last executing test programs: 5m42.832676043s ago: executing program 3 (id=166): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r1, &(0x7f0000000580), 0x0, 0x45, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xe}]}, 0x24}}, 0xc822) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0xfffc, 0xa}, {0x1}, @ramp={0x8, 0x4, {0x3, 0x4, 0x9, 0x3}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe6, 0x0) 5m41.0765153s ago: executing program 3 (id=170): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @local, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x9, 0x4) write$binfmt_script(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = getpgid(0x0) sched_getscheduler(r5) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r8 = syz_io_uring_setup(0x1e21, &(0x7f0000000400)={0x0, 0x86f6, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x101, 0x101000, 0x23456}) io_uring_enter(r8, 0x48e4, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) 5m37.693056078s ago: executing program 3 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) socket$inet6(0xa, 0x2, 0x102) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x74, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x120}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m36.771756465s ago: executing program 3 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5m33.521442395s ago: executing program 3 (id=183): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @local, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x9, 0x4) write$binfmt_script(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = getpgid(0x0) sched_getscheduler(r5) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100012def70a21fb1"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r8 = syz_io_uring_setup(0x1e21, &(0x7f0000000400)={0x0, 0x86f6, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x101, 0x101000, 0x23456}) io_uring_enter(r8, 0x48e4, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) 5m28.895585984s ago: executing program 3 (id=190): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m26.896526282s ago: executing program 32 (id=190): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.231477112s ago: executing program 0 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x48, [@private, @local, @broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000440)={0x1, 0xffffffb3}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000f50036a431e036e649ae4316e831fc201026af1bbc04f922f4c4631882516000"/68], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000000)=""/35, 0x23) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000090) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0xc08c5335, &(0x7f0000000180)={0x0, 0x80, 0xfffffffd}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 14.240198366s ago: executing program 1 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x3, 0xff, 0x5, 0xffffffffffffffff, 0x7}, &(0x7f00000000c0)={0x2, 0xe8, 0x101, 0xe4b5, 0x100, 0x8, 0x71, 0x4}, &(0x7f0000000100)={0x9, 0x10001, 0x4, 0x8, 0x6, 0x6a2c, 0xa, 0xffff}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000300)={[0x7]}, 0x8}) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004818}, 0x4000080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c0002800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x48}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 13.111381076s ago: executing program 0 (id=646): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 11.799319001s ago: executing program 2 (id=647): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x34565348, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x7}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0xc273}, {0xff, 0x3}], 0x3, 0xc, 0x2, 0x1, 0x3}}, 0xfffffffd}) 11.448162478s ago: executing program 2 (id=648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x1d) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) pwritev(r4, 0x0, 0x0, 0xfa2c, 0x6) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x84007100, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)="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") getsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r7 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r7, 0x0, 0x0, 0x10042, 0x0) getsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000200), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0x5}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x2}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, &(0x7f0000001280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7, 0xae, 0xb, 0x20, 0x5}, 0x0, 0x0}) 11.232242714s ago: executing program 1 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x2d0, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r4, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r8 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RSTATu(r8, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 11.105421934s ago: executing program 0 (id=650): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x200, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xffffffbe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x7f, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0x2]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.000538116s ago: executing program 0 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="010000000000000000fcffffff00001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_rx_data\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd80, &(0x7f0000000300)=0xefff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 8.87901057s ago: executing program 4 (id=652): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd=r1, 0x2, {0x0, r0}, 0xfff, 0x1, 0x1, {0x0, r5, r0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}]) write$binfmt_script(r7, 0x0, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r11, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000640)=0x10) 7.869274611s ago: executing program 0 (id=653): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000380)) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r7 = fcntl$getown(r3, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) kcmp(r7, r7, 0x2, r1, r4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f00000001c0)='\x00', 0x40, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.765522759s ago: executing program 1 (id=654): syz_usb_connect(0x6, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0xae, 0x18, 0x40, 0x19d2, 0x1428, 0x9520, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xfe, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xd4, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x67, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x6}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0x5}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0xc25, 0x5, "db3a"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x1, 0x10, 0x6, 0x30, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x3, 0x6, 0x1000, 0x2f, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xcb, 0x9, "b31d", "6e1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xb, 0x6, {0x7, 0x25, 0x1, 0x0, 0x65, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x7, 0x80, "a0ca7434a370a70f6b"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xff, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0xf7, 0x7, '%'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x34, 0x1, {0x7, 0x25, 0x1, 0x0, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x1, 0x5, 0x8, 0x6}, 0x6b, &(0x7f0000000180)={0x5, 0xf, 0x6b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x0, 0x8, 0x5, 0x68}, @ssp_cap={0x20, 0x10, 0xa, 0x32, 0x5, 0x6, 0xf000, 0x1, [0x3f00, 0x3f3f, 0xff, 0xc000, 0x1fe3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x8, 0x1e, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x6, 0xf00, 0x0, [0x3f00, 0xc0, 0x3f30, 0xf]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x4, 0x0, 0x8, [0x0, 0xff00f0]}]}, 0x1, [{0xf9, &(0x7f0000000200)=@string={0xf9, 0x3, "8abf04747746d8b8c379bfc7e1920bea304da834eaebd0988c9fe3ea2c6bdb979b8569f0d809a5ef83fb588bb5bf02fca67beab1c2d69d65df7fed46f1cc2bc7ece1d3640d763d8d3226523d1ce19d52f6a4b11223dd4c66badc5a91f03fc7c91077d5a006c741c53dbdb9fa4b4ac1291344492077a41b493d328917a6298ec9c1cc776ec67ad0a40ccae49b0dbcc96a72fd2cc86b16f0ec90fef397019dc120276e690a5236c17d8bea9a95bb58ea5d66c17963b8e2e67c95c54460898677fb7632833bedbbc4af40bec223c9a37e1e59234d2f4b9e42cb8f8cc968199e2e51c3d01deff855a36b580c4f4b11126a00d05c5726b784cf"}}]}) 6.869325678s ago: executing program 2 (id=655): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb"], 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x8000) syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x642) 6.047563589s ago: executing program 4 (id=656): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) sendfile(r5, r3, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x0, @empty, 0xe2}], 0x6c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r9, 0x40045436, 0xe) 5.395200263s ago: executing program 2 (id=657): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000f"], 0x0, 0x34}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000200000000000500000a14000000140a030000000000000000000300000920000000080a01040000000000000000020000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000200)='syzkaller\x00', 0x9dda, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @multicast2}], 0x3c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f00000003c0)="f59abfece3dbf3eee2d9876234ba60c537132b98fa083345fc82ba33c1915616baac78bf5bf3b4860efebae79d2867d88f0c3b482182cbc443572bb4280d980e010c3dae00a832588ba3ecf86e3c4763ad58f49dec9dfbe703f8a4ba1ab570f8abd036ce8c63c4861321d5e6b329ff678da11b623f1a4d45f8aadbb2c148d28d59fb7e5cc04a0d126b88ae8ba35772faea02034101aef809b5f7028e6e1e43b1dd8e8e4c1b95547667a87f55ec4638c587e2beedb066550db75870a45112f2bd697dfca51edef22a8c1ad6197f25ca6f5958051266acbc2d51a0c9015fa4d7c897c929abf3ea2d7524b1d913ba"}, 0x20) accept4(r7, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) 4.138740619s ago: executing program 1 (id=658): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x400000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 4.138434676s ago: executing program 4 (id=659): alarm(0x1) alarm(0xb95) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) socket$packet(0x11, 0xa, 0x300) 3.298592878s ago: executing program 1 (id=660): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x4, 0x8, 0xc}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\x00\x00\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000a80)={[0x0]}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002840)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0xa8, 0x1f8, 0xffffffff, 0x150, 0x1f8, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010103, @dev={0xac, 0x14, 0x14, 0x24}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e21, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @rand_addr=0x64010102, @port=0x4e23, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xffffffff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x2, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r4 = getpid() ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4020bc10, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.825440754s ago: executing program 4 (id=661): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f00000000c0)=0x58) ftruncate(r0, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) timerfd_create(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000009ac0)={r5, r6+10000000}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ppoll(&(0x7f0000000240)=[{r0, 0x230a}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 1.979510627s ago: executing program 4 (id=662): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) timer_create(0x7, &(0x7f0000000200)={0x0, 0x15, 0x4, @thr={&(0x7f0000000040)="59ee6b2d12ec155c95a51e662ba6fc32b4071d0646d91a", &(0x7f0000000100)="88694e3f740ee6227b2e8e8a6fd90d4b1667a6a348d799fc62e86e81d7f4415d0475a4822dca0be8a6c0261743bcc3f41f8879dd62bd07fe5cdc9d79bc3932b89ee2fb8ca80c5a190ecf73807ac90d482e09eb62f88b25cecc87c45ab87ace28c67eeac9ebb3efe818a3839f08ee00e05d89a43d419eef3cca340117695836829ab83513bf6ec59cd314709bb6b02325e00fc13f45e176197bc23c1136a804e6f2f99b3ac53554d505f2504a39fca02057639c7b98130dad0d268569a173d369149a09f7e97aff2da6fb4870183574b667ec98e6a5"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180100000000000000000000000000008500", @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r7, 0x0, 0x3}, 0x18) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) 1.821584171s ago: executing program 0 (id=663): r0 = socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x100, 0x8008, 0x0, 0xec1}, &(0x7f0000000080)=0x10) syz_clone3(&(0x7f0000000080)={0x1a4060100, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESOCT=r0]) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0xffffffffffffff00, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) 1.738631968s ago: executing program 1 (id=664): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xa7\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xd3a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xaf\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\x93\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3006, &(0x7f0000000100)={0x0, 0x5465, 0x0, 0x1, 0xdf}, &(0x7f0000000040), 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0xf, 0x0, 0x40, 0x5, 0x2, {0x0, r6}}) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000000)=@generic={0x3, "37354220632f6d65a0513ee51d596285b4eeac4d6e36de5b4814bf8e8c3adec9077e3b780615b549174ae6da5d0b5208a287c2aa2830dd409575914be55c24dc386554abfdea53d41b56c7a1a74409b0fde7e4238c560eb619c93af2f0181f91e0b9d9b3b73ff3562914957af8e92c1e1ee7929ade5d16530e866c53660e"}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="80000000000000001201000005000000c7ec51b2dad0535b454abcc2ba9386c5a502b2a5b89b55693217abf7de63a7d68783d9535daa7940b54237139a013b1909973d9ee3129ddfdd1d880b06a22c3d4831ac0d201936eae23f3e543b0bd111f7f8523bf38c38928b3893b04e34be37e542b706b563191ccad724000000000010100000000000002c010000fcffffffc6c3fdbcd892f5985ec35e406369167232fd1b815e572c7c58ffb772e1774e5f0203c57e8925148117fbe01f82e03d7540bd195a2b0457f706147147febc608efee22b2ecd5b0a92306c0a36f84f1cedc571f9964fbe36968382ce8e077d2637768d74d5137a6d75b880911f0ee70f2f4974718ac6409b88d216cbb725f06fda8bd5ccceb362fe7787f29346d2f3ac3dd306e1894bc4aaf80012939ac95e736bfbc5b701f18b6c5c49793e5b2d1b970bf6b3d362c1052c5071fc43628283fa302666c505ad975a18e55693fe6192aa13539e6a2e15c9d2c5fc752de18ca1fff63453350be848ddf4350d3a053c125ed6f6977ec8151af22f07486d46f18bd083d00cba8fdd698e613b26e2d396a50cf8e607643ba76753865e8483e2d7ada9c91c90406ba835bab87e171955cdda7c722b5df233238b199383bda61b401b67f8a4f15f037cdb95ff2d9c4ca6891f208ffb63827d6db37863f5b621f8e346bd52cb21ba0e55de4a71744c8a4dc980843cecc0a5bebbeed778c8c02318e1b90f3f0c8909e71b1226f8adae4f300bd0ee5a2d60f023965509438037f07b739b293c0b9ca7b4c33eb5c21891f24c747d15b35e52efcb966b845688689726edc8faf42149c159cf156c3a25ee32fc0b36078ff3052cf524ec02210536096eceb5edf05e0f6025c29c8f78c8ae1be57de20a320edf4a146e8f1f64780f6098afb55214182eaa19c95033fbc644e651588e6baea15817c03209a7d792e83403eccc8fee38255ba04778784a7fb1bf776f103f3501b0408f9f676c9ffb351dceb8e6f6464a4f3317102ba6e45ca404950d827369f226513436580b3bb91d78736cb584e653f81f5b0f634dd72754f78462f9b8ef4fe7a21865825aa2702cbf6bc418df879bb13e2ee4d06fef74a8dfa5f81f2f50fd25e435eb73092c0c1ef54eed6c5eec3c598fbd7ea0e83ab08b6ee9ca8f88efae0533f773fad43844e620faca9bb58c41d227034503e13cd71987a60dfdf7446892d3879a6a9e3e51f0a557ed7b109364bfd4df5823638a1498c5800bb4b2d37f4998acea6c94908a5b49e544f14d06f8c5e03b9fdbeb69deb76a8eb446c148c7ec916c1ef5a0a4f70aa669d453bf9114665dc4588c228c2d26e6969597dfe28ca354716a1a3e74c0ac934c186f07738837bb28d77c5ba2ac353a5ae117bcedddc8184831025bae2cc9ebf621de054376acb62e9dc5b947629cf00e1879ae6bedb734c7c362e9ac5bab37ce310cc3d5808f534b4e203bd8ba89818c46408a0be48de462bafd63f3ad1bc41fc06018d3425c296110817337c858c57f6d0dfc5a50bfd6fc70f603ddf1d183512f88e15310681488d6bd6b4985cf33e97b4ed7a14de690e3f21d7ca9fcfa32695f1d3c04ce7279ef9ac0624ceca020b128dbd53df355e26a346166e3c10513391c34f0be6f26fe5cea9f2fad217da8bd625aa4ac58e79077a7243273d275dd5856ae3be292884560828a30c5932a07b29fdce2b297405c82b05aae28c33695b54b82873ef1edc8160ef9920723db92102f22a11553d34b2ab8f7e1d4b20dceea10332bd51c88e1e19965fd21f2121a44858d8ca79b8d6de837459c4c2f969fdddaa867e69049587b3f3bad685d1b22a6df7041c485c11ff2b2bbbf360ed8583a723c87d45a17a4f48e61e1c098b1b0d1a134ca0afa939060b91cbd2d5441cc3134f1f34f52701be65fbecd2b31e856e64ae878313bb280790a3060dc76453af8025bd572538c1475b3610df052dca02b888f6e3a29b2a86563a3ed6e6ae2ee0e1d87c811978312610a1c9c166e30efdec8a4239ec4a31e7156bfd874934178725817e6e57f80ead67b8860098c5a1ceb554ef2a3756610e0cb21c981b63982f42daf7047726c20b4a513e4c3c089b7a06afd5606878a99b283a3891c626cc0d6027d2899da330feb06a361bf8b1d9c8230d17cf2c197441ea00ef852c5755ad1ca73162c3575ba8af489e4bac3967eb06d14f1683a15e6e4cafb41eaf66f0e5e6c6c49323a512f2a659d7260d6f7e90f0d8a83a7d2b0a77740b7b1c12e2573631fca4550e5abe35ce1078637de49496b29d669b788f20dbdf8c18efdcf9945091a66f7d180398d66ba0038eece721755ba0b16fb618ba163b0965214b8e6d6dab6c72f615c1c1ae118d16e7f83570efa8de8f2811e66aaf83407d82bf42fc2085e43c62bf3c130b933cb1063ddf3f7325d03bec37c089252c016ef56aaa02d6db522d7eaabd003ed639c55d654160bf7a6c9d4c2d3d55bbcc62d86e68452b350ab9a0b2a2230a62a81816aabb60f381633356976f3316bb30f7b070e788a08ff9d20334c1bcc79f7b6e16a7a03202482950108cc77b8fdf87ce252fbc9bc2885d448a701984db7fc379d476ba2ee51e2107a3a33426e7c0446ee7e54f93bf40a0120a4c72d5f3c4e13ce249af973c2bf93b569232b8d12caed2a5f02761af6b1c945f80f96f934d243b9e081b08a597c17f3bf3144bdc062c1d2a42d7c3053d7ee6cbce89d9555ab5e4327b3cdd4a4032ff79361964e10693488ec54df42253a2c763ed8dc07dedc33e7885236258f9e7ea37ebf2e4e97a30dc0e085173e01e78439a4e94c0b76cc7c73be54b94e8e9cd89811e50832981585e7afb6e171b22266d6b8b28b78f9fa80694cf83d442a27e3ed127d833a178ca9026c41263f7042a38d5154cc41240f29758be8d999538ab5d7a2277acb3cc16a22011f201704e7431fb8a836740e0380067b057f6c4645e841097d04158651d66bad3372454f106e2e17bc6314ea6fc6f4e47e2c3245ea369b9c945f717edd5c0c20ea1053458c33aae19f98e5180754d2e42298f4cb64c6baae33257dddfece84a3d7f0bee9c6e86025f98373e726ff34327a24653f616172148e98450d96620f0456d84138c3ce7447780c79abf170bbbfcb9e28ad4f10952dc6cbdac5d79dc2e457ec7c2eaa047675fef8bbb451a346aeaff72e94bcf39b350575ed6e2763cf87773b9028446307f96d022314b1e6f366320ef06c400b5857d61936702d0158944127ff4c896aaa19063fb3f44b57b96549341d72cd466251ce5d5f94e52518cb3589070609ac8cc24df87db8a05ebfb956352b0eaab018e28c7e9130d43106ed005732bcf1e0f36b2cadaa4008d241166342aa5b8246d7a40aedcfc8f9eace035c083532e30a6ae7b760d96934bec787230a34d6db8d3b76595795de94e9a6ceaddfc17a9fac6dbc4691dd79149c16f045c541a0fa4122936867ff782e147e882bb619704181063a41eed494206487aafdc99a00cc79379873051f43981bd0be36e595da769409a5c4c0ffac08907e4395e245f8469dc3a8b9bcb81e752448732adf4b068228af83d39acb98cc6a8a82554be094583bf76990bb128c493ad3484674332a98b6493123def812a31489aaca66b79dcb2de8694754d657010b383f7c883605f707ea4c9dd9d32c1058e46d848317a3dea1bd72ca8091923d870d75dac7e84e748168cb6d04778bb13d7efe2a44825aa0dff271ef66c436e90a3e823da3b2edff10982c714c11dff16f75b6dcf55bbfe7bbac9261829c9ad357bfe6a73b0e1c1afa46e4adcd65995e9b65ac4d1a250662e0b5ebc05c172e507f4a49628a15520f2858def77c526e3f23f8fcb55efc03a7dc1e9b99b36cb2f12c8571ba510f2734765bd730581e27976a00f3572bb0f9a131433ccb419dfe7b8c34553353cc0ce0a6c3bc2b2da4de1eaa56c298901fac67f43c3e1b18a761fbdc6ee05a9684a362cd837076096603fd04f99ee66f22823b2de310fdfea3cfb066f9e196479561a242a2e762030928fa47b9e737ab1cf2f9923cefc18a48fb8fdfe05ba915ac5b07e69b2b74ed94437931ed4084ca332859cdd83fe4a475a58d09d2bf2529910bc44bf8f9b0a35b0f8ea36f87b75b16803361616689d0e0f604093aab3fe3fc656c747dfa8adf3b3cf89250151cd349b9cd32dcd3623efe3acb6488660380d717e6554be2986a9c1f009196ae8b0de69899e7cd62ccc7444b590d265404ea91df0e11c4d6fb721ca070b8b4a97bee27ebb46fedb42ec637b2103e39aed318a54fa60fed8acda8bbb29b917c7a1b75f4c64d023a2b242ba5d3f39c338279b101602e6e2e7e2cf0acc7c683866caaf597511d9a65f776954dff1ecec230847b49991744d3a7d0fdaaab602ea98ec4dc3fdbff66eb5ca41a227f4c43bbe4c682b19f1ba8150f898d2315651a6236a789a90497fe4f2be6867add7d4d7934b5b7f5cbdea3fefc1edcb718b917b49d26ddc75d38adb5404e87fa5c1ac6e3ec10ee610d871dadff405dfcf14fe977bf2f5787da062ae6477a1c7279c306082add0521be3a35fd4ad8dacab0774963b2aa86da78f6d9c63a485da1862a3f14d3513efae5a831143eafdda636bbcec4034a60aa789bbba32658980deff8309f5be48a0b41e5fb539a829460954d76ea86c8f91f07305bfaade6e5d60b32e5dade0530c803eea6e132a8769ae5f6eb98e8e175b5a83d4d09c83198a39df44cf441bdba1ccbc77871964f94bde56a1fc21a5b3475ebca5b809ee96efc26379484dde190e92082c323178948f94029a3065375e52f199457e6312831ef1ff1d4fabdcc2b2d0bd21b6ec6354c8978e277eb5fa3d73a30f9c2b4fcfbc1ab677eb3f84be4bb3f6aa0db95174458b0f5a4d4ad1a982de05a9fc40d6f8a88588bd12f4420d4dcb28ec1a2555b350f5febaab1468cf5112e7b8b1375e1ef4d7f57b9490889dc3c919fc3efd377dda36c2f2999c7cc2f67be2d460a989d0f8fd4ab3ff57a04e646c517ed18b52e0594d405824846bc2f2e43d874c2ceb6d881ce2bfad6dcee07a010065d7b3e92188305d79dc89366ebebc861ebbc08adf9edc1f3f21d409cd37254c3b90123053a4e391356a9f5702fe5a5d13bb42ca05d8746cd24a3cd953201841bfab7e54e47a52097b7b40e9f52d5563622bdef47422f1becdc5c267f0576465e87c3d61322d5f9b5a27740a5b2647c4aa53712e55b834ca846a5a770dbec705274cd6a84f9a66c0b962841bd2723973ed08b38393266d7fc3860b8749c49ccfb02b5d496fcae9dbda53366eba97ee14a8d11cd3ce1b0eddc3824e5fb44ebdd0d1e8a1093bea666386f6ee62f66a49aca4c793021fed80087f60c86d7ba9075464bf40ad8fb0b802394b7b5a95b6d21cb42d4602f4a770e980c8b7323c150ec7e0e710da690a33146745e898774e11807e023b686f0ba092f16b29ce5a4e6d17193fffbb78ba0237cc2b7208afd7eebef7e5d287c9d473d3144f504d9fa3b278bcd8e4fae34bd1c94440f29968f5208b477f465cc341db0527d919314d01bd945dd04ef97bddd1412d8744507f4ba1e83ab918b07abc573ed0197b8fd60cf3044c217ce62791869b6c809bf03a450d73baef56b54f3f5cca4a01b05234d10431a01f3a2c2822ca701a03eb32d59cc636153e9e7fcc8ebce8f92a0f03317d689b366fcd703896b28cf53248488d37f1bd6cfd2860b55690ee5ec67b9cbeba50e3aa6e290747aaecda55ca3271e049bea140a5863946154975253d8d78a860efce26e972f963ea962b84952186934efcc77928453fcf30ffbeb907de766c30680dbf7b39a942a5de933c9dd7ecb4d6314187b2b9c0a475f4b63723cbc06d1c295d908348b2d10714dc0798ab134073e139b4e9b45283003e8166a20fd3036a0596630b5877e503af54e1b11f77fff987dc4"], 0x1090}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.683292977s ago: executing program 2 (id=665): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="1a1bf258bdc9f689c2c421aea0b5e6e277ab8227e0ecc7181d99cb039523ac4f21069c7411bdb3c58d6cbceb209c2a92afd63276b3ef9805157e7edcc4cb319c13e53019c1916ddf8c0f66d7e65afb76dfeb01add47faaab82536cdb72f859ac11fd497ee171914a1dfeed87f2e7e36bdc6536ac1841855e6a223dffade00f21b7a3fd86bf47b3e6733984b0718b9796d184d210f894807930cb1c2771ba66216076527e77605a1ccb5873bc955c4a74aaafa13a69dc98440921a569e22d05a4138cc7685f989c9c191e08571c34c0a449ce727260f6f332d8bc4a9defacfc144bd4dc7a83ef9ebc8cce944c31eac92b840a0f60a1014187fbcc9e860fb94e11c178984d6373677fce19249775aaf17fa80a128dfa786cce3f18d4b2a105b332b70e16333d648e3cd463023ce18436821f00d0fc29e26ef2dbb7e949707982a9d243447fcd8271cfc9678b8d097f7b6e0cf89a74b7257e308b2a58a2cf2b62a4ca7c52f0b1a0e04aa8c931b874662b5f3c49df15c214dbfca7fec7cdfbaa9b3a1264a3d467140cb0b19931daf7d7dc5971d4cccc1419415f9145f04a7d0dbf9637582cf2479bfc63f70f677e1b40545d381ef6f10e07eab1ab42514038491f833ab31c30f2c65eaeebdcb23a07553d527e9a89a5cb535c85e31b914e47390548a3aba0e30460483293b7dd537ed3738d31281b6ff5820361750839880548f8f0946a1e6c3e7248ecaa230b5ce03c5539d48cc0c255eec89282e86acd830b086e16abfe550187bd0d24e3ddb93cbd5b74d11b4ee6eb0e5527a15fb08e9d09eb690fe2bf365020a45b59081929bab81d90dae0fc53c1786faaa5480ea76c3f56958aff51583eadae41f5add8f857b60dd9504ca333dc79b9fde373ccc6db20b54d66d8bef1d376d9696964e9e76a263d4a1044da56c4ff1a222e2f76f6a62874f03fa1ed8e5d82f9ce6ff71cd7a579839e8139060072f2477eb664eada7675ed665a829dd7639f5107b098ca44281cb5fce9716035717824c9d129db601b1776f5f67c2049ed7f3ad0be67cc03dadecfd7cc76bb997885d979feafde4f0ee5f5d30383a792d0509ecfb9e8c4cfe54fbca29f36a48748d6b7510d4f8ded8ae6e168c59bf51f5bf18be2b18b3f860243af523c881e5e4bf4b995c96e81cd6638d2a749ae96d1d589cbe1f636ace178673570741e42613891a8a027f78f28e308cade08722e5fc629f73dc3cadf84515dbeff9f9d8c4cd0aa7cee59ca5f7afe0ae9c5e86680e0976bb58d60e5afad4b11a3d44d36d5e8d34169b52152ad5a60eccf0f8d54c4a7d936cfe389babd7f76219780e9d915a4b3dcb384f8c899ec02071e4e1ad329b7a1523cef48e81c5f40a2d429af3a985fec3f9cf9067766c6eec356c7608c45c74a7e28d6620303d237f870e8c9c34835622edfcb16aeb24a109974072ff969033574e8d189662efa9062422ef2f975b59aba0149110b29fd1905d3f755bc66964da685a22dc08a9443c7385f034f41c173b8776efe43da86bf078b53fddd6c22be93274d4ca7c2ffa0dac603cf641d8b54d9eb40ea30beb12a7057cada928b81d4807e52c432546f6438429e6bc835844d8fbc7a252e97628f5acbd4aa9df28dd38eb7a1d136849c375a7fbae0364d6befed9357ed10734db7367bb3b70d6d2508789cc2be3a7c67127e7caaf089a8861f48e0742c98622abecdb622803a325352621da831d1c1f1a210e16e9bbd0706305b4f1f6314aff880f6f03a016d2c6bd5c5a8055df05ed0ec2c0d670c3ae30ac764a05706d8f9a9fbace8b089b751a5b85bfd4ec3328657c39437f54035fadbf67df39e357440a56f7dc89db08fd1d854ecc2b1e2db4f5119cf01bd68b5f2d80e727056cc0920a6abbabd2fdb23992e40ae8935d5ca46b4648fdf58cab977e4a7980d25fd2af7d0e596aec98677f7eedcf2a8a429af00a401e712f7007e19d3588bd18ba2511fde5646a1083960e89176d8716e0565b59aa63fac085dc8fc3d828d2381105203ead50a01c869760823f5bacf898d9af2ebb4eda6efd1fa6ea5b7b019c3ba4d625f70dd5d841c1fe96eb01785a43e0c1cb4877dcc55bf0c8603fecf507772914bbffb8cd5c9d51b9e9e72e6e8b00512c2fa0a23ca3d71d75600ac3e7ac9580a4abfbdbc3c9bbcd1e2bc4096482912c45870ca932dd18a9e5c04826be0f6165c1e885fe1e252c96aed9b2e326c3b8651d3814843a778d748eebd17f1e5c92848a13e1570966249ae7d3c563748d259cfdc589e1ca287f22359fc5c207a9fe48814574dd9960e5234bcad598f6a968b2c24873227c4a0c3fb2c92a8dd3cb9b052ac19a9d5de68b46615677add2eff4b2ce562a68fa5a4577b225b49ed476fb1dfeb75a23193aae6caebbbd1aadb7028d352a4c49b0dd12d86025cfce0fbbaba4c4b1c5c0cb781825c7b42263603ddf50ebcc798b37cc84d52a437fd6c91abd2d66fac0e535177f3b19a5a91b57122adf62d831a7b46b5ff22878d8c053ed6c1785f7a3086d6824adffd5e7848013804d4725d3d3a662d2564580104210b74c174ee163d81b5ad0cbcf2af67a01312c7d74dc19840507e10d1711df67e52d04f354a5377387ea9e604b3c483c0f642b987198e6a23d7a39c2db845a1f68f4fab5379d80487cc2b3e43c911575a6e3dd26bdfd8ec85ced7444c0fb22a4c2e9f0accd29405fbc5752f95d4817e6b8e1f95ffa4c6e9aa92461da63e24d9ea34fa096cd3911c63be80c8f0a96309d2231d39f8944f04818a5e635eae9254decfd99b1fa3373a726594482474de4fa4842469baf04d036e04b7ff9b30d4cef8c1a52e15ed130d3abbb52935e41a106fda9710887015ebbb5baf3ff0ef1de7b4368274b1e1038d1b44af2c08467c475b8fcc70b3641467d775a87cb985b40f910cbc856634e33a9bbe834c0fd308198ac54a80de2876940ad774b992bff07eb81786a31397494d6d09259aae70e304df2e57e2123054764276ef803c046002fd8a4e4d0346d74aa6bf93747ee9f9dbe920a11303c3446b325856ca9b484c7c38508599f0f33fbacfd8984231e73ee59787b5f1dd4d1ad7ac739cbd1e53ec726434b767373db936800cdcf49be3955b22bd8dcae5c471aebfeab0a421ec0583847208a54e50e2299b90dc92200b0722be745b05c0a7d65eff13289075b71dbb8c5e357616d39923e1d6b81e1402abb2fcf80dd2147893a2b3de12314b902d0857de8c77fcfd12477f6542792babc1c7c3255f55c656a59e9bed71362f65425c43154919bccfc0201e59f805f8fbabeb136f02cb422ecc96b6630bd5f046d174aa369821ef8b37c9e681ca2654ec51a6f0dac57cd197b1c494230948213cfce943b5efd0428c60da4dc4c1ce7d9b7da804368e23c0608411b0d3e4f8cc80ee1be75ee216021a01c521df6413bc4aafec8f4a185de7b28c7f0a4de869b34fdebc3867d7eb3b30c553555659a071e2d6ac69a7ee3e81c5a7dc0e23a909ade0848bea7169e044bdc9f87aea29f36e334460f2c1447385263c67f873d428a2d33554515d7f27d754acd1247443bd64f635894aabf3341adcbd44b527f45f5d38dc96e6f7017aa6a595f66033a703daae9a002c7418840b4c0294d1ddc9a028be009f969cc07ef8fd911803303696ab0db4e7e1677f030a09d32f24d5589335ccc9a3adb99d17b8553c06516c8d41b90b56404f424721910576f22595c1bb1571d406dd724f775dd524cd084450128e9e8458780f26a33456f33850f6407a5432aa0fb5c0bcf557a39b1fcf3320f3cbd59979e031dec13e78ae0b9d9599f7d3adc9680315ee2cf53000f9892fe797da9753bdea8f4ae91b90a707c945d695a5d1e5d436b7f4f285580f4e9ba29828f3a6bc6dac8c856ca48829fb51d1b4c43bbaaf7db1775b3567c4e00b4090b50510e0b8ccdb064f5c75f22b5945c0316210516999bd01132a72d4133d51911c8f42f294ff5373c1e73e175454e111d8c9f0e0321e72351967d4ed759e24ae6fe9ab30e0be14f1a28026cf5c902c2cc0ab4dc9c9414517de95d7a42cb406ddf36d96e17ec69bba8cb1904bf8efe5639dd9d1e713ae1fdbb9431fa44cf658670fec67d638972b3cc715cd0373c0bb7a7b7f77d1fbc76ec229e272f577119148fb3976ff1dbe7eb78bff2324395183db09113a9d4a44b07953ce4c7642948d68bceee32453b943c992c0c3a7f5951d937809d3d6819773da5f8c757c6af5cc8a145430227ae90bc4dab4530a69c021809a65a9e1c1a3cb8ea28787a54e4adbb6e5710eeba63fc7c9d542e7f344eb5928fa6954ee9cf034b3f28b8c3a4681b09e61a345e7fdd241ac4095f01ab12260fb9bc970c67e7f71bd5405a5070fcf3f0a0446fc344024dfb6a89f8d11556d12f8d712bce084321c93197ad4d2a180046fe925a2835214ed394bf97294e8e2dcfa3d50a6737764bd9d353257264158238c6677876ce740233760c48f22381ed3210837aa6776cf34ebbbc0125e1c77f0f110278d2bb9dd2eedc533ec46249ce6eadc310540a3ca771bcf4355602b8abd101cc31c91de9986f79be5d3c368682a4f23d15fb82a302b9240f095e775feda6da506a7572ff9a7997d94e368b5baeb0c056886db312fa9c7ba3257ee2a39f34274663a435ba2d5aa4fe00036b1ebe075adb81ed754aa55b6f5ca73e8edce1a40c0d401a8ac87807e9c0d1b34420fc6863406742abb348a359ec5edff684dc4f9248e6f2c342a0bf629f88ece0361a0f3ce4000acb1f19b3beb10646e1d95fec8fee7f275ad60396cf08e6d002ce64136d2fa760b1d10160064bdcd86d13a74f98a7f423b72cbd87f847349ab7a226afb555657b98b5a753d9e35b204c05dcc430ab3678b268bc1d66ce18f6fee48a3b19c5ef0566dfff40c839cd719fb2a7ada58731284063e8504cd5f8e4d4f11ed5beaeeaa303ffd75403bba891fb9c1cf393b8aa89850556df3a70df309a8307855ec1cd8a31e9dbbd07bf08a5a7a4703e6457b67a499afe635c7dd579140ad15fd53ae0384870b1c29799b5643cb3f539c6391dc71919773e877b971687e0a61924993ab82401f62e00a128985290e9adadb6529ef14c6f965eaf1cf57c08acd5e5ecd7031d000b8ad7eb19edc19de178564dd2ca7eb79bb717dd303a85a76bef93252d68f65e1132bf77dc8b381dc84a3d917e174de5ebc569654d77ea832350fc2fa45c0bae3882c85297b597aba2c6e41528b97de6a101edc2c460772d355a355c794ebbe421fda5140b430eff3b88dd63ee1426b5a394006f531c0fbd825b72bffe689e9c4dcba362485d0a6739d54d2715a92706335d504cadcc23d8de2d870e6f11e67844128b3ba6b10809821897d794892804d8b81036836aef66131df174bbb0a6f11cbb5781c3e821bfdbe32c06f40e11e0e02b70e4c5ebfabf58e766ec24907a1bd2ab3d80ca1e66658780699f1eada7ce7b8e074ee7a3f40141a9f4362405a1ebe8eb39742dffa91b3cc41c49910cbd4a6aa088e7fe74fc8fa54c53e82b581514130b13bf1bbf07674b77ece33fb8217e65fb03912b10ac24863b9aa4e419da868935a1c835440cb6c2b599e32277aebc5dab22514f87ebb1badfbaf42fe3d8979a6fb2e409b649d709b538b483c424cf7af0f68be41e01631298a884d4afe52815b9dfdd37c03fb70d1af366d3a5954c244602e80d000f3106ef3ab2a2be5ece5a0d30bb6cf9d1f0ad0ed8bd87217a9285bad09432a5a582449bee76dd0b59175590e1edb8132d9703b8a5329d0c249f5159815076a8d930959a8206ba080de944e3e72976c18817b2fca01175b9a5c0fb1d1c1cc154917dfae64237295097837b734d0fe48f58644fa601aab06da0a05f35591efd31fa7a6b11ff0c81e98d6f1cf23a3e5c2b28e1c97b7561af44618c529a76aad5939fbd807011179b63ba179c66ac2c398da195c233e1ed33d5663a2cd7e4becdb15cb99cb8a270e64f87aa4735863c3f0125dd2a112d8dce9e9b745eb23cf31e8f5db5b69cda662d8a2235f22a68d3171c3bc9bd403a169c1285c0ed8f1f2d5522435307f93aa7c2ef43dddeeca89a9da4bba207fb04537c20950fd047c0052be427075ae26b420c4305ac902aceebd741a4d11b120fdc8b03c10cab560044f9c7c0afe2866893ab3b98725af4cbd9bd71000315d2b1a7bfd10e3136a53084e5aaaa563539fb0f335c21e9e37658c2cdc96e238682bde6c05155603b9bb9c07ad3f56b72312acd6b675ecd5bb6c71cf71ee1d66d8718f30a93ca6d9a9dd7002a46da81d92067aa0219604427901b30b94c09273dfa1f3fc543222595a3b593d02d9ef34fc66a05f2e5c14f15565c02be66cc997db902337da389f25ac01d84b13b90cb197df958d5d3b2be7f626148b225f6a92da3700a2e4ef8883105cb93e3c340b20557e52e3076a91f069f47547161e91618a1ec6d1f61aba188f14de82289566681b2ff243754b83f6f932bc9bb65bb20bc93a6ef162102709d86b6b2f9e8b4b779c396d47c702bd6b68b333805297eddbad5ed4c393087bcc86decc8e9ccb216f2509564661eaf683e7750ad8ec7ab57551de78220bdfea794c41a8b68735ba2bf74f98af22968bb011d7961d3986b09141773c7c99006b026ed073db5d05f7770ef9dc2fb188d0f5171b75dd1a25e8d7e7941dd53a7ea5b5143acdc954aba040d702148805cd6ada8d2a3aa232881dea941611a73a38610747e654944b8e127ab7cb5841cfb02a6f4850e69afea2d5a469eefa89d47501548f60d46ec41d387294ecb1b6de86694eeed21f511955912e5e735290396a0d5e6fb4e0505ce1b85debb12d2aca70be2d70f3d7cf948667077bf40bdc2d2c906f1ac864a59191b71cd86f9c479386704ab0659cddf25b27207a3ea32f702311965c5b8986a487c86d6f58da03b7d1e56a961088a6d957eba11f6a401850b2e7faffe7c7c81a5cf0639c06fe3c5365a8ed263aff1dd0d4466b4cf41848eb326140101526339a4485d8f8cab1ef3620251b4e2c6c4bec5e3755a22975da40949c3b48206ad087bf893b7797875297591cdc1aa167aa6036e3086bb66f199e5bd023952932e7e2883f41fc41edc71d260e1c73b8b5c68269f4ebeb47fc027e768ad34db9528b07a7bf68aae38f1c1fd8b87a56426c682f5790171487e806e900dfc389470f212b09898d95ffd380ec4d5c62c32fe0c7bc257993ed0ee9076369956a2e493fea88a038ffe710826818581487952f538605fc249253d91280361b0a80a669a4d912fe7b7c9ecc22aa9a01147a8ad1a39fa536e9528b352ad11d71e9757e7492b13b3fbf06d012aeb564d4a9e02dbc837d24cd68b99d0bf7614c7a6f8159926a9da81c4be3a5b93cdf4ba99ecaf3439578ca871f3337cc8e45f8b2ecacf91aba09160ecd5c5ff96fd6c4371783b052f9564b3c35db1af0ba923282d3691ec358eedf1a62da58046591b0290be2fa2c476c6e931a81b839be86c788297dede79412cb7ae003e4c877ad8a4f6ba2eec3966db1f07ea6fcc7b9ca9ac58ecdb4240cc113cf97681a280feed353db6deec3ea42a949f31ea4a7a60db94e55a34818c42c55cfa0315f4650b9b88dd8deba15e33d8d5d44a1eee19a57dd19ada3e86a9e18a43d6eb87e0490f006a069f853c5bbbe2ea32dd9f0f15d5c15a760832f6b2200815d93d404b860f441db9f5a6956432637a3473bfbdbeedbe2f543c4a89162150fdce9412939528be7bdc51fe7f66f5df8cf3cc62148e9ad035d3ffa267cca3a0092f48f8b12d04516dd1c83bc81c1936002afedc7a011c089ac31176b771a14b33b9fd1e1192c0df8db70faa31de029c22686aecf704d51c312691bf7215fe1b0f36c124c6a28f5a7eda377aa5a32817003d0832d59a3b742268ab3c358931e2c3b2bf63e841a5024b7a2a86e1bce6cf8f7d8031f8942ad4aa376709721abcccae98af060916fc434c86ac85cfede479549bb8c785b48ce2f426026980da1ebe44cc6ef857efdba2f969304e654d2cd6f3555823f670a79f1e664f34062e6e6c7b831c2d9c37149a9720924b31032df26faf081e2edbfc35ed746cda3a841cbc770a22e4b7d430734f67cd9f3fc186811336e3d1b3bba89a6f13e6b898bcf815c744bdb9243f283ae18d7caccc91c6f71e9e47fc4b5e3edb700539bf74e32fcd320087fff75567594338c5ed4eff53fe11cf53ddcd97a7988675dc98c0ebb88450e092b680b5099fa61dd5d5f8d9a2968cf26a3dfdaaf20a7949a9c926463498f3e60307c9c3067ee5aa93a06bcafdf5a621745e6f9164cd3f720c06bc609ad875ad23008851af3d65585719cde8d1a5fe46a43291e18374c5d4558aff111aac1754d9f54f009d21d9be54fe92e7a53db63f3c2b63e49987fbe634828f216e69d079e6fab4f55decccc5453b72ba48f2fbad6d56a80d12b97ff16523c773c88afc62c4fc833a6775037b500e387e5ce290c119110e6d42120e29964439114bca67fecec42ab2cc02910ea9131444afe25894e3cccef9f082b0f9b0735efc99dcc05bee83824aa24c9565abcf23b756a9f1b5b045bed51386ad7f735f03704041bcb5d1e762f6462364d8744c0fb6cb35781d42b7451b853f63a5c03d92ac89bbb5c5fb1b5af20c6fec417561e53f8c44b3f2b27d08d5cb913207215b220d1631afa34f95f13060f2844f1c4dd4bf0ccd40d09a1a055d6de0540717d92fcc03d0dcbf7b7ad5113bf25f0d5efb2e27282ad92f97af9f7a74cf9a74fa8a87c4ca78f065a3147d08f6d502167d264f75f0ede750abdf9eefd9f81433cec7463f76f78baaa3667d94405f302c872511abed1d26a52a5ab1001d6bab15d4d0e8572c91beffb97100ea004b8b4e67fb9165f84f2fb022c544c251da78e042bf3182b11b6564c27ff3e39497a35334f1768cef098bc86a1d6f7e808fc1024fe6434073dda424aa7829ef4862fe7b0ea3108a015388908785a30b80b5374b910d08f7dc827a35d676e67d5676bce0429cdf6993985a0dc2367989dd7c652600fa55150cce454bf2a9c2603f1eca07f4604a760b37f103810d2d98c8f76850e7dd398d435dadd3972adf0efd140e39dd10a2c25280d346fd6915d72bb53bf8c6754162c02c00dc275172a5f96a6a3e25565585ca709a64c402a5d1d636571e2d2996da5e669b1a5124313e1d3f507b5d9ca017d5754e3fed3557f119063395a776462c480471f09a795b5e31e729f01467c88d84d2d0eb2b2d559a720c31bfc0f72cffcfc8b906bad7ba92bf2e9fbe1bc5698a75bcb8d2cb6a7d069d14990876fc754f17db6c50c4ed47d6f3940b11108854a023049ecd45b8d56c01568c84bf37c46c5469524764a2487f1e21b3e05ea541a8ea25176df29560e6f007607d63a189793663e4389144811bd662e210e524a1abbf0e83f581a18ee5f6ec8e4d56f7e08ac7b7edc2faf40373cc3dcfec9ce793f4c2cb7ae08adc36644e50c9de676fbd3c7e1856ce62585b123717f6b15abbb4dda7841eb35930374e373b718b8947636bb76a23d9fab54316c45a75736bf1e893a79f47353466819f2e713668447d58b3f8b234b9aab25693f368138280d5ad6e472134099039e3d01dcc6c148aac3c92f6854873ff98264c7f7422aee6106d2dedb72954e649c7849ac3526e7551f4d08201576c49390ebd65dd31103d88a8626c3e7086ab85fd5542aea9dff1f8df7141e204584e4692e5b78c94f480509dbcab7429751ca9749a499701f69f902802b45f89d9ddf689058e935aa57eea3e7872c23c5e4600c301ab977522073875157963232e7dab90d748e5578cf07771e1ee50586558adff8429038950e9a5ef60774d01415771499cdb0b411c6b46c940c4c8262904dbd2289eac3e07abafc0b19becc0016d2ba0665d013365fbd3cd6e93a86da4e7185e1c0e3cab5d50958f3be15572ee5003757eb32cab0388f74fbb44dbf92212c08982493f60da07d2387d8a580d6b6b12dfed4a880a816ad021f70380ea0c86a579fc72c6924fd87ceabb8478c17a892787d4c3fb3ea00b2579da45c04134a1a13a27c39962e89673b4f076de2f1af006d42f4c6caece47ca76645412cd3f7593d104f1e94c65fbbd506d85548ad45cc74c23b8e9452dbbf92aadbf7d3245444afd161a17abd1a1e4294653df12f14b8dd7c695a6b885aa6bd8982a183078d75317922dd57a16c4b4d3d65b30a7cd17911d1da5ece3e8063b4ec9858eaaf3e6c86839a44b78a4cdf4b00fb4b900c76d85f7b89b70bd132c4d5b8fb01fe251b2ec019742db4e9a5dec5e8516816b5898ea9c2a49de194844e48a41f76c360dba8677b3df7d0b12733623cdd39b9a6b7a7de2c09a4fe0cb95bcafeff1a90b669b92511718bc1383c8ce4bd961376ad4c1c9bc4e46f849fe41c110925adbadf5e10ab6b6560a63832d63d9628c7a89fbf6f8353d8fd72bf3be33e1fc21aae7cf54e3d6f1fba871296a845d6ce99c86bcd7abe040891488227658db3e14aeb9712e145be6e71b57ca8fb0d9acbf16d97b8e530852e34b37d96a4a568584d465be7738e32a654f86aa7e89dd1a7a3e707ebf7a38df2ec2ca0a6752717f4a74b5b4768c2b66a4b7e373883e3e03191f6878fa6fcdf6dd0ef0f78efc6d32c1e10746c8309793500092c45ba162c4f2e34e600d43c35a8caa684f01dfce4ce57ee6b3f6986eb52dd32f02ee2455019ef8ad9d8f042342cf108966694c86f895f9b4af375c96716cd8478c6b667e4bdcc1ba78823c08ae285c121f57963cef71dedc41fd2fd5ca8af2559a83c0fd01e7cdb9fdf9668979e3011dec7a7d2f1e3e85acacbc808a8e6cf0b123c5f6a17c442f1652d224c1118a0629ec098c8b60fdc3a91d62519863171b5450af61146fa6d6293298a5f92fd225bb62fff98b2f7d004b7b2cc87adbfc5633ce5d1f3acd63a3ef65c55b682f87140dce64e4ee313d477df612908f2ab86b38b5b7b7c006d3d559128bb2afe45ff9e5af7ca2dbfd704b64bcc3e775e81e88d092dbb842c101e4e252d4aff72d3a08864d2024398ced335c15b324e5f12006b12cf3e5a6198d8d3bfe5513b614a201cb354e3cedea8049fc8465e74dc79e47c5476b195c3ba196b122253f1531f219fb73d9c6f63e6bcf136d6493d35b8976f66ffbb62b5360ed37752c894a2f98a44a9a8f1e12e46e2dcb7484612a58e6ee139112ae3af2b9d8e1171aaf4114ce4dbc56e075e6a3155f95a1f5334be9cd9d89f2ba5555ec9858a86ad71e9fef6b51199611c0036f3b54cc1a4d5f6c5f2a35b8e8c6d96c07a9f6fc427361f5fab31849e1f23f1b5c785b7344499c4d63c8084d7852c251d7cdc3f44591f2e1083f409dbf1e92f5d4a58d567736d7a996ffa7b46550565f9b0459c6f30fdc4a693346524add323dc79577a3598bc7ca6c6cc0b304c6fd4eb3cb5da21b9febf404b3ea01188f7554f09e4331a28a807a5adc858543637c4006f9f8c2e6e433ee2ac69f3f5443d84c2e2cb8ed8962bcc2653294de47153c9be911aa2f20b127ee5ff5f1b6084fba0300c247a13e0d9b4e680", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x600000000000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1.108752163s ago: executing program 4 (id=666): r0 = open(&(0x7f0000000040)='./bus\x00', 0x258e02, 0x104) fdatasync(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002b000b002cbd70eb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f000097c000/0x2000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = syz_io_uring_setup(0x466c, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r9, 0x0, 0x0, r9}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000180)={0x2, r9, 0x21, {0x6, 0x7}, 0x2}, 0x1) 0s ago: executing program 2 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x12, 0x6, 0x3, 0x4, 0x1822, 0x5, 0x95}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') write$cgroup_pid(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001d00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, 0x0, 0x4800) connect$inet6(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) sendmmsg(r4, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2020c0, 0x0) lremovexattr(0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x400) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB='/\x00\x00\x00'], 0x20) kernel console output (not intermixed with test programs): 0][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.711732][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.764690][ T5831] veth0_macvtap: entered promiscuous mode [ 75.830289][ T5831] veth1_macvtap: entered promiscuous mode [ 75.902516][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.987964][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.117399][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.988186][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004180][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.049215][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.105025][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.230771][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.242798][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.310679][ T5959] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 77.318129][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.339876][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.357999][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.383104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.476922][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.553035][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.560789][ T5962] batadv_slave_1: entered promiscuous mode [ 77.578311][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.611600][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.620771][ T51] Bluetooth: hci2: command tx timeout [ 77.626410][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.635208][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.637277][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.644014][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.692975][ T5848] Bluetooth: hci0: command tx timeout [ 77.698432][ T5844] Bluetooth: hci3: command tx timeout [ 77.698443][ T5836] Bluetooth: hci4: command tx timeout [ 77.703930][ T51] Bluetooth: hci1: command tx timeout [ 77.820345][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.853503][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.245591][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272856][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.960758][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.009630][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.017557][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.253228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.270148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.755615][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.794312][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.005907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 80.695914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 81.005295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.027434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.438300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.539549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.940851][ T980] cfg80211: failed to load regulatory.db [ 83.074032][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 84.232806][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 85.833197][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.045600][ T6020] trusted_key: syz.3.15 sent an empty control message without MSG_MORE. [ 89.155615][ T6050] syz.2.24 (6050) used greatest stack depth: 16880 bytes left [ 90.807843][ T6060] Bluetooth: MGMT ver 1.23 [ 98.877875][ T6099] orangefs_mount: mount request failed with -4 [ 100.118743][ T6112] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 100.126655][ T6112] UDF-fs: Scanning with blocksize 512 failed [ 100.140206][ T6112] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 100.147852][ T6112] UDF-fs: Scanning with blocksize 1024 failed [ 100.154724][ T6112] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 100.162408][ T6112] UDF-fs: Scanning with blocksize 2048 failed [ 100.172014][ T6112] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 100.183483][ T6112] UDF-fs: Scanning with blocksize 4096 failed [ 100.408119][ T6094] syz.4.34: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.548356][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.4.34 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 100.548372][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.548383][ T6094] Call Trace: [ 100.548390][ T6094] [ 100.548395][ T6094] dump_stack_lvl+0x189/0x250 [ 100.548411][ T6094] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 100.548428][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.548438][ T6094] ? __pfx__printk+0x10/0x10 [ 100.548451][ T6094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.548463][ T6094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.548479][ T6094] warn_alloc+0x214/0x310 [ 100.548494][ T6094] ? __pfx_warn_alloc+0x10/0x10 [ 100.548509][ T6094] ? __get_vm_area_node+0x28f/0x300 [ 100.548520][ T6094] ? vb2_vmalloc_alloc+0xef/0x340 [ 100.548537][ T6094] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 100.548563][ T6094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.548576][ T6094] ? __kasan_kmalloc+0x93/0xb0 [ 100.548588][ T6094] vmalloc_user_noprof+0xad/0xf0 [ 100.548599][ T6094] ? vb2_vmalloc_alloc+0xef/0x340 [ 100.548613][ T6094] vb2_vmalloc_alloc+0xef/0x340 [ 100.548626][ T6094] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 100.548640][ T6094] __vb2_queue_alloc+0x9bf/0x15a0 [ 100.548666][ T6094] vb2_core_reqbufs+0xc31/0x1420 [ 100.548688][ T6094] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 100.548699][ T6094] ? vb2_verify_memory_type+0x1fc/0x570 [ 100.548713][ T6094] ? vb2_reqbufs+0x3a9/0x630 [ 100.548729][ T6094] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 100.548744][ T6094] __video_do_ioctl+0xc9b/0xdb0 [ 100.548762][ T6094] ? __pfx___video_do_ioctl+0x10/0x10 [ 100.548783][ T6094] video_usercopy+0x86e/0x14f0 [ 100.548802][ T6094] ? __pfx___video_do_ioctl+0x10/0x10 [ 100.548815][ T6094] ? __pfx_video_usercopy+0x10/0x10 [ 100.548827][ T6094] ? smack_file_ioctl+0x2a9/0x340 [ 100.548845][ T6094] ? __fget_files+0x2a/0x420 [ 100.548855][ T6094] ? __fget_files+0x3a0/0x420 [ 100.548867][ T6094] v4l2_ioctl+0x18a/0x1e0 [ 100.548880][ T6094] ? __pfx_v4l2_ioctl+0x10/0x10 [ 100.548893][ T6094] __se_sys_ioctl+0xf9/0x170 [ 100.548908][ T6094] do_syscall_64+0xfa/0x3b0 [ 100.548919][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.548930][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.548940][ T6094] ? clear_bhb_loop+0x60/0xb0 [ 100.548952][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.548968][ T6094] RIP: 0033:0x7fb3c798e9a9 [ 100.548981][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.548989][ T6094] RSP: 002b:00007fb3c8852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.549001][ T6094] RAX: ffffffffffffffda RBX: 00007fb3c7bb6160 RCX: 00007fb3c798e9a9 [ 100.549009][ T6094] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000006 [ 100.549015][ T6094] RBP: 00007fb3c7a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.549021][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.549027][ T6094] R13: 0000000000000000 R14: 00007fb3c7bb6160 R15: 00007ffc563ad418 [ 100.549042][ T6094] [ 100.549161][ T6094] Mem-Info: [ 100.904669][ T6094] active_anon:255 inactive_anon:5522 isolated_anon:0 [ 100.904669][ T6094] active_file:5179 inactive_file:35838 isolated_file:0 [ 100.904669][ T6094] unevictable:768 dirty:74 writeback:0 [ 100.904669][ T6094] slab_reclaimable:9894 slab_unreclaimable:97166 [ 100.904669][ T6094] mapped:32440 shmem:1361 pagetables:1137 [ 100.904669][ T6094] sec_pagetables:0 bounce:0 [ 100.904669][ T6094] kernel_misc_reclaimable:0 [ 100.904669][ T6094] free:1330969 free_pcp:16946 free_cma:0 [ 101.257744][ T6094] Node 0 active_anon:1020kB inactive_anon:22588kB active_file:20440kB inactive_file:143352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131100kB dirty:296kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12088kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.550676][ T6122] fuse: Bad value for 'fd' [ 101.672960][ T6094] Node 1 active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.704582][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.984426][ T6121] netlink: 'syz.2.39': attribute type 21 has an invalid length. [ 101.992328][ T6121] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39'. [ 102.154342][ T6124] netlink: 'syz.2.39': attribute type 21 has an invalid length. [ 102.162142][ T6124] netlink: 6 bytes leftover after parsing attributes in process `syz.2.39'. [ 102.282190][ T6094] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.828358][ T6094] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 102.861015][ T6127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.42'. [ 102.871420][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 103.047561][ T6094] Node 0 DMA32 free:1407340kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:22092kB active_file:19828kB inactive_file:143540kB unevictable:1536kB writepending:1516kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:39904kB local_pcp:18968kB free_cma:0kB [ 103.080218][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.193593][ T6094] lowmem_reserve[]: 0 0 1 1 1 [ 103.198336][ T6094] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 103.980513][ T6094] lowmem_reserve[]: 0 0 0 0 0 [ 104.059776][ T6094] Node 1 Normal free:3894464kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24480kB local_pcp:13344kB free_cma:0kB [ 104.203818][ T6094] lowmem_reserve[]: 0 0 0 0 0 [ 104.208567][ T6094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.218983][ T6134] Zero length message leads to an empty skb [ 104.298604][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.44'. [ 104.640572][ T6094] Node 0 DMA32: 434*4kB (UME) 142*8kB (UM) 99*16kB (UME) 77*32kB (UME) 36*64kB (UME) 17*128kB (UM) 13*256kB (UME) 9*512kB (ME) 10*1024kB (ME) 8*2048kB (UME) 334*4096kB (M) = 1414024kB [ 104.690051][ T6094] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 104.741357][ T6094] Node 1 Normal: 186*4kB (UME) 49*8kB (UME) 39*16kB (UE) 81*32kB (UME) 31*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3894464kB [ 104.763339][ T5916] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.797048][ T6094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.810205][ T6094] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.860961][ T6094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.911404][ T6094] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.931808][ T5916] usb 3-1: device descriptor read/64, error -71 [ 104.962168][ T6094] 43313 total pagecache pages [ 105.135494][ T6094] 0 pages in swap cache [ 105.174743][ T6094] Free swap = 124996kB [ 105.832818][ T5916] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 105.937341][ T6094] Total swap = 124996kB [ 105.941522][ T6094] 2097051 pages RAM [ 106.146090][ T6094] 0 pages HighMem/MovableOnly [ 106.150830][ T6094] 424695 pages reserved [ 106.186910][ T6094] 0 pages cma reserved [ 106.358592][ T5916] usb 3-1: device descriptor read/64, error -71 [ 107.050539][ T5916] usb usb3-port1: attempt power cycle [ 109.583480][ T6165] uprobe: syz.1.50:6165 failed to unregister, leaking uprobe [ 114.118895][ T6254] bridge0: port 3(batadv1) entered blocking state [ 114.798022][ T6254] bridge0: port 3(batadv1) entered disabled state [ 114.824404][ T980] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.886047][ T6254] batadv1: entered allmulticast mode [ 115.929121][ T6254] batadv1: entered promiscuous mode [ 116.129350][ T6254] netlink: 'syz.4.61': attribute type 3 has an invalid length. [ 116.377225][ T6257] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 116.377251][ T6257] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.186430][ T980] usb 2-1: device descriptor read/all, error -71 [ 118.399629][ T6288] tty tty25: ldisc open failed (-12), clearing slot 24 [ 118.446192][ T6292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 118.452890][ T6292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.462773][ T6292] vhci_hcd vhci_hcd.0: Device attached [ 119.271260][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 119.296336][ T6294] vhci_hcd: connection closed [ 119.297840][ T6243] vhci_hcd: stop threads [ 119.309868][ T6243] vhci_hcd: release socket [ 119.320300][ T6243] vhci_hcd: disconnect device [ 119.334414][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 119.353328][ T5916] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 119.361331][ T5916] usb 33-1: enqueue for inactive port 0 [ 120.118387][ T5916] vhci_hcd: vhci_device speed not set [ 121.670221][ T6318] ALSA: mixer_oss: invalid OSS volume '' [ 124.549275][ T5976] IPVS: starting estimator thread 0... [ 125.103659][ T6341] IPVS: using max 40 ests per chain, 96000 per kthread [ 125.930226][ T6351] trusted_key: encrypted_key: insufficient parameters specified [ 126.392921][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 127.696208][ T6361] tipc: Started in network mode [ 127.701263][ T6361] tipc: Node identity c20ccf51c3ea, cluster identity 4711 [ 127.709147][ T6361] tipc: Enabled bearer , priority 0 [ 127.718317][ T6361] syzkaller0: entered promiscuous mode [ 127.725112][ T6361] syzkaller0: entered allmulticast mode [ 128.823479][ T48] tipc: Node number set to 31903569 [ 128.966133][ T6366] process 'syz.4.86' launched './file2' with NULL argv: empty string added [ 130.035039][ T6365] syz.0.85 (6365): drop_caches: 2 [ 130.488599][ T6370] tipc: Resetting bearer [ 130.810304][ T6359] tipc: Resetting bearer [ 131.586064][ T6359] tipc: Disabling bearer [ 132.839908][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847575][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.621938][ T6402] netlink: 'syz.0.93': attribute type 4 has an invalid length. [ 133.733642][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 136.599665][ T6423] overlayfs: failed to resolve './file0': -2 [ 141.591472][ T6456] Device name cannot be null; rc = [-22] [ 144.421983][ T6472] netlink: 68 bytes leftover after parsing attributes in process `syz.4.107'. [ 145.012635][ T6467] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 145.122332][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 146.048206][ T6478] IPVS: length: 24 != 156842099832 [ 146.313389][ T6488] netlink: 88 bytes leftover after parsing attributes in process `syz.4.114'. [ 148.103400][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 148.139953][ T6511] syz.1.118: attempt to access beyond end of device [ 148.139953][ T6511] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 148.153588][ T6511] gfs2: error -5 reading superblock [ 149.791833][ T6520] fuse: root generation should be zero [ 150.069634][ T6525] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 150.518455][ T6531] dns_resolver: Unsupported content type (24) [ 150.624155][ T6531] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 150.636862][ T6531] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.645737][ T6531] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.654452][ T6531] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.664651][ T6531] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.713938][ T6531] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.722960][ T6531] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.731847][ T6531] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.740773][ T6531] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.256077][ T6540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.127'. [ 151.265218][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.127'. [ 151.641077][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 152.057822][ T6549] netlink: 'syz.4.131': attribute type 9 has an invalid length. [ 152.066661][ T6549] netlink: 'syz.4.131': attribute type 7 has an invalid length. [ 152.075455][ T6549] netlink: 'syz.4.131': attribute type 8 has an invalid length. [ 152.501613][ T6555] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.897905][ T6606] tipc: Can't bind to reserved service type 1 [ 159.931571][ T6606] netlink: 52 bytes leftover after parsing attributes in process `syz.4.144'. [ 161.228003][ T6572] syz.2.136 (6572): drop_caches: 2 [ 163.411305][ T6628] Device name cannot be null; rc = [-22] [ 163.489545][ T6628] kernel profiling enabled (shift: 9) [ 164.343989][ T6634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 164.354340][ T6634] UDF-fs: Scanning with blocksize 512 failed [ 164.368298][ T6634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 164.375967][ T6634] UDF-fs: Scanning with blocksize 1024 failed [ 164.389396][ T6634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 164.397130][ T6634] UDF-fs: Scanning with blocksize 2048 failed [ 164.406535][ T6634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 164.414314][ T6634] UDF-fs: Scanning with blocksize 4096 failed [ 164.827940][ T6623] syz.0.148 (6623): drop_caches: 2 [ 167.871883][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 171.277437][ T6691] warning: `syz.1.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.552864][ T6761] trusted_key: encrypted_key: insufficient parameters specified [ 177.640862][ T6761] vcan0: MTU too low for tipc bearer [ 177.648857][ T6761] tipc: Enabling of bearer rejected, failed to enable media [ 178.055010][ T6762] ======================================================= [ 178.055010][ T6762] WARNING: The mand mount option has been deprecated and [ 178.055010][ T6762] and is ignored by this kernel. Remove the mand [ 178.055010][ T6762] option from the mount to silence this warning. [ 178.055010][ T6762] ======================================================= [ 182.302811][ T6780] comedi comedi0: ni_at_a2150: I/O port conflict (0xf2,28) [ 186.259228][ T6265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.711987][ T6265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.855134][ T6265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.151618][ T6813] netlink: 384 bytes leftover after parsing attributes in process `syz.1.193'. [ 187.160831][ T6813] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 190.764274][ T6828] ceph: No mds server is up or the cluster is laggy [ 191.177355][ T48] libceph: connect (1)[c::]:6789 error -101 [ 191.226597][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 191.491512][ T6265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.917914][ T24] libceph: connect (1)[c::]:6789 error -101 [ 192.011125][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 192.329591][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 192.683829][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.708778][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.719984][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.728628][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.737957][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.180886][ T6837] team0 (unregistering): Port device team_slave_0 removed [ 193.216628][ T6837] team0 (unregistering): Port device team_slave_1 removed [ 194.183676][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.215014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597423][ T6265] bridge_slave_1: left allmulticast mode [ 194.700791][ T6265] bridge_slave_1: left promiscuous mode [ 194.739186][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.812988][ T5837] Bluetooth: hci4: command tx timeout [ 194.857554][ T6265] bridge_slave_0: left allmulticast mode [ 194.924258][ T6865] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 194.930826][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 194.973778][ T6265] bridge_slave_0: left promiscuous mode [ 194.974365][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.333153][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 195.746449][ T6866] vhci_hcd: connection closed [ 195.828967][ T24] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 195.833515][ T6864] loop2: detected capacity change from 0 to 7 [ 195.911840][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 195.941990][ T6263] vhci_hcd: stop threads [ 195.992344][ T6263] vhci_hcd: release socket [ 196.416143][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.431079][ T5847] Bluetooth: hci3: command 0x0405 tx timeout [ 196.446643][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 196.457503][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 196.463795][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 196.480084][ T6263] vhci_hcd: disconnect device [ 196.492807][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.703247][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.893247][ T51] Bluetooth: hci4: command tx timeout [ 197.093543][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.101525][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.183841][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.215418][ T6864] ldm_validate_partition_table(): Disk read failed. [ 197.234665][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.242906][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.298649][ T6864] Buffer I/O error on dev loop2, logical block 0, async page read [ 197.384067][ T6864] Dev loop2: unable to read RDB block 0 [ 197.459527][ T6864] loop2: unable to read partition table [ 197.469634][ T6864] loop2: partition table beyond EOD, truncated [ 197.480036][ T6864] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.269989][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.285597][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.301944][ T6265] bond0 (unregistering): Released all slaves [ 198.560240][ T6869] bridge_slave_0: left allmulticast mode [ 198.590956][ T6869] bridge_slave_0: left promiscuous mode [ 198.610578][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.860858][ T6869] bridge_slave_1: left allmulticast mode [ 198.874448][ T6869] bridge_slave_1: left promiscuous mode [ 198.880761][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.972816][ T5844] Bluetooth: hci4: command tx timeout [ 199.482995][ T6869] bond0: (slave bond_slave_0): Releasing backup interface [ 199.499144][ T6869] bond0: (slave bond_slave_1): Releasing backup interface [ 199.517482][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.547003][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.561700][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.569860][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.591718][ T6881] pimreg: entered allmulticast mode [ 199.733381][ T6265] tipc: Left network mode [ 200.132852][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 200.897510][ T6913] dvmrp8: entered allmulticast mode [ 201.029031][ T30] audit: type=1326 audit(1753376124.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6912 comm="syz.0.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa14fb8e9a9 code=0x0 [ 201.056154][ T5844] Bluetooth: hci4: command 0x0419 tx timeout [ 201.073257][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 201.093228][ T24] vhci_hcd: vhci_device speed not set [ 201.099438][ T55] usb 3-1: config 0 has no interfaces? [ 201.108339][ T55] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 201.125202][ T55] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 201.143423][ T55] usb 3-1: Product: syz [ 201.149700][ T55] usb 3-1: Manufacturer: syz [ 201.189285][ T55] usb 3-1: SerialNumber: syz [ 201.730122][ T55] usb 3-1: config 0 descriptor?? [ 201.768144][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 202.097576][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 202.624255][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 203.143028][ T5836] Bluetooth: hci4: command 0x0419 tx timeout [ 204.684152][ T6904] batadv0: entered promiscuous mode [ 204.704501][ T6904] macvtap1: entered promiscuous mode [ 204.710370][ T6904] macvtap1: entered allmulticast mode [ 204.720553][ T6904] batadv0: entered allmulticast mode [ 204.729984][ T6904] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 204.815179][ T6935] batadv0: left allmulticast mode [ 204.847806][ T6935] batadv0: left promiscuous mode [ 205.037653][ T5976] usb 3-1: USB disconnect, device number 5 [ 205.635877][ T6265] hsr_slave_0: left promiscuous mode [ 205.663923][ T6265] hsr_slave_1: left promiscuous mode [ 205.670276][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.683050][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.692491][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.290908][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.351466][ T6265] veth1_macvtap: left promiscuous mode [ 206.358607][ T6265] veth0_macvtap: left promiscuous mode [ 206.367686][ T6265] veth1_vlan: left promiscuous mode [ 206.373388][ T6265] veth0_vlan: left promiscuous mode [ 207.658317][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 207.739629][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 208.803937][ T6950] bridge0: entered promiscuous mode [ 208.810707][ T6950] batman_adv: batadv0: Adding interface: macsec1 [ 208.826682][ T6950] batman_adv: batadv0: The MTU of interface macsec1 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.861576][ T6950] batman_adv: batadv0: Interface activated: macsec1 [ 208.884182][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 209.139939][ T6983] netlink: 277 bytes leftover after parsing attributes in process `syz.2.225'. [ 209.364185][ T6990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.502041][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'. [ 210.795683][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.883572][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.897112][ T6839] bridge_slave_0: entered allmulticast mode [ 211.071712][ T6839] bridge_slave_0: entered promiscuous mode [ 211.150908][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.162953][ T30] audit: type=1326 audit(1753376134.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 211.173320][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.264432][ T6839] bridge_slave_1: entered allmulticast mode [ 211.635061][ T30] audit: type=1326 audit(1753376134.307:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 211.643413][ T6839] bridge_slave_1: entered promiscuous mode [ 211.671335][ T30] audit: type=1326 audit(1753376134.307:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 212.272855][ T30] audit: type=1326 audit(1753376134.307:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 212.414735][ T30] audit: type=1326 audit(1753376134.827:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 213.132788][ T30] audit: type=1326 audit(1753376134.827:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 213.393045][ T30] audit: type=1326 audit(1753376134.867:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 213.620760][ T30] audit: type=1326 audit(1753376134.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 213.643065][ T30] audit: type=1326 audit(1753376134.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 213.665294][ T30] audit: type=1326 audit(1753376135.437:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7006 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 214.307057][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.605797][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.283362][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 216.849405][ T7038] hsr_slave_1 (unregistering): left promiscuous mode [ 217.203303][ T7066] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 217.287729][ T7067] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 217.769433][ T6839] team0: Port device team_slave_0 added [ 218.024057][ T6839] team0: Port device team_slave_1 added [ 220.424547][ T7095] /dev/nullb0: Can't open blockdev [ 220.781379][ T7093] syz.4.241 (7093): drop_caches: 2 [ 220.842040][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.851566][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.056974][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.210577][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.230070][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.413008][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.755371][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 223.116313][ T7111] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 223.125781][ T7111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 223.135449][ T7111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 223.242804][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 223.242821][ T30] audit: type=1326 audit(1753376146.267:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fb8e9a9 code=0x7fc00000 [ 223.469676][ T30] audit: type=1326 audit(1753376146.267:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa14fb8e9a9 code=0x7fc00000 [ 223.493141][ T30] audit: type=1326 audit(1753376146.267:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fb8e9a9 code=0x7fc00000 [ 223.531364][ T30] audit: type=1326 audit(1753376146.267:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fb8e9a9 code=0x7fc00000 [ 223.654330][ T7119] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.963977][ T30] audit: type=1326 audit(1753376146.267:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fb8e9a9 code=0x7fc00000 [ 224.102692][ T7123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.129258][ T7123] ALSA: mixer_oss: invalid OSS volume '' [ 224.546909][ T6839] hsr_slave_0: entered promiscuous mode [ 224.569971][ T6839] hsr_slave_1: entered promiscuous mode [ 224.631215][ T6839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.670718][ T6839] Cannot create hsr debugfs directory [ 226.996963][ T7140] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 229.459664][ T7173] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 230.296355][ T7166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.256'. [ 231.293206][ T7190] random: crng reseeded on system resumption [ 231.982469][ T6839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.062228][ T6839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.124962][ T6839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.131437][ T6839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.413258][ T7205] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 232.996086][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.540543][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.583677][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.591212][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.676974][ T7213] netlink: 332 bytes leftover after parsing attributes in process `syz.0.264'. [ 233.686631][ T7213] netlink: 'syz.0.264': attribute type 9 has an invalid length. [ 233.694642][ T7213] netlink: 108 bytes leftover after parsing attributes in process `syz.0.264'. [ 233.703872][ T7213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.264'. [ 234.600960][ T6839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.621824][ T6839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.375867][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.383040][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.894010][ T7233] sctp: failed to load transform for md5: -2 [ 238.446931][ T7245] delete_channel: no stack [ 239.331402][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.927161][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 240.944936][ T7275] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 240.962980][ T7275] macvtap1: entered promiscuous mode [ 240.968897][ T7275] macvtap1: entered allmulticast mode [ 241.022891][ T7275] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 249.258053][ T7355] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 250.552836][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 250.713339][ T55] usb 1-1: device descriptor read/64, error -71 [ 250.997243][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.589255][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.628424][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.638999][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.652094][ T7372] capability: warning: `syz.4.290' uses deprecated v2 capabilities in a way that may be insecure [ 251.693236][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.736417][ T55] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.822923][ T7372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.883154][ T55] usb 1-1: device descriptor read/64, error -71 [ 251.908452][ T7371] QAT: Device 7 not found [ 252.074120][ T55] usb usb1-port1: attempt power cycle [ 252.728351][ T55] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.959197][ T55] usb 1-1: device not accepting address 4, error -71 [ 253.781700][ T5844] Bluetooth: hci4: command tx timeout [ 253.981368][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 253.990614][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 255.627843][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799812][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.852879][ T5844] Bluetooth: hci4: command tx timeout [ 257.932929][ T5844] Bluetooth: hci4: command tx timeout [ 258.014671][ T7373] chnl_net:caif_netlink_parms(): no params data found [ 260.035951][ T5844] Bluetooth: hci4: command tx timeout [ 261.177867][ T6022] bridge_slave_1: left allmulticast mode [ 261.194764][ T6022] bridge_slave_1: left promiscuous mode [ 262.230632][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.555565][ T6022] bridge_slave_0: left allmulticast mode [ 262.561379][ T6022] bridge_slave_0: left promiscuous mode [ 262.572295][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.724231][ T6250] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.753999][ T6250] Bluetooth: hci5: Frame reassembly failed (-84) [ 264.722421][ T7481] binder: 7480:7481 ioctl c0306201 0 returned -14 [ 264.733317][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 264.739678][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.000782][ T7488] netlink: 'syz.2.311': attribute type 13 has an invalid length. [ 266.884942][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.955375][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.035700][ T6022] bond0 (unregistering): Released all slaves [ 267.212826][ T7458] bpq0: entered allmulticast mode [ 268.451591][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.459379][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.832181][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.851133][ T7511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 269.857758][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.876831][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 269.891651][ T7511] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 269.898468][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 269.913288][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 269.926501][ T7511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.939902][ T7511] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 269.946544][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.961188][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 269.970971][ T7511] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 269.977590][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.992115][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 270.003941][ T7511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 270.010571][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 270.047089][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 270.064078][ T980] vhci_hcd: vhci_device speed not set [ 270.079666][ T7511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.123966][ T7511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.136099][ T980] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 270.149069][ T7511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.158912][ T7488] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.170502][ T7488] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.177427][ T7511] vhci_hcd vhci_hcd.0: port 0 already used [ 270.189010][ T7488] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.198108][ T7488] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.237035][ T7521] vhci_hcd: connection closed [ 270.237213][ T6243] vhci_hcd: stop threads [ 270.244560][ T7515] vhci_hcd: connection closed [ 270.246729][ T7517] vhci_hcd: connection closed [ 270.249129][ T7519] vhci_hcd: connection closed [ 270.252361][ T7513] vhci_hcd: connection reset by peer [ 270.257036][ T6243] vhci_hcd: release socket [ 270.277270][ T6243] vhci_hcd: disconnect device [ 270.288421][ T6243] vhci_hcd: stop threads [ 270.293473][ T6243] vhci_hcd: release socket [ 270.302518][ T6243] vhci_hcd: disconnect device [ 270.309957][ T6243] vhci_hcd: stop threads [ 270.314552][ T6243] vhci_hcd: release socket [ 270.319989][ T6243] vhci_hcd: disconnect device [ 270.333824][ T6243] vhci_hcd: stop threads [ 270.338127][ T6243] vhci_hcd: release socket [ 270.347190][ T6243] vhci_hcd: disconnect device [ 270.354402][ T6243] vhci_hcd: stop threads [ 270.360827][ T6243] vhci_hcd: release socket [ 270.368791][ T6243] vhci_hcd: disconnect device [ 270.488717][ T6022] hsr_slave_0: left promiscuous mode [ 270.510683][ T6022] hsr_slave_1: left promiscuous mode [ 270.527354][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.550935][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.560609][ T7527] netlink: 'syz.1.318': attribute type 13 has an invalid length. [ 272.867394][ T7542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.722306][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 275.092813][ T5976] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.738157][ T980] vhci_hcd: vhci_device speed not set [ 276.496878][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 276.792898][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 276.801100][ T5976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.826279][ T5976] usb 3-1: config 4 interface 0 has no altsetting 0 [ 276.840921][ T5976] usb 3-1: string descriptor 0 read error: -22 [ 276.852598][ T5976] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 276.863218][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.936414][ T7562] hugetlbfs: syz.4.325 (7562): Using mlock ulimits for SHM_HUGETLB is obsolete [ 277.442520][ T5976] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 277.572011][ T5976] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.586887][ T5976] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 277.626967][ T5976] usb 3-1: media controller created [ 277.890909][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.959364][ T5909] usb usb42-port1: attempt power cycle [ 278.227174][ T5976] zl10353_read_register: readreg error (reg=127, ret==0) [ 278.258984][ T7508] IPv6: sit1: Disabled Multicast RS [ 278.417519][ T5976] usb 3-1: USB disconnect, device number 6 [ 278.635799][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.644509][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.702501][ T5909] usb usb42-port1: unable to enumerate USB device [ 279.495572][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.260085][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.220892][ T7527] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.239897][ T7527] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.258598][ T7527] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.269740][ T7527] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.320897][ T7527] batman_adv: batadv0: Interface deactivated: macsec1 [ 281.332172][ T7527] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 281.387974][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.409520][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.430476][ T7373] bridge_slave_0: entered allmulticast mode [ 281.507225][ T7373] bridge_slave_0: entered promiscuous mode [ 281.642486][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.651759][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.660408][ T7373] bridge_slave_1: entered allmulticast mode [ 281.687203][ T7373] bridge_slave_1: entered promiscuous mode [ 282.532312][ T7596] syz.1.331 (7596): drop_caches: 2 [ 282.577376][ T7596] syz.1.331 (7596): drop_caches: 2 [ 284.371662][ T7610] hub 8-0:1.0: USB hub found [ 284.416151][ T7610] hub 8-0:1.0: 1 port detected [ 285.129141][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.211821][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.604135][ T7619] Bluetooth: MGMT ver 1.23 [ 287.064185][ T7373] team0: Port device team_slave_0 added [ 287.116907][ T7373] team0: Port device team_slave_1 added [ 289.873108][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.896044][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.390811][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.422419][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.536807][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.662276][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.985285][ T7654] capability: warning: `syz.2.345' uses 32-bit capabilities (legacy support in use) [ 291.987736][ T7373] hsr_slave_0: entered promiscuous mode [ 291.994527][ T7373] hsr_slave_1: entered promiscuous mode [ 292.017930][ T7373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.101858][ T7373] Cannot create hsr debugfs directory [ 292.234320][ T7666] syz.2.346: attempt to access beyond end of device [ 292.234320][ T7666] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 292.700883][ T7667] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.124888][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.941025][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.323085][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.389510][ T7676] xt_hashlimit: size too large, truncated to 1048576 [ 294.545168][ T7674] netlink: 'syz.1.348': attribute type 33 has an invalid length. [ 294.553099][ T7674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.348'. [ 295.858942][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.897713][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.705049][ T7701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.354'. [ 296.973044][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.122806][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.693015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.428092][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.436990][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.820792][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 299.634257][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.749437][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.030745][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.658522][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.927350][ T7728] bpq0: left allmulticast mode [ 301.029657][ T7734] fuse: Bad value for 'fd' [ 301.043655][ T7734] Invalid source name [ 301.047735][ T7734] UBIFS error (pid: 7734): cannot open "./file0", error -22 [ 301.066781][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 301.687261][ T7734] team0: Port device team_slave_1 removed [ 302.063080][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.138039][ T7373] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.216163][ T7373] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.305371][ T7373] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.057835][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.176290][ T7373] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.415258][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.332826][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.340970][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.372929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.576326][ T7778] netlink: 76 bytes leftover after parsing attributes in process `syz.4.367'. [ 306.092945][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.507578][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.725260][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.780822][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.142930][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.242931][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.561031][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.569899][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.583185][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.615934][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.631749][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.715145][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.733678][ T5836] Bluetooth: hci5: command tx timeout [ 312.998741][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.056272][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.265085][ T7846] Bluetooth: MGMT ver 1.23 [ 314.580697][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.849756][ T5836] Bluetooth: hci5: command tx timeout [ 315.537435][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.798116][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.674884][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.813289][ T7871] No buffer was provided with the request [ 316.949239][ T5836] Bluetooth: hci5: command tx timeout [ 317.062531][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.069081][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221736][ T7872] netlink: 332 bytes leftover after parsing attributes in process `syz.1.383'. [ 317.222368][ T7872] netlink: 'syz.1.383': attribute type 9 has an invalid length. [ 317.222501][ T7872] netlink: 108 bytes leftover after parsing attributes in process `syz.1.383'. [ 317.222590][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 317.303736][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 317.303881][ T7873] netlink: 'syz.1.383': attribute type 5 has an invalid length. [ 317.305054][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'. [ 317.798599][ T7873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 317.807691][ T7873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 317.818034][ T7873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 318.311506][ T7882] kAFS: unable to lookup cell '/,' [ 318.473858][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.633558][ T7873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 318.658684][ T7873] geneve2: entered promiscuous mode [ 319.581960][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.594625][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.603100][ T7873] geneve2: entered allmulticast mode [ 319.610251][ T5836] Bluetooth: hci5: command tx timeout [ 320.447478][ T7890] : entered promiscuous mode [ 320.606809][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 320.669359][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.165555][ T7902] netlink: 'syz.1.388': attribute type 3 has an invalid length. [ 321.835439][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.844109][ T6022] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 322.676162][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.703422][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.833161][ T7914] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 323.095414][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.114650][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.344920][ T5950] net_ratelimit: 3 callbacks suppressed [ 324.344939][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.527836][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.394'. [ 325.619983][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.507161][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.597112][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 326.692019][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.087169][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.412861][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.434633][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.460792][ T7817] bridge_slave_0: entered allmulticast mode [ 328.529557][ T7817] bridge_slave_0: entered promiscuous mode [ 328.593982][ T6250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.664433][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.671678][ T7969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.817382][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.161360][ T7960] wg1 speed is unknown, defaulting to 1000 [ 329.164978][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.332068][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.421564][ T7817] bridge_slave_1: entered allmulticast mode [ 329.429483][ T7817] bridge_slave_1: entered promiscuous mode [ 329.454632][ T7967] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 329.537212][ T7960] wg1 speed is unknown, defaulting to 1000 [ 329.562903][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.575719][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.625542][ T6261] bridge_slave_1: left allmulticast mode [ 329.631217][ T6261] bridge_slave_1: left promiscuous mode [ 329.692973][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.750197][ T6261] bridge_slave_0: left allmulticast mode [ 329.792784][ T6261] bridge_slave_0: left promiscuous mode [ 329.801074][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.938932][ T7977] mmap: syz.4.403 (7977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 330.467458][ T7982] netlink: 'syz.2.404': attribute type 3 has an invalid length. [ 331.542798][ T5844] Bluetooth: hci0: command tx timeout [ 331.749496][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.814177][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.008476][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.547866][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.564877][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.577724][ T6261] bond0 (unregistering): Released all slaves [ 333.625272][ T7980] bridge0: port 3(batadv1) entered blocking state [ 333.632856][ T7960] wg1 speed is unknown, defaulting to 1000 [ 333.664376][ T7980] bridge0: port 3(batadv1) entered disabled state [ 333.689446][ T7980] batadv1: entered allmulticast mode [ 333.691301][ T7960] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 333.724716][ T7980] batadv1: entered promiscuous mode [ 333.851491][ T7960] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 334.018582][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.660961][ T3015] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 334.670569][ T3015] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 334.726324][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.576253][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.386994][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.413855][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.453063][ T7960] wg1 speed is unknown, defaulting to 1000 [ 336.461562][ T7960] wg1 speed is unknown, defaulting to 1000 [ 337.533165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.692845][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 338.062945][ T7960] wg1 speed is unknown, defaulting to 1000 [ 338.070183][ T7960] wg1 speed is unknown, defaulting to 1000 [ 338.077853][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.111440][ T7817] team0: Port device team_slave_0 added [ 338.174721][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.259285][ T7817] team0: Port device team_slave_1 added [ 338.453975][ T7960] wg1 speed is unknown, defaulting to 1000 [ 339.133081][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.229203][ T7960] wg1 speed is unknown, defaulting to 1000 [ 339.245861][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.277004][ T8034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.296679][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.482649][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.492374][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.543260][ T6261] hsr_slave_0: left promiscuous mode [ 340.107910][ T6261] hsr_slave_1: left promiscuous mode [ 340.244739][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.260497][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.306781][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.026889][ T8031] netlink: 56 bytes leftover after parsing attributes in process `syz.2.415'. [ 341.298262][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.615158][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 341.686947][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 341.961371][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.968556][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.994640][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.015340][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.333435][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.525332][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.000255][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 344.117596][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.119640][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 344.138353][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'. [ 344.213111][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.221597][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.243170][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.612666][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.621287][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.264076][ T5881] IPVS: starting estimator thread 0... [ 345.307565][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.353061][ T8073] IPVS: using max 50 ests per chain, 120000 per kthread [ 345.472617][ T7817] hsr_slave_0: entered promiscuous mode [ 345.534991][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.552294][ T7817] hsr_slave_1: entered promiscuous mode [ 345.612194][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.651472][ T7817] Cannot create hsr debugfs directory [ 346.257952][ T8087] rdma_op ffff88807f6481f0 conn xmit_rdma 0000000000000000 [ 346.764707][ T8072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.802086][ T8072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 347.389314][ T8072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.526296][ T8072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 347.937476][ T6250] net_ratelimit: 3 callbacks suppressed [ 347.937494][ T6250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.974792][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.987951][ T8072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.005329][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.014974][ T8072] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 348.024583][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.094061][ T8072] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 348.100004][ T8072] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 348.140889][ T8072] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 349.048313][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.056953][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 349.064666][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.072843][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.082204][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.464991][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 350.265484][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 350.272335][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 350.924284][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.193092][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 352.195048][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.283514][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 352.332918][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 352.339052][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 354.412844][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 354.743098][ T6005] net_ratelimit: 1 callbacks suppressed [ 354.743112][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.759250][ T6250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.768209][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.777037][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.785177][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.793300][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.821064][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.914650][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.703088][ T8161] trusted_key: encrypted_key: insufficient parameters specified [ 356.979689][ T8154] syz.1.436 (8154): drop_caches: 2 [ 357.195064][ T8154] syz.1.436 (8154): drop_caches: 2 [ 357.516307][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.992889][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.665774][ T30] audit: type=1326 audit(1753376281.347:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8171 comm="syz.4.439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3c798e9a9 code=0x0 [ 359.543673][ T8189] sp0: Synchronizing with TNC [ 360.395316][ T55] net_ratelimit: 2 callbacks suppressed [ 360.395332][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.363040][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.391658][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.432663][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.821998][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.831290][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.415752][ T8194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.714724][ T30] audit: type=1326 audit(1753376285.877:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 362.955717][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.066702][ T8204] kAFS: unable to lookup cell '.,' [ 364.329171][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.343495][ T30] audit: type=1326 audit(1753376285.877:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 364.365091][ T30] audit: type=1326 audit(1753376285.907:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 364.580070][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.956156][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.195316][ T8218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.499718][ T8219] block device autoloading is deprecated and will be removed. [ 365.601686][ T8220] net_ratelimit: 3 callbacks suppressed [ 365.601703][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.618091][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.627456][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.640783][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.862211][ T30] audit: type=1326 audit(1753376285.907:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 366.076516][ T30] audit: type=1326 audit(1753376285.907:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 366.804361][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.883962][ T30] audit: type=1326 audit(1753376285.907:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 366.926080][ T7817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.959251][ T7817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.974170][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.987206][ T30] audit: type=1326 audit(1753376285.907:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 367.008493][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.026303][ T7817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.027197][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.045149][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.239552][ T7817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.239749][ T30] audit: type=1326 audit(1753376285.907:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 367.847696][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.857814][ T30] audit: type=1326 audit(1753376285.907:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 367.879300][ T30] audit: type=1326 audit(1753376285.907:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 367.975857][ T30] audit: type=1326 audit(1753376285.907:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 367.988823][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.525083][ T8235] netlink: 52 bytes leftover after parsing attributes in process `syz.4.449'. [ 368.911651][ T7817] kthread_run failed with err -4 [ 371.348094][ T8266] can0: slcan on ttyS3. [ 371.794386][ T5976] net_ratelimit: 5 callbacks suppressed [ 371.794405][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.804103][ T8265] No buffer was provided with the request [ 371.920145][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.223564][ T8259] can0 (unregistered): slcan off ttyS3. [ 373.200140][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.396875][ T8279] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 374.317190][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.816061][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.578429][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.591403][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.598917][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.609764][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.618558][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.627548][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.684210][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 375.684227][ T30] audit: type=1326 audit(1753376298.807:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.713272][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.747140][ T8279] team0: Port device bond0 added [ 375.786415][ T30] audit: type=1326 audit(1753376298.807:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.822404][ T30] audit: type=1326 audit(1753376298.807:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.844489][ T30] audit: type=1326 audit(1753376298.807:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.872957][ T30] audit: type=1326 audit(1753376298.807:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.894458][ T30] audit: type=1326 audit(1753376298.807:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.915952][ T30] audit: type=1326 audit(1753376298.807:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 375.961133][ T30] audit: type=1326 audit(1753376298.807:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 376.056651][ T30] audit: type=1326 audit(1753376298.807:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 376.257336][ T30] audit: type=1326 audit(1753376298.807:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2e1a98e9a9 code=0x7ffc0000 [ 376.890914][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.921410][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.071157][ T8295] wg1 speed is unknown, defaulting to 1000 [ 377.317373][ T8317] netlink: 'syz.1.464': attribute type 3 has an invalid length. [ 377.352826][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 377.772867][ T5844] Bluetooth: hci4: command tx timeout [ 377.945830][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.085746][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.399950][ T8314] bridge0: port 3(batadv1) entered blocking state [ 378.499406][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.505877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.122441][ T8314] bridge0: port 3(batadv1) entered disabled state [ 379.148542][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.157680][ T8314] batadv1: entered allmulticast mode [ 379.188218][ T8314] batadv1: entered promiscuous mode [ 379.490470][ T48] usb 3-1: device descriptor read/all, error -71 [ 379.864013][ T5844] Bluetooth: hci4: command tx timeout [ 379.976483][ T3015] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 379.985941][ T3015] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 380.864951][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.987104][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.272851][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.313736][ T5844] Bluetooth: hci4: command tx timeout [ 382.565707][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 382.565780][ T30] audit: type=1400 audit(1753376305.727:88): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8351 comm="syz.1.471" daddr=fe80:: [ 383.062863][ T8359] delete_channel: no stack [ 383.293222][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.895515][ T8357] delete_channel: no stack [ 383.969344][ T8295] chnl_net:caif_netlink_parms(): no params data found [ 384.013001][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.333319][ T5844] Bluetooth: hci4: command tx timeout [ 384.340305][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.510526][ T6248] bridge_slave_1: left allmulticast mode [ 384.544186][ T6248] bridge_slave_1: left promiscuous mode [ 384.645290][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.660891][ T6248] bridge_slave_0: left allmulticast mode [ 384.668708][ T6248] bridge_slave_0: left promiscuous mode [ 384.787522][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.797220][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.807863][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.502543][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.512397][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.533043][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.540895][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.003008][ T30] audit: type=1400 audit(1753376309.137:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8374 comm="syz.2.474" daddr=fe88::103 dest=20003 [ 387.621107][ T980] net_ratelimit: 3 callbacks suppressed [ 387.621126][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.749495][ T6248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.859819][ T6248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.952401][ T6248] bond0 (unregistering): Released all slaves [ 388.116637][ T8428] bridge0: port 4(batadv2) entered blocking state [ 388.150380][ T8428] bridge0: port 4(batadv2) entered disabled state [ 388.157871][ T8428] batadv2: entered allmulticast mode [ 388.191195][ T8428] batadv2: entered promiscuous mode [ 388.234806][ T8428] netlink: 'syz.2.477': attribute type 3 has an invalid length. [ 389.542846][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.635089][ T8435] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 389.706525][ T6267] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 389.715835][ T6267] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 390.136954][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.529216][ T30] audit: type=1400 audit(1753376313.687:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8440 comm="syz.4.480" dest=20000 [ 390.661683][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.802832][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.831196][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.890521][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.969559][ T8295] bridge_slave_0: entered allmulticast mode [ 392.004681][ T8295] bridge_slave_0: entered promiscuous mode [ 393.332975][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.333361][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.957261][ T6248] hsr_slave_0: left promiscuous mode [ 394.000894][ T6248] hsr_slave_1: left promiscuous mode [ 394.029890][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.106615][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.119402][ T30] audit: type=1400 audit(1753376317.277:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8467 comm="syz.1.486" daddr=fe80::aa dest=16385 [ 394.343924][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 394.430435][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.125587][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 395.661290][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.784942][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.074619][ T30] audit: type=1400 audit(1753376319.207:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8485 comm="syz.4.489" daddr=::ffff:0.0.0.0 dest=20002 [ 396.516629][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.738988][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.784033][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.823826][ T6248] team0 (unregistering): Port device team_slave_1 removed [ 397.978621][ T30] audit: type=1400 audit(1753376321.047:93): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8500 comm="syz.1.492" daddr=fe80::aa dest=16385 [ 398.214325][ T6248] team0 (unregistering): Port device team_slave_0 removed [ 398.295553][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 398.669750][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 398.909637][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.298428][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.306061][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.313989][ T8295] bridge_slave_1: entered allmulticast mode [ 399.320957][ T8295] bridge_slave_1: entered promiscuous mode [ 399.544515][ T8518] ubi31: attaching mtd0 [ 399.564625][ T8518] ubi31: scanning is finished [ 399.569438][ T8518] ubi31: empty MTD device detected [ 399.935895][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.971753][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.146656][ T8518] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 400.154514][ T8518] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 400.161829][ T8518] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 400.168976][ T8518] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 400.176586][ T8518] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 400.183574][ T8518] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 400.191672][ T8518] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 230544636 [ 400.201740][ T8518] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 400.214212][ T8523] ubi31: background thread "ubi_bgt31d" started, PID 8523 [ 400.529695][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.552977][ T8526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.573630][ T8526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.576898][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.582267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.608071][ T8526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.619447][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.632915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.853298][ T8526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.863414][ T8532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.483216][ T30] audit: type=1400 audit(1753376324.627:94): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8533 comm="syz.0.499" daddr=fe80::aa dest=16385 [ 401.526917][ T30] audit: type=1400 audit(1753376324.667:95): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8536 comm="syz.4.497" daddr=2001:: dest=20000 [ 401.540517][ T8295] team0: Port device team_slave_0 added [ 402.007547][ T8295] team0: Port device team_slave_1 added [ 402.200720][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 403.608230][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 405.372987][ T5976] net_ratelimit: 7 callbacks suppressed [ 405.373004][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.342879][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.352815][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.368115][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.381315][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.415166][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.450101][ T8295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.479880][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.500910][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.139436][ T8295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.461800][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.373014][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.532326][ T8593] loop2: detected capacity change from 0 to 7 [ 409.538273][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.664660][ T8593] Dev loop2: unable to read RDB block 7 [ 409.843635][ T8593] loop2: unable to read partition table [ 409.990689][ T8593] loop2: partition table beyond EOD, truncated [ 410.027078][ T8593] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.174136][ T8599] netlink: 320 bytes leftover after parsing attributes in process `syz.2.507'. [ 410.183506][ T8599] openvswitch: netlink: Message has 16 unknown bytes. [ 410.507805][ T8601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.517494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.852294][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.910777][ T8295] hsr_slave_0: entered promiscuous mode [ 410.971486][ T8295] hsr_slave_1: entered promiscuous mode [ 411.006413][ T8295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.053383][ T8295] Cannot create hsr debugfs directory [ 411.621197][ T8609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 412.601654][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.609854][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.614120][ T30] audit: type=1400 audit(1753376336.777:96): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8606 comm="syz.0.511" daddr=fe80::aa dest=16385 [ 413.637863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.931219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.006553][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.094214][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 415.932953][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.944260][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.973879][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.131066][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.144456][ T5844] Bluetooth: hci1: unexpected event for opcode 0x6873 [ 419.050895][ T8658] netlink: 'syz.4.519': attribute type 6 has an invalid length. [ 419.136503][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.147672][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.174563][ T8673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.228962][ T8673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.239449][ T8673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.252311][ T8673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.502887][ T980] net_ratelimit: 95 callbacks suppressed [ 421.502904][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.614787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.633187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.641624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.650099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.658316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.666508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.675075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.683886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.692600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.890773][ T30] audit: type=1400 audit(1753376345.047:97): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8679 comm="syz.0.524" daddr=fe80::aa dest=16385 [ 423.262771][ T8295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 424.114895][ T8295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 424.662789][ T8295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.657487][ T8295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 425.887383][ T30] audit: type=1400 audit(1753376348.877:98): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=8707 comm="syz.4.530" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 426.334142][ T8726] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 426.620867][ T8728] net_ratelimit: 58 callbacks suppressed [ 426.620897][ T8728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.640942][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.282652][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.357959][ T8732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.878025][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.979124][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.011191][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.018421][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.043454][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.050609][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.808053][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.886059][ T8295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.972961][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.541014][ T8295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.025997][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.793091][ T30] audit: type=1400 audit(1753376353.897:99): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8763 comm="syz.0.538" daddr=ff02::1 dest=20007 [ 431.199667][ T30] audit: type=1400 audit(1753376353.897:100): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8763 comm="syz.0.538" daddr=::ffff:224.0.0.2 dest=20001 [ 431.294692][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.221328][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.338857][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.768816][ T8792] siw: device registration error -23 [ 433.379247][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.407641][ T8794] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 433.414206][ T8794] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 433.422074][ T8794] vhci_hcd vhci_hcd.0: Device attached [ 433.516581][ T8796] vhci_hcd: connection closed [ 433.536801][ T6147] vhci_hcd: stop threads [ 433.567055][ T6147] vhci_hcd: release socket [ 433.571533][ T6147] vhci_hcd: disconnect device [ 433.630059][ T8804] xt_l2tp: v2 doesn't support IP mode [ 433.904090][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.345247][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.360026][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.767771][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.776557][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.902354][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.967962][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.471789][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.712154][ T8828] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 436.013400][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.700414][ T30] audit: type=1400 audit(1753376359.857:101): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8834 comm="syz.2.551" daddr=fe80::aa dest=16385 [ 436.814649][ T5848] Bluetooth: hci4: command tx timeout [ 437.200269][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.228144][ T8807] wg1 speed is unknown, defaulting to 1000 [ 437.418965][ T8844] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 437.762189][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 437.799590][ T8845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.212828][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 438.223058][ T30] audit: type=1400 audit(1753376360.937:102): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8839 comm="syz.4.553" daddr=::ffff:172.20.20.20 dest=20001 [ 438.279718][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.291554][ T30] audit: type=1326 audit(1753376360.987:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c798e9a9 code=0x0 [ 438.496665][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.904551][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 439.938290][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.945485][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.958248][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.288285][ T8865] syz.2.555 (8865): drop_caches: 2 [ 440.301831][ T8865] syz.2.555 (8865): drop_caches: 2 [ 441.073421][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 441.083059][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.392191][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.401648][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.993603][ T8886] siw: device registration error -23 [ 443.095540][ T8887] netlink: 240 bytes leftover after parsing attributes in process `syz.4.558'. [ 443.202834][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 443.282831][ T8882] tipc: Started in network mode [ 443.287753][ T8882] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 443.295335][ T8882] tipc: Enabled bearer , priority 10 [ 443.463399][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.541668][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 444.126621][ T6248] bridge_slave_1: left allmulticast mode [ 444.151398][ T6248] bridge_slave_1: left promiscuous mode [ 444.169104][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.228265][ T6248] bridge_slave_0: left allmulticast mode [ 444.249268][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.561'. [ 444.733263][ T5976] tipc: Node number set to 10005162 [ 444.747684][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.758606][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.776237][ T6248] bridge_slave_0: left promiscuous mode [ 444.776460][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.155002][ T30] audit: type=1326 audit(1753376368.307:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0714d8e9a9 code=0x0 [ 445.175965][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.213138][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 445.521017][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.600763][ T30] audit: type=1400 audit(1753376368.757:105): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8911 comm="syz.4.564" daddr=fe80::aa dest=16385 [ 445.812863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.078881][ T8926] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 447.105842][ T8926] CIFS mount error: No usable UNC path provided in device string! [ 447.105842][ T8926] [ 447.119219][ T8926] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 447.302272][ T8929] netlink: 'syz.1.566': attribute type 8 has an invalid length. [ 447.323502][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.677517][ T30] audit: type=1400 audit(1753376370.407:106): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8919 comm="syz.1.566" daddr=fe80:: dest=20004 [ 447.813702][ T30] audit: type=1400 audit(1753376370.977:107): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8931 comm="syz.0.567" daddr=fe80::aa dest=16385 [ 448.337897][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.356669][ T6248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.370452][ T6248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.696691][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.358490][ T6248] bond0 (unregistering): Released all slaves [ 449.375016][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.173527][ T8950] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 450.722869][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.813295][ T30] audit: type=1400 audit(1753376373.967:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8954 comm="syz.4.571" dest=20000 [ 451.455152][ T6248] hsr_slave_0: left promiscuous mode [ 451.487580][ T6248] hsr_slave_1: left promiscuous mode [ 451.580049][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.786403][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.084577][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.195370][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.349933][ T30] audit: type=1400 audit(1753376375.437:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8979 comm="syz.0.575" daddr=fe80::aa dest=16385 [ 453.185935][ T30] audit: type=1326 audit(1753376376.347:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8989 comm="syz.0.577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa14fb8e9a9 code=0x0 [ 453.249009][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.034251][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.291505][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.994632][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.403360][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.936118][ T6248] team0 (unregistering): Port device team_slave_1 removed [ 456.086984][ T6248] team0 (unregistering): Port device team_slave_0 removed [ 456.476507][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.899301][ T9027] program syz.4.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.074502][ T9028] program syz.4.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.186103][ T9028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.597603][ T9008] veth1_macvtap: left promiscuous mode [ 457.695955][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.193297][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.475938][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.517398][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.226055][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.291556][ T9050] netlink: 'syz.2.585': attribute type 3 has an invalid length. [ 459.299909][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 459.506805][ T8807] bridge_slave_0: entered allmulticast mode [ 459.549550][ T8807] bridge_slave_0: entered promiscuous mode [ 459.716881][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.724544][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.731900][ T8807] bridge_slave_1: entered allmulticast mode [ 459.740138][ T8807] bridge_slave_1: entered promiscuous mode [ 459.800111][ T9046] input: syz1 as /devices/virtual/input/input6 [ 459.811403][ T9031] netlink: 'syz.1.582': attribute type 5 has an invalid length. [ 459.968109][ T9050] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 459.977347][ T9050] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 460.103385][ T9058] input: syz1 as /devices/virtual/input/input7 [ 460.182423][ T9059] batadv_slave_1: entered promiscuous mode [ 460.192421][ T9059] batadv_slave_1: left promiscuous mode [ 460.387061][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.514441][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.558735][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.406852][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.569168][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.875918][ T8807] team0: Port device team_slave_0 added [ 464.215382][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.761370][ T9090] netlink: 'syz.4.593': attribute type 6 has an invalid length. [ 465.306294][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.816601][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.837176][ T8807] team0: Port device team_slave_1 added [ 466.132120][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.148499][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.323474][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.386235][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.395621][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.403922][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.504304][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.547049][ T9099] wg1 speed is unknown, defaulting to 1000 [ 467.700350][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.712022][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.746022][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.684605][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.989169][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.999850][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.716408][ T9120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 471.050541][ T8807] hsr_slave_0: entered promiscuous mode [ 471.058337][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.104453][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.133727][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.143188][ T8807] hsr_slave_1: entered promiscuous mode [ 472.149462][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.157125][ T8807] Cannot create hsr debugfs directory [ 472.225435][ T30] audit: type=1400 audit(1753376395.367:111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 472.225467][ T30] audit: type=1400 audit(1753376395.367:112): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 472.225488][ T30] audit: type=1400 audit(1753376395.367:113): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 472.225508][ T30] audit: type=1400 audit(1753376395.367:114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 472.539274][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.592750][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 472.593198][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 473.198943][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.791370][ T9131] fuseblk: Bad value for 'fd' [ 473.857675][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.390648][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.727247][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.047204][ T9158] bond0: (slave rose0): Enslaving as an active interface with an up link [ 475.213284][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.242181][ T6257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.253329][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.262051][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.874643][ T9173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 476.500190][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.866965][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.074144][ T30] audit: type=1400 audit(1753376401.237:115): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 478.152599][ T30] audit: type=1400 audit(1753376401.237:116): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 478.220680][ T30] audit: type=1400 audit(1753376401.247:117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 478.245097][ T30] audit: type=1400 audit(1753376401.247:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 478.333007][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.996114][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.808755][ T8807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.917882][ T8807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.608500][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.651650][ T9208] bridge0: entered allmulticast mode [ 481.237297][ T9212] batadv1: left allmulticast mode [ 481.242800][ T9212] batadv1: left promiscuous mode [ 481.251200][ T9212] bridge0: port 3(batadv1) entered disabled state [ 481.663154][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.718897][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.789228][ T9212] bridge_slave_1: left allmulticast mode [ 481.789285][ T9212] bridge_slave_1: left promiscuous mode [ 481.790644][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.806887][ T9212] bridge_slave_0: left allmulticast mode [ 481.806913][ T9212] bridge_slave_0: left promiscuous mode [ 481.807132][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.939870][ T9212] batman_adv: batadv0: Removing interface: macsec1 [ 482.452911][ T8807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.465165][ T9201] bridge_slave_0: entered promiscuous mode [ 482.482040][ T8807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.503088][ T1122] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 482.667223][ T1122] usb 3-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 482.704414][ T1122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.837202][ T9240] sp0: Synchronizing with TNC [ 482.958860][ T1122] usb 3-1: config 0 descriptor?? [ 483.108400][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.118933][ T1122] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 483.527139][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.582508][ T1122] gspca_sn9c20x: Write register 1000 failed -71 [ 483.694581][ T9256] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 483.783790][ T1122] gspca_sn9c20x: Device initialization failed [ 483.801136][ T1122] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 483.818817][ T1122] usb 3-1: USB disconnect, device number 9 [ 483.896744][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.919860][ T9256] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 485.026764][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.063552][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.079216][ T30] audit: type=1400 audit(1753376413.237:119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 485.095494][ T30] audit: type=1400 audit(1753376413.237:120): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 485.157828][ T30] audit: type=1400 audit(1753376413.237:121): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 485.190092][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.388008][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.425244][ T30] audit: type=1400 audit(1753376413.237:122): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 485.468358][ T9267] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 486.036504][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.043735][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.052549][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 486.119395][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.300736][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.307984][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.426985][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.615149][ T30] audit: type=1400 audit(1753376415.777:123): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 487.799476][ T30] audit: type=1400 audit(1753376415.777:124): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 487.862341][ T30] audit: type=1400 audit(1753376415.777:125): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 487.943978][ T30] audit: type=1400 audit(1753376415.777:126): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5502 comm="dhcpcd" daddr=ff02::2 [ 488.093236][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.874085][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.598293][ T9337] trusted_key: encrypted_key: insufficient parameters specified [ 489.703050][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 490.222870][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.374303][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.401507][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.472775][ T30] audit: type=1400 audit(1753376419.627:127): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9346 comm="syz.0.631" daddr=fe80::aa dest=16385 [ 492.415515][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.685049][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.708832][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.887759][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.893927][ T9366] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 494.296393][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.313827][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.363007][ T9359] veth0: entered promiscuous mode [ 494.383166][ T9364] veth0: left promiscuous mode [ 494.523592][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.233640][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.322371][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.369365][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.379916][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.395354][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.033771][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.041605][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.905278][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.914506][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.662171][ T9386] wg1 speed is unknown, defaulting to 1000 [ 499.221618][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.260079][ T5848] Bluetooth: hci4: command tx timeout [ 500.316437][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.792397][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.800738][ T5848] Bluetooth: hci4: command tx timeout [ 501.819719][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 501.851026][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.867829][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893447][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.363520][ T9426] : entered promiscuous mode [ 502.442925][ T9429] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 502.911217][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.190871][ T9448] ubi: mtd0 is already attached to ubi31 [ 504.018810][ T5848] Bluetooth: hci4: command tx timeout [ 504.542729][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.550875][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.813374][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.838585][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.089734][ T9466] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 506.105090][ T5848] Bluetooth: hci4: command tx timeout [ 506.678396][ T9475] random: crng reseeded on system resumption [ 506.769792][ T9466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 506.942767][ T1122] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 506.944342][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.465209][ T1122] usb 2-1: not running at top speed; connect to a high speed hub [ 507.549018][ T1122] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 507.574680][ T1122] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 507.646634][ T9386] chnl_net:caif_netlink_parms(): no params data found [ 507.655962][ T1122] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.857346][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.861898][ T13] bridge_slave_1: left allmulticast mode [ 507.908221][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.917661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.165086][ T1122] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 508.167191][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.222104][ T1122] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.285817][ T13] bridge_slave_1: left promiscuous mode [ 508.306746][ T1122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.321985][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.338233][ T1122] usb 2-1: Product: syz [ 508.343317][ T1122] usb 2-1: Manufacturer: syz [ 508.347934][ T1122] usb 2-1: SerialNumber: syz [ 508.364167][ T13] bridge_slave_0: left allmulticast mode [ 508.370220][ T13] bridge_slave_0: left promiscuous mode [ 508.388114][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.865554][ T1122] usb 2-1: 0:2 : does not exist [ 509.190216][ T1122] usb 2-1: USB disconnect, device number 4 [ 509.220243][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.303169][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.897422][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.378456][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.450091][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.722619][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.765643][ T13] bond0 (unregistering): Released all slaves [ 512.482948][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.390934][ T30] audit: type=1326 audit(512.942:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9533 comm="syz.2.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a98e9a9 code=0x0 [ 513.621913][ T13] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc005: 0000 [#1] SMP KASAN PTI [ 513.633850][ T13] KASAN: probably user-memory-access in range [0x00000000fffe0028-0x00000000fffe002f] [ 513.643423][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 513.655395][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.665451][ T13] Workqueue: netns cleanup_net [ 513.670232][ T13] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 513.676134][ T13] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 6b 49 09 cc 66 66 66 66 66 66 2e [ 513.695737][ T13] RSP: 0000:ffffc90000127670 EFLAGS: 00010206 [ 513.701798][ T13] RAX: dffffc0000000000 RBX: ffffffff8b69127e RCX: 61c945b1c8de2200 [ 513.709759][ T13] RDX: 0000000000000000 RSI: ffffffff8b69127e RDI: 000000001fffc005 [ 513.717723][ T13] RBP: ffffffff8b5ce7da R08: 0000000000000001 R09: 0000000000000000 [ 513.726121][ T13] R10: dffffc0000000000 R11: ffffed100ab463a5 R12: 0000000000000000 [ 513.734086][ T13] R13: 00000000fffe0028 R14: 00000000fffe0028 R15: 0000000000000001 [ 513.742051][ T13] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 513.750969][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.757544][ T13] CR2: 00005555581455c8 CR3: 00000000336e2000 CR4: 00000000003526f0 [ 513.765604][ T13] Call Trace: [ 513.768871][ T13] [ 513.771795][ T13] __kasan_check_byte+0x12/0x40 [ 513.776650][ T13] lock_acquire+0x8d/0x360 [ 513.781054][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 513.786291][ T13] ? kernfs_put+0x460/0x480 [ 513.790792][ T13] _raw_spin_lock+0x2e/0x40 [ 513.795291][ T13] ? __kobject_del+0x12a/0x300 [ 513.800050][ T13] __kobject_del+0x12a/0x300 [ 513.804635][ T13] kobject_del+0x45/0x60 [ 513.808887][ T13] ib_free_port_attrs+0xcd/0x3b0 [ 513.813833][ T13] rdma_dev_exit_net+0x1d8/0x340 [ 513.818765][ T13] ? __pfx___might_resched+0x10/0x10 [ 513.824039][ T13] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 513.829486][ T13] ? net_generic+0x1e/0x240 [ 513.833978][ T13] ? mutex_is_locked+0x17/0x50 [ 513.838741][ T13] ? rtnl_is_locked+0x15/0x20 [ 513.843414][ T13] ops_undo_list+0x49a/0x990 [ 513.848006][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 513.853123][ T13] cleanup_net+0x4c5/0x800 [ 513.857536][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 513.862467][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.867656][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 513.873378][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 513.879099][ T13] process_scheduled_works+0xade/0x17b0 [ 513.884646][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.890623][ T13] worker_thread+0x8a0/0xda0 [ 513.895214][ T13] kthread+0x711/0x8a0 [ 513.899280][ T13] ? __pfx_worker_thread+0x10/0x10 [ 513.904381][ T13] ? __pfx_kthread+0x10/0x10 [ 513.908965][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.914149][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.919332][ T13] ? __pfx_kthread+0x10/0x10 [ 513.923921][ T13] ret_from_fork+0x3fc/0x770 [ 513.928501][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 513.933600][ T13] ? __switch_to_asm+0x39/0x70 [ 513.938354][ T13] ? __switch_to_asm+0x33/0x70 [ 513.943123][ T13] ? __pfx_kthread+0x10/0x10 [ 513.947965][ T13] ret_from_fork_asm+0x1a/0x30 [ 513.952725][ T13] [ 513.955740][ T13] Modules linked in: [ 513.959683][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.966169][ T13] ---[ end trace 0000000000000000 ]--- [ 513.971774][ T13] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 513.975083][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.977893][ T13] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 6b 49 09 cc 66 66 66 66 66 66 2e [ 514.005594][ T13] RSP: 0000:ffffc90000127670 EFLAGS: 00010206 [ 514.011676][ T13] RAX: dffffc0000000000 RBX: ffffffff8b69127e RCX: 61c945b1c8de2200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 514.019729][ T13] RDX: 0000000000000000 RSI: ffffffff8b69127e RDI: 000000001fffc005 [ 514.027737][ T13] RBP: ffffffff8b5ce7da R08: 0000000000000001 R09: 0000000000000000 [ 514.035808][ T13] R10: dffffc0000000000 R11: ffffed100ab463a5 R12: 0000000000000000 [ 514.043811][ T13] R13: 00000000fffe0028 R14: 00000000fffe0028 R15: 0000000000000001 [ 514.051803][ T13] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 514.060776][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.067408][ T13] CR2: 00005555581455c8 CR3: 00000000336e2000 CR4: 00000000003526f0 [ 514.075904][ T13] Kernel panic - not syncing: Fatal exception [ 514.082209][ T13] Kernel Offset: disabled [ 514.086517][ T13] Rebooting in 86400 seconds..