286.517383][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.517410][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1286.518643][ T31] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1286.518670][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1286.518690][ T31] usb 8-1: SerialNumber: syz [ 1287.805042][ T31] usb 8-1: 0:2 : does not exist [ 1288.006402][ T31] usb 8-1: USB disconnect, device number 19 [ 1288.100146][ T5734] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1289.153424][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.153456][ T5734] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1289.153498][ T5734] usb 9-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 1289.153527][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.226791][T19955] udevd[19955]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.331813][ T5734] usb 9-1: config 0 descriptor?? [ 1289.393333][ T5734] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1293.381017][ T31] usb 9-1: USB disconnect, device number 16 [ 1293.825218][T20743] fuse: Unknown parameter 'fd0x0000000000000003' [ 1300.543374][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.546437][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.247194][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4456'. [ 1302.830156][ T4916] Bluetooth: hci5: command 0x0406 tx timeout [ 1303.030185][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1303.159311][T20818] fuse: Unknown parameter 'fd0x0000000000000003' [ 1303.182701][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.182735][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.182757][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1303.182805][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.182886][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.249455][ T31] usb 1-1: config 0 descriptor?? [ 1304.622787][ T31] hid_parser_main: 3 callbacks suppressed [ 1304.622803][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622822][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622839][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622855][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622870][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622886][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622908][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622923][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622939][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.622955][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1304.774483][ T31] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1304.797606][ T31] usb 1-1: USB disconnect, device number 6 [ 1305.061993][T20826] fido_id[20826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1308.729283][T20858] capability: warning: `syz.8.4470' uses 32-bit capabilities (legacy support in use) [ 1317.180182][ T9088] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1318.412315][ T9088] usb 1-1: Using ep0 maxpacket: 32 [ 1318.426287][ T9088] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1318.452159][ T9088] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1318.452189][ T9088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.452208][ T9088] usb 1-1: Product: syz [ 1318.452223][ T9088] usb 1-1: Manufacturer: syz [ 1318.452237][ T9088] usb 1-1: SerialNumber: syz [ 1320.209742][ T9088] usb 1-1: unit 0 not found! [ 1322.856136][ T9088] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1323.927735][ T9088] usb 1-1: unit 0 not found! [ 1323.988662][ T9088] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1324.009298][ T9088] usb 1-1: unit 0 not found! [ 1328.766510][T20963] usb usb9: usbfs: process 20963 (syz.2.4504) did not claim interface 0 before use [ 1329.501369][ T9088] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1329.547925][ T9088] usb 1-1: USB disconnect, device number 7 [ 1329.868002][T16784] udevd[16784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.980152][ T9088] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 1332.367427][ T5734] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1332.649933][ T5734] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1332.649967][ T5734] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.653641][ T5734] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1332.653671][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.727956][ T5734] hub 3-1:4.0: USB hub found [ 1332.978165][ T9088] usb 1-1: device descriptor read/all, error -71 [ 1333.026810][ T5734] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1333.357250][ T5734] usb 3-1: USB disconnect, device number 6 [ 1338.505050][ T5606] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1340.525392][T21027] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4523'. [ 1342.461393][T17676] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1342.521712][T21027] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4523'. [ 1342.683341][T17676] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1342.683372][T17676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.692038][T17676] usb 3-1: config 0 descriptor?? [ 1343.863237][ T5606] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1343.863271][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1343.863301][ T5606] Tainted: [L]=SOFTLOCKUP [ 1343.863309][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1343.863322][ T5606] Workqueue: hci3 hci_rx_work [ 1343.863442][ T5606] Call Trace: [ 1343.863449][ T5606] [ 1343.863459][ T5606] dump_stack_lvl+0xe8/0x150 [ 1343.863506][ T5606] sysfs_create_dir_ns+0x271/0x2a0 [ 1343.863610][ T5606] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.863699][ T5606] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1343.863736][ T5606] ? rt_spin_unlock+0x160/0x200 [ 1343.863753][ T5606] kobject_add_internal+0x631/0xd10 [ 1343.863799][ T5606] kobject_add+0x163/0x240 [ 1343.863863][ T5606] ? __pfx_kobject_add+0x10/0x10 [ 1343.863905][ T5606] ? get_device_parent+0x370/0x3a0 [ 1343.863967][ T5606] device_add+0x408/0xbb0 [ 1343.863995][ T5606] hci_conn_add_sysfs+0xd5/0x210 [ 1343.864088][ T5606] le_conn_complete_evt+0x10e6/0x16b0 [ 1343.864125][ T5606] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1343.864142][ T5606] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1343.864197][ T5606] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.864271][ T5606] ? skb_pull_data+0xfb/0x200 [ 1343.864338][ T5606] hci_le_conn_complete_evt+0x187/0x470 [ 1343.864409][ T5606] hci_event_packet+0x659/0xef0 [ 1343.864455][ T5606] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.864467][ T5606] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1343.864487][ T5606] ? __pfx_hci_event_packet+0x10/0x10 [ 1343.864513][ T5606] ? rt_spin_unlock+0x14f/0x200 [ 1343.864547][ T5606] ? hci_send_to_monitor+0xe2/0x590 [ 1343.864575][ T5606] hci_rx_work+0x3ee/0x1040 [ 1343.864611][ T5606] ? process_scheduled_works+0xa70/0x1860 [ 1343.864633][ T5606] process_scheduled_works+0xb5d/0x1860 [ 1343.864674][ T5606] ? __pfx_process_scheduled_works+0x10/0x10 [ 1343.864706][ T5606] ? assign_work+0x3d5/0x5e0 [ 1343.864735][ T5606] worker_thread+0xa53/0xfc0 [ 1343.864779][ T5606] kthread+0x388/0x470 [ 1343.864854][ T5606] ? __pfx_worker_thread+0x10/0x10 [ 1343.864876][ T5606] ? __pfx_kthread+0x10/0x10 [ 1343.864907][ T5606] ret_from_fork+0x514/0xb70 [ 1343.864945][ T5606] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.864958][ T5606] ? __switch_to+0xc79/0x1410 [ 1343.864976][ T5606] ? __pfx_kthread+0x10/0x10 [ 1343.864994][ T5606] ret_from_fork_asm+0x1a/0x30 [ 1343.865038][ T5606] [ 1343.866289][ T5606] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1343.866335][ T5606] Bluetooth: hci3: failed to register connection device [ 1346.154437][T17676] usb 3-1: Cannot set autoneg [ 1346.154710][T17676] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1346.255683][T17676] usb 3-1: USB disconnect, device number 7 [ 1347.843251][ T5712] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1348.011863][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 1348.015970][ T5712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1348.017245][ T5712] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1348.017270][ T5712] usb 6-1: config 13 has no interface number 0 [ 1348.017309][ T5712] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1348.017323][ T5712] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1348.055174][ T5712] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1348.055205][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.055224][ T5712] usb 6-1: Product: syz [ 1348.055237][ T5712] usb 6-1: Manufacturer: syz [ 1348.055251][ T5712] usb 6-1: SerialNumber: syz [ 1348.070902][T21073] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1348.760121][T17676] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1348.922049][T17676] usb 9-1: Using ep0 maxpacket: 32 [ 1348.927058][T17676] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.947409][T17676] usb 9-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1348.947454][T17676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.947475][T17676] usb 9-1: Product: syz [ 1348.947489][T17676] usb 9-1: Manufacturer: syz [ 1348.947502][T17676] usb 9-1: SerialNumber: syz [ 1349.021942][T17676] usb 9-1: config 0 descriptor?? [ 1349.050269][T17676] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1350.392187][T21073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1350.429093][T21073] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1350.658691][T17676] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1350.885014][T15002] udevd[15002]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.910196][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 1352.307598][T21073] ================================================================== [ 1352.307616][T21073] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1352.307646][T21073] Read of size 1 at addr ffff88802e4a47e8 by task syz.5.4540/21073 [ 1352.307661][T21073] [ 1352.307674][T21073] CPU: 1 UID: 0 PID: 21073 Comm: syz.5.4540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1352.307699][T21073] Tainted: [L]=SOFTLOCKUP [ 1352.307706][T21073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.307718][T21073] Call Trace: [ 1352.307725][T21073] [ 1352.307734][T21073] dump_stack_lvl+0xe8/0x150 [ 1352.307756][T21073] print_address_description+0x55/0x1e0 [ 1352.307804][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.307822][T21073] print_report+0x58/0x70 [ 1352.307843][T21073] kasan_report+0x117/0x150 [ 1352.307938][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.307938][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.307960][T21073] ? bt_accept_unlink+0x7d/0x2f0 [ 1352.308022][T21073] __kasan_check_byte+0x2a/0x40 [ 1352.308043][T21073] lock_acquire+0x84/0x350 [ 1352.308100][T21073] ? __local_bh_disable_ip+0x3c/0x420 [ 1352.308125][T21073] rt_spin_lock+0x83/0x400 [ 1352.308145][T21073] ? bt_accept_unlink+0x7d/0x2f0 [ 1352.308173][T21073] ? __pfx_rt_spin_lock+0x10/0x10 [ 1352.308195][T21073] ? rcu_is_watching+0x15/0xb0 [ 1352.308325][T21073] ? __local_bh_disable_ip+0x3c/0x420 [ 1352.308346][T21073] ? bt_accept_unlink+0x61/0x2f0 [ 1352.308376][T21073] bt_accept_unlink+0x7d/0x2f0 [ 1352.308404][T21073] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.308431][T21073] ? bt_accept_unlink+0x61/0x2f0 [ 1352.308460][T21073] l2cap_sock_teardown_cb+0x17e/0x490 [ 1352.308534][T21073] l2cap_chan_del+0xb5/0x610 [ 1352.308560][T21073] ? l2cap_conn_del+0x331/0x570 [ 1352.308586][T21073] l2cap_conn_del+0x33d/0x570 [ 1352.308611][T21073] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1352.308633][T21073] hci_conn_hash_flush+0x10d/0x260 [ 1352.308657][T21073] hci_dev_close_sync+0x821/0x10e0 [ 1352.308709][T21073] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1352.308727][T21073] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.308751][T21073] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1352.308778][T21073] ? mutex_lock_nested+0x152/0x1d0 [ 1352.308797][T21073] ? hci_dev_do_close+0x28/0xc0 [ 1352.308818][T21073] hci_dev_do_close+0x30/0xc0 [ 1352.308836][T21073] hci_rfkill_set_block+0x1f4/0x290 [ 1352.308867][T21073] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 1352.308896][T21073] rfkill_set_block+0x1cc/0x500 [ 1352.308978][T21073] rfkill_fop_write+0x464/0x5a0 [ 1352.309036][T21073] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1352.309063][T21073] ? rw_verify_area+0x25b/0x4e0 [ 1352.309149][T21073] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1352.309178][T21073] vfs_write+0x2a3/0xba0 [ 1352.309204][T21073] ? __pfx_vfs_write+0x10/0x10 [ 1352.309227][T21073] ? __fget_files+0x2a/0x420 [ 1352.309276][T21073] ? __fget_files+0x2a/0x420 [ 1352.309292][T21073] ? __fget_files+0x3a6/0x420 [ 1352.309310][T21073] ? __fget_files+0x2a/0x420 [ 1352.309331][T21073] ksys_write+0x156/0x270 [ 1352.309355][T21073] ? __pfx_ksys_write+0x10/0x10 [ 1352.309383][T21073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.309422][T21073] do_syscall_64+0x15f/0xf80 [ 1352.309449][T21073] ? clear_bhb_loop+0x40/0x90 [ 1352.309473][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.309497][T21073] RIP: 0033:0x7f1a8570ce59 [ 1352.309528][T21073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.309546][T21073] RSP: 002b:00007f1a8395e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1352.309569][T21073] RAX: ffffffffffffffda RBX: 00007f1a85985fa0 RCX: 00007f1a8570ce59 [ 1352.309586][T21073] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 1352.309601][T21073] RBP: 00007f1a857a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1352.309614][T21073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.309627][T21073] R13: 00007f1a85986038 R14: 00007f1a85985fa0 R15: 00007ffe2d6a3c88 [ 1352.309653][T21073] [ 1352.309660][T21073] [ 1352.309669][T21073] Allocated by task 21049: [ 1352.309680][T21073] kasan_save_track+0x3e/0x80 [ 1352.309700][T21073] __kasan_kmalloc+0x93/0xb0 [ 1352.309719][T21073] __kmalloc_noprof+0x3e7/0x7b0 [ 1352.309777][T21073] sk_prot_alloc+0xe7/0x210 [ 1352.309835][T21073] sk_alloc+0x3a/0x390 [ 1352.309860][T21073] bt_sock_alloc+0x3b/0x340 [ 1352.309885][T21073] l2cap_sock_create+0x147/0x330 [ 1352.309909][T21073] bt_sock_create+0x163/0x240 [ 1352.309924][T21073] __sock_create+0x4b2/0x9d0 [ 1352.309976][T21073] __sys_socket+0xd6/0x1b0 [ 1352.309995][T21073] __x64_sys_socket+0x7a/0x90 [ 1352.310012][T21073] do_syscall_64+0x15f/0xf80 [ 1352.310039][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.310057][T21073] [ 1352.310061][T21073] Freed by task 21048: [ 1352.310072][T21073] kasan_save_track+0x3e/0x80 [ 1352.310089][T21073] kasan_save_free_info+0x46/0x50 [ 1352.310143][T21073] __kasan_slab_free+0x5c/0x80 [ 1352.310158][T21073] kfree+0x1c5/0x6c0 [ 1352.310172][T21073] __sk_destruct+0x74b/0x9d0 [ 1352.310194][T21073] l2cap_sock_release+0x1c1/0x270 [ 1352.310212][T21073] sock_close+0xc3/0x240 [ 1352.310229][T21073] __fput+0x461/0xa70 [ 1352.310252][T21073] task_work_run+0x1d9/0x270 [ 1352.310277][T21073] exit_to_user_mode_loop+0xf3/0x4d0 [ 1352.310331][T21073] do_syscall_64+0x33e/0xf80 [ 1352.310357][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.310376][T21073] [ 1352.310381][T21073] The buggy address belongs to the object at ffff88802e4a4000 [ 1352.310381][T21073] which belongs to the cache kmalloc-4k of size 4096 [ 1352.310399][T21073] The buggy address is located 2024 bytes inside of [ 1352.310399][T21073] freed 4096-byte region [ffff88802e4a4000, ffff88802e4a5000) [ 1352.310420][T21073] [ 1352.310425][T21073] The buggy address belongs to the physical page: [ 1352.310441][T21073] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e4a0 [ 1352.310461][T21073] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1352.310477][T21073] flags: 0x80000000000040(head|node=0|zone=1) [ 1352.310496][T21073] page_type: f5(slab) [ 1352.310515][T21073] raw: 0080000000000040 ffff88801a011140 dead000000000100 dead000000000122 [ 1352.310542][T21073] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1352.310561][T21073] head: 0080000000000040 ffff88801a011140 dead000000000100 dead000000000122 [ 1352.310579][T21073] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1352.310596][T21073] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1352.310614][T21073] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1352.310625][T21073] page dumped because: kasan: bad access detected [ 1352.310636][T21073] page_owner tracks the page as allocated [ 1352.310649][T21073] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4970, tgid 4970 (udevd), ts 26329306934, free_ts 26323954525 [ 1352.310684][T21073] post_alloc_hook+0x22d/0x280 [ 1352.310745][T21073] get_page_from_freelist+0x27c8/0x2840 [ 1352.310769][T21073] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1352.310793][T21073] allocate_slab+0x77/0x660 [ 1352.310819][T21073] refill_objects+0x33c/0x3d0 [ 1352.310843][T21073] __pcs_replace_empty_main+0x373/0x720 [ 1352.310870][T21073] __kmalloc_noprof+0x530/0x7b0 [ 1352.310890][T21073] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1352.310965][T21073] tomoyo_check_open_permission+0x229/0x470 [ 1352.311016][T21073] security_file_open+0xa9/0x240 [ 1352.311098][T21073] do_dentry_open+0x4c0/0x13e0 [ 1352.311124][T21073] vfs_open+0x3b/0x350 [ 1352.311149][T21073] path_openat+0x2e43/0x38a0 [ 1352.311194][T21073] do_file_open+0x23e/0x4a0 [ 1352.311215][T21073] do_sys_openat2+0x113/0x200 [ 1352.311242][T21073] __x64_sys_openat+0x138/0x170 [ 1352.311269][T21073] page last free pid 4966 tgid 4966 stack trace: [ 1352.311281][T21073] __free_frozen_pages+0xfa6/0x10f0 [ 1352.311302][T21073] __slab_free+0x252/0x2a0 [ 1352.311322][T21073] qlist_free_all+0x99/0x100 [ 1352.311338][T21073] kasan_quarantine_reduce+0x148/0x160 [ 1352.311355][T21073] __kasan_slab_alloc+0x22/0x80 [ 1352.311374][T21073] __kmalloc_noprof+0x399/0x7b0 [ 1352.311393][T21073] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1352.311412][T21073] tomoyo_check_open_permission+0x229/0x470 [ 1352.311438][T21073] security_file_open+0xa9/0x240 [ 1352.311464][T21073] do_dentry_open+0x4c0/0x13e0 [ 1352.311489][T21073] vfs_open+0x3b/0x350 [ 1352.311512][T21073] path_openat+0x2e43/0x38a0 [ 1352.311541][T21073] do_file_open+0x23e/0x4a0 [ 1352.311561][T21073] do_sys_openat2+0x113/0x200 [ 1352.311589][T21073] __x64_sys_openat+0x138/0x170 [ 1352.311616][T21073] do_syscall_64+0x15f/0xf80 [ 1352.311643][T21073] [ 1352.311652][T21073] Memory state around the buggy address: [ 1352.311663][T21073] ffff88802e4a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1352.311678][T21073] ffff88802e4a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1352.311692][T21073] >ffff88802e4a4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1352.311702][T21073] ^ [ 1352.311715][T21073] ffff88802e4a4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1352.311729][T21073] ffff88802e4a4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1352.311740][T21073] ================================================================== [ 1352.331200][T19801] usb 9-1: USB disconnect, device number 17 [ 1352.419247][T21073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1352.419274][T21073] CPU: 1 UID: 0 PID: 21073 Comm: syz.5.4540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1352.419303][T21073] Tainted: [L]=SOFTLOCKUP [ 1352.419310][T21073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.419323][T21073] Call Trace: [ 1352.419330][T21073] [ 1352.419344][T21073] vpanic+0x56c/0xa60 [ 1352.419378][T21073] ? __pfx_vpanic+0x10/0x10 [ 1352.419403][T21073] ? __pfx___schedule+0x10/0x10 [ 1352.419433][T21073] panic+0xc5/0xd0 [ 1352.419447][T21073] ? __pfx_panic+0x10/0x10 [ 1352.419460][T21073] ? preempt_schedule_common+0x82/0xd0 [ 1352.419475][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.419490][T21073] check_panic_on_warn+0x89/0xb0 [ 1352.419519][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.419541][T21073] end_report+0x73/0x170 [ 1352.419565][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.419586][T21073] kasan_report+0x128/0x150 [ 1352.419607][T21073] ? rt_spin_lock+0x83/0x400 [ 1352.419627][T21073] ? bt_accept_unlink+0x7d/0x2f0 [ 1352.419644][T21073] __kasan_check_byte+0x2a/0x40 [ 1352.419662][T21073] lock_acquire+0x84/0x350 [ 1352.419691][T21073] ? __local_bh_disable_ip+0x3c/0x420 [ 1352.419717][T21073] rt_spin_lock+0x83/0x400 [ 1352.419738][T21073] ? bt_accept_unlink+0x7d/0x2f0 [ 1352.419768][T21073] ? __pfx_rt_spin_lock+0x10/0x10 [ 1352.419780][T21073] ? rcu_is_watching+0x15/0xb0 [ 1352.419796][T21073] ? __local_bh_disable_ip+0x3c/0x420 [ 1352.419807][T21073] ? bt_accept_unlink+0x61/0x2f0 [ 1352.419827][T21073] bt_accept_unlink+0x7d/0x2f0 [ 1352.419856][T21073] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.419883][T21073] ? bt_accept_unlink+0x61/0x2f0 [ 1352.419913][T21073] l2cap_sock_teardown_cb+0x17e/0x490 [ 1352.419940][T21073] l2cap_chan_del+0xb5/0x610 [ 1352.419953][T21073] ? l2cap_conn_del+0x331/0x570 [ 1352.419975][T21073] l2cap_conn_del+0x33d/0x570 [ 1352.419996][T21073] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1352.420018][T21073] hci_conn_hash_flush+0x10d/0x260 [ 1352.420043][T21073] hci_dev_close_sync+0x821/0x10e0 [ 1352.420065][T21073] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1352.420085][T21073] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.420112][T21073] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1352.420140][T21073] ? mutex_lock_nested+0x152/0x1d0 [ 1352.420162][T21073] ? hci_dev_do_close+0x28/0xc0 [ 1352.420178][T21073] hci_dev_do_close+0x30/0xc0 [ 1352.420189][T21073] hci_rfkill_set_block+0x1f4/0x290 [ 1352.420205][T21073] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 1352.420235][T21073] rfkill_set_block+0x1cc/0x500 [ 1352.420263][T21073] rfkill_fop_write+0x464/0x5a0 [ 1352.420292][T21073] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1352.420321][T21073] ? rw_verify_area+0x25b/0x4e0 [ 1352.420344][T21073] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1352.420373][T21073] vfs_write+0x2a3/0xba0 [ 1352.420397][T21073] ? __pfx_vfs_write+0x10/0x10 [ 1352.420421][T21073] ? __fget_files+0x2a/0x420 [ 1352.420441][T21073] ? __fget_files+0x2a/0x420 [ 1352.420458][T21073] ? __fget_files+0x3a6/0x420 [ 1352.420476][T21073] ? __fget_files+0x2a/0x420 [ 1352.420496][T21073] ksys_write+0x156/0x270 [ 1352.420509][T21073] ? __pfx_ksys_write+0x10/0x10 [ 1352.420522][T21073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.420534][T21073] do_syscall_64+0x15f/0xf80 [ 1352.420553][T21073] ? clear_bhb_loop+0x40/0x90 [ 1352.420577][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.420598][T21073] RIP: 0033:0x7f1a8570ce59 [ 1352.420618][T21073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.420644][T21073] RSP: 002b:00007f1a8395e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1352.420665][T21073] RAX: ffffffffffffffda RBX: 00007f1a85985fa0 RCX: 00007f1a8570ce59 [ 1352.420673][T21073] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 1352.420681][T21073] RBP: 00007f1a857a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1352.420688][T21073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.420694][T21073] R13: 00007f1a85986038 R14: 00007f1a85985fa0 R15: 00007ffe2d6a3c88 [ 1352.420707][T21073] [ 1352.420996][T21073] Kernel Offset: disabled