last executing test programs: 2m4.52374808s ago: executing program 2 (id=2977): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x10, 0x205}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x84}}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) read$char_usb(r2, 0x0, 0x0) 2m2.047281106s ago: executing program 1 (id=2982): symlinkat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0xc9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x8000, 0x0, 0x1, 0x89, 0x4c, 0x6, 0x80000001, 0xa2f, 0x7d3, 0x8, 0x6, 0x8, 0x8, 0x0, 0x0, {0x8, 0x9a}, 0x7, 0x80}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) io_setup(0x20fe, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r7) r8 = inotify_init1(0x80000) fcntl$setstatus(r7, 0x4, 0x2c00) r9 = gettid() fcntl$setown(r7, 0x8, r9) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 2m1.83212883s ago: executing program 2 (id=2983): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x1008, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x1900000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}, {r2, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 2m0.848300732s ago: executing program 2 (id=2985): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5ffd, 0x100) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4040091) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000200)={0x9, 0xa2c2}) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r5, &(0x7f0000001300)=""/112, 0x70) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x84800) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x8, 0x3]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m58.309645386s ago: executing program 2 (id=2988): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvvG89BQQNlG5Mja2Ch4oHESwU9GwbNttQs8mW7KY0IWCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s+222U1322Q3ms8HJvs8M7N5nu8+M888szPsBLBnjaV/chGHIuK9JGIkm59ExEAt1R9xYmO922urhXRKYn391V+S2jq31lYL0fCe1IEs8/+I+PbtiMO5zeVWllfmpkul4mKWn6jOn5+oLK8cOTc/PVucLS4cm5yaOnr8mePHti/W335YOXj9/Zee/OLEH2/97+q73yVxIg5myxrj2C5jMZZ9JgPpR3iPF7e7sB5Lms4d7no96Ey6a/Zt7OVxKEair5ZqYaibNQMAdso6ALAHJZ2OAd40aACAv7f69wC31lYL9am330h0140XImL/Rvz165sbS/qza3b7a9dBh28l91wZSSJidBvKH4uIT756/bN0iqwdml9LA9hely5HxJnRsc39f7LpnoVOPbXVwvXB2svYfbP32vEHeunrdPzzbLPxX+7O+CeajH8Gm+y7D+PB+3/uWpbo24biNknHf8833Nt2uyH+zGhflvtXbcw3kJw9Vyqmfdu/I2I8BgbT/GRt1eYjt/Gbf95sVX7j+O/XD974NC0/fb27Ru5a/+C975mZrk4/atx1Ny5HPNbfLP7kTvsnLca/p9os4+Xn3vm41bI0/jTe+rQ5/p21fiXiiabtf7ctky3vT5yobQ4T9Y3iPul28+WPH7W8Ea6x/dMpLb9+LtANafsPbx3/aNJ4v2al8zK+vzLyTatlD46/+fa/L3mtlt6Xzbs4Xa0uTkbsS17ZPP/o3ffW8/X10/jHH2++/28U23z7T88Jz7QZf//1nz9/+Ph3Vhr/TEft33ni6u25ln13e+0/VUuNZ3Pa6f/areCjfHYAAAAAAAAAAAAAAAAAAAAAAAAA0K5cRByMJJe/k87l8vmNZ3j/N4ZzpXKlevhseWlhJmrPyh6NgVz9py5HGn4PdTL7Pfx6/uh9+acj4j8R8eHgUC2fL5RLM70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB1o8/z/102CvawcA7Jj9va4AANB1jv8AsPd0dvwf2rF6AADd4/wfAPaeto//Z3a2HgBA93R6/t+3Q/UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH+vUyZPptP772mohzc9cWF6aK184MlOszOXnlwr5QnnxfH62XJ4tFfOF8nzLf3Rp46VULp+fioWlixPVYqU6UVleOT1fXlqonj43Pz1bPF0c6FpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC+yvLK3HSpVFyU2DIxtDuqsWsS/fHAdSIuxW6oqsRDJRp7iaHedVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9xfAQAA//9Tfytg") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 1m57.084143227s ago: executing program 1 (id=2990): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0xe2, {0xe2, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698b003ca1c37fc5bf598ee0a2866a508de51edf31994c040db47a13c7ce9c4cccabb2d6c6e48139eb58d2adbd189914bc67313a3b3c73dfadf10775a74417a624a9369d815d4934f26070d568653cb1214cf1c1a8538578639960f0a44f576cf89d762997471b61bbf4da9d323491574be67b6b4af2bc0a64f3446114cdc54d03be42adead9a16183c715bf9c8c03563fd3dc6d9b568f9f32b734d6a335a552fab5553756b4a816c15dadc1d85920b6dc58cf3900d400bd16707d09f1cc124117b48bcf2258e8653ba1431b958"}}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221c00000a0bdfe8d316b331e35ed875883895209b63925d5c57a7b1abd9ddbdb1"], &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x80, 0x1, {0x22, 0x810}}}}, &(0x7f0000000580)={0x18, &(0x7f0000000340)={0x20, 0xe, 0x88, "e65588057f522af11d101a4fb6fe7c60d17c2a99ff461f5ec5663b52c2297f58cd70ece053212153516b70eb45375788d6efce796bc0cb0cacff2106845384ef69c5faed682317cf0e4d842dee397e62d6718814b93b6f43bc0885ed0e304614de6ad7c901e10f717d9874dd4decc231a2903ce52bb3a19dfc89adcf8b7255592912e92999250238"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0x20, 0x1, 0x6b, "5fdf97950c821eff1493512abd750ac3655ac60ed3afb39c08371e6bad5b403589bee35024a15ea1bac961845f82862a04b9a2f1d918fe7a04f7529e38c6512e8db08a3f9e22d561a16d8521e9d2ae43deb37b087771a972a832769a012cd7555929c8dc02ab3602d9f527"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) pwrite64(r2, &(0x7f00000005c0)="8fa429df8b2eeeccebedfe68f2067ea9cf1ca5a45c945af3a6c9062c24441eb52e4c1d89f57519772b95", 0x2a, 0x8001) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r4, 0x1, 0xfffffffe, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000000c0)={0x1, "c3"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="340200007d00000005f3000000000000002000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e05"], 0x234) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x6, 0xffff, 0x0, 0x5, 0x0}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000280)={0x3, 0x200, 0x0, 0x4, 0x80000}) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) 1m53.809684075s ago: executing program 2 (id=2991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x86) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) lremovexattr(&(0x7f0000000140)='./file0/file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r5 = io_uring_setup(0x4166, 0x0) io_uring_enter(r5, 0x0, 0xfc86, 0x10, 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/56, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) mount(0x0, 0x0, 0x0, 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x02\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x106}}, 0x20) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x8000, 0x0, 0x1, 0x89, 0x4c, 0x6, 0x80000001, 0xa2f, 0x7d3, 0x8, 0x6, 0x8, 0x8, 0x0, 0x0, {0x8, 0x9a}, 0x7, 0x80}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) io_setup(0x20fe, &(0x7f0000000540)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r8) r9 = inotify_init1(0x80000) fcntl$setstatus(r8, 0x4, 0x2c00) r10 = gettid() fcntl$setown(r8, 0x8, r10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r9, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_submit(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 1m48.526042908s ago: executing program 1 (id=3000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = dup(0xffffffffffffffff) readahead(r5, 0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 1m48.393731006s ago: executing program 2 (id=3001): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8801) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) 1m32.883498754s ago: executing program 32 (id=3000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = dup(0xffffffffffffffff) readahead(r5, 0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 1m32.540103233s ago: executing program 33 (id=3001): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8801) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) 1m31.198805708s ago: executing program 0 (id=3014): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004509001c0068000000029078ac1414bbffffffff16069078ff0300ff"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x29, 0x24, 0x0, 0x0, 0x1, 0x0, 0x4, @loopback, @rand_addr=0xe0000000}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYBLOB, @ANYRESDEC=0x0]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x2000, 0x8, 0x32}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) 1m30.000788687s ago: executing program 0 (id=3015): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x1008, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x1900000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}, {r2, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1m28.95293877s ago: executing program 0 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d180012805b000180090001006c617374000000000400028008000340000001"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 1m28.111418683s ago: executing program 0 (id=3018): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r0 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000740)={0x0, 0xa6a8, 0x4000, 0x2, 0x3d2, 0x0, r0}, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 1m18.790991687s ago: executing program 0 (id=3027): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xfffe, 0xa, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m17.109565132s ago: executing program 0 (id=3028): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = dup(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000040) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) symlink(&(0x7f0000000880)='.\x00', 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) 1m3.375492416s ago: executing program 3 (id=3040): symlinkat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0xc9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x8000, 0x0, 0x1, 0x89, 0x4c, 0x6, 0x80000001, 0xa2f, 0x7d3, 0x8, 0x6, 0x8, 0x8, 0x0, 0x0, {0x8, 0x9a}, 0x7, 0x80}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) io_setup(0x20fe, &(0x7f0000000540)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r8) r9 = inotify_init1(0x80000) fcntl$setstatus(r8, 0x4, 0x2c00) r10 = gettid() fcntl$setown(r8, 0x8, r10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r9, &(0x7f0000000180)='./control\x00', 0xa4000960) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 1m1.105910494s ago: executing program 34 (id=3028): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = dup(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000040) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) symlink(&(0x7f0000000880)='.\x00', 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) 1m0.936655478s ago: executing program 3 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc1400"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d180012805b000180090001006c617374000000000400028008000340000001"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 59.988298948s ago: executing program 3 (id=3045): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, 0x0, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xfffe, 0xa, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 58.930206348s ago: executing program 3 (id=3046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 57.488886379s ago: executing program 3 (id=3048): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r0 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000740)={0x0, 0xa6a8, 0x4000, 0x2, 0x3d2, 0x0, r0}, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 49.56849081s ago: executing program 3 (id=3055): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") fdatasync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 34.755963271s ago: executing program 6 (id=3012): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000600)=""/94, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x8001}}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) pipe2(0x0, 0x0) 33.824412125s ago: executing program 35 (id=3055): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") fdatasync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 33.339734139s ago: executing program 6 (id=3062): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r0 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000740)={0x0, 0xa6a8, 0x4000, 0x2, 0x3d2, 0x0, r0}, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 29.320361444s ago: executing program 6 (id=3066): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYRES32=0xee01], 0x217) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000002040), 0x0, 0x6000) ioprio_get$uid(0x3, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x1}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2c000015}, 0x800) 29.046507058s ago: executing program 4 (id=3067): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) 24.532799529s ago: executing program 4 (id=3069): gettid() socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c001280080001006774700030", @ANYRES32], 0x5c}, 0x1, 0xba01}, 0x0) close(0xffffffffffffffff) read(r1, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x28082) 17.607483051s ago: executing program 4 (id=3071): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xfffe, 0xa, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 16.01143215s ago: executing program 4 (id=3072): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5ffd, 0x100) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4040091) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000200)={0x9, 0xa2c2}) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r6, &(0x7f0000001300)=""/112, 0x70) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x84800) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x8, 0x3]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 14.511586447s ago: executing program 7 (id=3042): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x1008, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x1900000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}, {r1, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 13.337384968s ago: executing program 36 (id=3066): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYRES32=0xee01], 0x217) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000002040), 0x0, 0x6000) ioprio_get$uid(0x3, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x1}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2c000015}, 0x800) 13.261992451s ago: executing program 7 (id=3074): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r0 = socket(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000740)={0x0, 0xa6a8, 0x4000, 0x2, 0x3d2, 0x0, r0}, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 10.22832111s ago: executing program 5 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 9.240840493s ago: executing program 5 (id=3076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.749900982s ago: executing program 5 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000) r1 = dup(0xffffffffffffffff) ioctl$TCSETSF(r1, 0x5404, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880), 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x800802, &(0x7f0000000c40)=ANY=[@ANYBLOB='file_umask=00000000000000000000000,iocharset=koi8-u,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000odepage=cp1251,\x00'/52], 0x1, 0x306, &(0x7f0000000240)="$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") lremovexattr(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x7ffc, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x100, 0x8, {0x77359400}, {0x0, 0x0, 0x2, 0x2, 0x4, 0x8, "d269ff67"}, 0x8, 0x2, {0x0}, 0xffffffff}) 5.999852582s ago: executing program 4 (id=3078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340), &(0x7f0000000040)=0x8) 5.321044618s ago: executing program 4 (id=3079): gettid() socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c001280080001006774700030", @ANYRES32=r3], 0x5c}, 0x1, 0xba01}, 0x0) close(r3) read(r1, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x28082) 3.551145858s ago: executing program 7 (id=3080): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xfffe, 0xa, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.263636047s ago: executing program 5 (id=3081): mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 2.032740935s ago: executing program 7 (id=3082): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x1008, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x1900000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}, {r1, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.645462694s ago: executing program 5 (id=3083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1.325568492s ago: executing program 7 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 207.099652ms ago: executing program 7 (id=3085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r7}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, r6, 'id0\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r10, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r4, r7, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3086): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5ffd, 0x100) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4040091) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000200)={0x9, 0xa2c2}) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r4, &(0x7f0000001300)=""/112, 0x70) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x84800) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x8, 0x3]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 85.370146][T14294] netlink: 'syz.4.2653': attribute type 13 has an invalid length. [ 1185.409169][T14294] gretap0: refused to change device tx_queue_len [ 1185.415673][T14294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1185.614484][T14299] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2654'. [ 1186.371215][T14307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1186.417275][T14307] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 1187.863893][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.870732][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.009558][T14316] syzkaller0: entered promiscuous mode [ 1188.029302][T14316] syzkaller0: entered allmulticast mode [ 1189.517078][T14329] binder: 14322:14329 ioctl 4018620d 0 returned -22 [ 1189.532056][T14329] binder: 14322:14329 ioctl c0306201 0 returned -14 [ 1189.559379][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1189.774640][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1189.774740][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1189.774814][ T9] usb 1-1: Product: syz [ 1189.774871][ T9] usb 1-1: SerialNumber: syz [ 1189.797285][ T9] usb 1-1: config 0 descriptor?? [ 1190.288193][ T9] hso 1-1:0.0: Failed to find BULK IN ep [ 1190.837731][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1191.109315][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1191.224847][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 1191.306783][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1191.319063][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.333944][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1191.347563][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1191.357343][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.377374][ T9] usb 3-1: config 0 descriptor?? [ 1191.806606][T14351] syzkaller0: entered promiscuous mode [ 1191.815358][T14351] syzkaller0: entered allmulticast mode [ 1192.069271][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1192.088131][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1192.172546][ T9] usb 3-1: USB disconnect, device number 3 [ 1192.852058][ T9] usb 1-1: USB disconnect, device number 99 [ 1193.252331][T14368] fuse: Bad value for 'fd' [ 1193.459993][T14376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1193.636139][T14379] binder: 14365:14379 ioctl 4018620d 0 returned -22 [ 1193.644041][T14379] binder: 14365:14379 ioctl c0306201 0 returned -14 [ 1194.272820][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1195.092481][T14384] syzkaller0: entered promiscuous mode [ 1195.098292][T14384] syzkaller0: entered allmulticast mode [ 1195.236267][T14390] fuse: Bad value for 'fd' [ 1196.719139][ T9] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1196.935912][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1197.009406][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.038929][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1197.088864][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1197.133889][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.255902][ T9] usb 1-1: config 0 descriptor?? [ 1197.578879][T13159] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1197.768945][T13159] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1197.799037][T13159] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1197.822642][T13159] usb 5-1: Product: syz [ 1197.844982][T13159] usb 5-1: SerialNumber: syz [ 1197.880818][T13159] usb 5-1: config 0 descriptor?? [ 1198.015168][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1198.029402][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1198.077365][ T9] usb 1-1: USB disconnect, device number 100 [ 1198.371525][T13159] hso 5-1:0.0: Failed to find BULK IN ep [ 1199.158091][T14413] binder: 14408:14413 ioctl 4018620d 0 returned -22 [ 1199.186173][T14413] binder: 14408:14413 ioctl c0306201 0 returned -14 [ 1199.291898][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1200.429903][T14420] fuse: Bad value for 'fd' [ 1200.660193][T14424] syzkaller0: entered promiscuous mode [ 1200.665866][T14424] syzkaller0: entered allmulticast mode [ 1200.708047][ T9] usb 5-1: USB disconnect, device number 116 [ 1201.607276][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 1201.719457][ T9] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1201.922581][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1201.967139][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.019972][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1202.068854][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1202.112412][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.151255][ T9] usb 1-1: config 0 descriptor?? [ 1202.467813][T14446] binder: 14442:14446 ioctl 4018620d 0 returned -22 [ 1202.529805][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2707'. [ 1202.654645][T14444] binder: 14442:14444 ioctl c0306201 0 returned -14 [ 1202.917382][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1202.925431][T14457] fuse: Bad value for 'fd' [ 1202.933790][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1202.977581][ T9] usb 1-1: USB disconnect, device number 101 [ 1203.382672][T14454] fuse: Bad value for 'fd' [ 1204.247356][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1204.429090][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1204.469769][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1204.491345][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1204.502303][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1204.514408][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.553404][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1204.575357][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.609064][T13159] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1204.739491][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 1204.794053][T13159] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1204.828112][T13159] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1204.848940][T13159] usb 1-1: Product: syz [ 1204.853323][T13159] usb 1-1: SerialNumber: syz [ 1204.889394][T13159] usb 1-1: config 0 descriptor?? [ 1205.283482][T13159] hso 1-1:0.0: Failed to find BULK IN ep [ 1205.722663][T14483] syzkaller0: entered promiscuous mode [ 1205.739416][T14483] syzkaller0: entered allmulticast mode [ 1206.730378][ T9] usb 5-1: usb_control_msg returned -71 [ 1206.753591][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1206.887409][ T9] usb 5-1: USB disconnect, device number 117 [ 1207.606451][T14493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2719'. [ 1207.839025][T13159] usb 1-1: USB disconnect, device number 102 [ 1207.970912][T14495] fuse: Bad value for 'fd' [ 1208.440217][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1208.501029][T14506] binder: 14498:14506 ioctl 4018620d 0 returned -22 [ 1208.684961][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.710097][T14508] binder: 14498:14508 ioctl c0306201 0 returned -14 [ 1208.729251][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.763621][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1208.849511][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1208.900246][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.967526][ T9] usb 3-1: config 0 descriptor?? [ 1209.375760][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1209.669033][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1209.691378][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1209.743878][ T9] usb 3-1: USB disconnect, device number 4 [ 1210.559505][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1210.748037][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1210.793995][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1210.819025][T13159] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1210.829225][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1210.854726][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1210.888826][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1210.907040][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1210.917748][T14532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1210.927962][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.052286][T13159] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1211.055175][T14533] syzkaller0: entered promiscuous mode [ 1211.079127][T13159] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1211.095786][T13159] usb 3-1: Product: syz [ 1211.100047][T14533] syzkaller0: entered allmulticast mode [ 1211.148897][T13159] usb 3-1: SerialNumber: syz [ 1211.179316][T13159] usb 3-1: config 0 descriptor?? [ 1211.597900][T14536] fuse: Invalid rootmode [ 1211.710862][T13159] hso 3-1:0.0: Failed to find BULK IN ep [ 1212.659113][T14547] binder: 14543:14547 ioctl 4018620d 0 returned -22 [ 1212.772702][T14547] binder: 14543:14547 ioctl c0306201 0 returned -14 [ 1213.312953][ T9] usb 4-1: usb_control_msg returned -71 [ 1213.334617][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 1213.367407][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1213.424111][T14552] fuse: Unknown parameter 'user_i00000000000000000000' [ 1213.440853][ T9] usb 4-1: USB disconnect, device number 89 [ 1214.209932][ T9] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1214.293745][T14427] usb 3-1: USB disconnect, device number 5 [ 1214.415602][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1214.435377][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.448871][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1214.511202][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1214.522770][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.549707][ T9] usb 5-1: config 0 descriptor?? [ 1214.645261][T14563] fuse: Bad value for 'fd' [ 1215.406617][T14572] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2744'. [ 1215.465685][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1215.490647][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1215.507246][ T9] usb 5-1: USB disconnect, device number 118 [ 1216.482538][T14575] fuse: Invalid rootmode [ 1217.194729][T14580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2748'. [ 1217.766655][T14582] syzkaller0: entered promiscuous mode [ 1217.819591][T14582] syzkaller0: entered allmulticast mode [ 1218.471541][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1218.759114][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1218.794734][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.828715][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1218.869176][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1218.933566][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1218.999189][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1219.034776][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.352628][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1220.435822][T14592] fuse: Unknown parameter 'user_i00000000000000000000' [ 1221.299480][ T9] usb 5-1: usb_control_msg returned -71 [ 1221.333356][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1221.445132][ T9] usb 5-1: USB disconnect, device number 119 [ 1221.678894][T13159] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1221.932206][T13159] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1221.972819][T13159] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1222.016866][T13159] usb 2-1: Product: syz [ 1222.026957][T13159] usb 2-1: SerialNumber: syz [ 1222.091309][T13159] usb 2-1: config 0 descriptor?? [ 1222.129172][ T9] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1222.169723][T14604] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 1222.324968][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1222.337453][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.349364][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1222.362803][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1222.373825][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.387635][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2757'. [ 1222.417338][ T9] usb 4-1: config 0 descriptor?? [ 1222.488241][T13159] hso 2-1:0.0: Failed to find BULK IN ep [ 1222.685344][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2757'. [ 1222.731064][T14606] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1222.786978][T14606] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1223.216216][T14618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1223.231150][T14609] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 1223.265257][T14604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.376765][T14613] macvlan2: entered promiscuous mode [ 1223.398358][T14613] macvlan2: entered allmulticast mode [ 1223.438268][T14613] bond3: entered promiscuous mode [ 1223.492822][T14613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1223.618495][T14613] bond3: left promiscuous mode [ 1223.695136][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1223.709575][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1223.736533][ T9] usb 4-1: USB disconnect, device number 90 [ 1223.764202][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 1224.153948][T14626] binder: 14620:14626 ioctl 4018620d 0 returned -22 [ 1224.256900][T14630] fuse: Unknown parameter 'user_i00000000000000000000' [ 1224.266609][T14628] syzkaller0: entered promiscuous mode [ 1224.277727][T14628] syzkaller0: entered allmulticast mode [ 1224.511470][T14624] binder: 14620:14624 ioctl c0306201 0 returned -14 [ 1225.659011][T13159] usb 2-1: USB disconnect, device number 6 [ 1225.812296][T14648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2769'. [ 1225.875103][T14650] fuse: Bad value for 'fd' [ 1226.459920][T14655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2772'. [ 1226.980405][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 1227.700057][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1227.783121][T14666] fuse: Unknown parameter 'user_i00000000000000000000' [ 1227.913514][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1227.941280][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.984368][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1228.028112][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1228.060578][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.111730][ T9] usb 2-1: config 0 descriptor?? [ 1228.152585][T14672] binder: 14668:14672 ioctl 4018620d 0 returned -22 [ 1228.263805][T14672] binder: 14668:14672 ioctl c0306201 0 returned -14 [ 1228.787633][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1228.812937][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1228.909477][ T9] usb 2-1: USB disconnect, device number 7 [ 1229.929065][T13159] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1230.126747][T13159] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1230.160882][T13159] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1230.179719][T13159] usb 2-1: Product: syz [ 1230.193815][T13159] usb 2-1: SerialNumber: syz [ 1230.215006][T13159] usb 2-1: config 0 descriptor?? [ 1230.332018][T14683] syzkaller0: entered promiscuous mode [ 1230.362942][T14683] syzkaller0: entered allmulticast mode [ 1230.649753][T13159] hso 2-1:0.0: Failed to find BULK IN ep [ 1232.480023][T14697] netlink: 'syz.0.2784': attribute type 2 has an invalid length. [ 1232.519364][T14697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1232.688080][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 1233.416197][T14709] fuse: Unknown parameter 'user_i00000000000000000000' [ 1233.553558][ T9] usb 2-1: USB disconnect, device number 8 [ 1234.019536][T13159] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1234.228952][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1234.229213][T13159] usb 4-1: Using ep0 maxpacket: 8 [ 1234.281277][T13159] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1234.326004][T13159] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1234.357696][T13159] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1234.378837][T13159] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.409204][T13159] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.433236][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1234.461210][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.493536][T13159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.496096][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1234.542307][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1234.572866][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.633674][ T9] usb 2-1: config 0 descriptor?? [ 1235.400050][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1235.430318][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1235.531683][ T9] usb 2-1: USB disconnect, device number 9 [ 1236.445065][T14735] fuse: Bad value for 'fd' [ 1236.941999][T13159] usb 4-1: usb_control_msg returned -71 [ 1236.961244][T13159] usbtmc 4-1:16.0: can't read capabilities [ 1237.061156][T13159] usb 4-1: USB disconnect, device number 91 [ 1237.579266][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 1237.765539][T14744] netlink: 'syz.0.2797': attribute type 2 has an invalid length. [ 1237.799178][T14744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1238.370597][T14748] fuse: Unknown parameter 'user_i00000000000000000000' [ 1238.513038][T14427] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1238.730122][T14427] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1238.769655][T14427] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1238.804967][T14427] usb 2-1: Product: syz [ 1238.821665][T14427] usb 2-1: SerialNumber: syz [ 1238.875650][T14427] usb 2-1: config 0 descriptor?? [ 1239.379776][T14427] hso 2-1:0.0: Failed to find BULK IN ep [ 1239.822505][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 1240.559168][T13159] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1240.734537][T13159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1240.768087][T13159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.803897][T13159] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1240.856634][T13159] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1240.877667][T13159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.904412][T13159] usb 4-1: config 0 descriptor?? [ 1240.937113][T11498] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1241.113723][T11498] usb 1-1: Using ep0 maxpacket: 8 [ 1241.146173][T11498] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.164573][T11498] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.175847][T11498] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.205472][T11498] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.227170][T11498] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1241.245231][T11498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.451529][T14427] usb 2-1: USB disconnect, device number 10 [ 1241.639621][T13159] usbhid 4-1:0.0: can't add hid device: -71 [ 1241.661681][T13159] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1241.707516][T13159] usb 4-1: USB disconnect, device number 92 [ 1242.049051][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 1242.670543][T14778] fuse: Unknown parameter 'user_i00000000000000000000' [ 1243.629091][T14427] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1243.946110][T14427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.009038][T14427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.098940][T14427] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1244.208934][T14427] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1244.230727][T14427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.263455][T11498] usb 1-1: usb_control_msg returned -71 [ 1244.288926][T14427] usb 4-1: config 0 descriptor?? [ 1244.303633][T11498] usbtmc 1-1:16.0: can't read capabilities [ 1244.434926][T11498] usb 1-1: USB disconnect, device number 103 [ 1244.899098][T14427] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1245.106016][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 1245.601474][T14793] syzkaller0: entered promiscuous mode [ 1245.607255][T14793] syzkaller0: entered allmulticast mode [ 1245.681590][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.745835][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.473832][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2818'. [ 1246.492364][T14795] usb 4-1: string descriptor 0 read error: -2 [ 1247.027243][T14807] syzkaller0: entered promiscuous mode [ 1247.033743][T14807] syzkaller0: entered allmulticast mode [ 1247.333846][ T9] usb 4-1: USB disconnect, device number 93 [ 1247.989895][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 1248.239011][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1248.421389][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1248.458927][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1248.459847][T14818] fuse: Unknown parameter 'user_i00000000000000000000' [ 1248.467130][ T9] usb 4-1: Product: syz [ 1248.467233][ T9] usb 4-1: SerialNumber: syz [ 1248.522988][ T9] usb 4-1: config 0 descriptor?? [ 1248.916835][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 1249.295914][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.302970][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.671212][T14829] fuse: Bad value for 'fd' [ 1250.933812][T11498] usb 4-1: USB disconnect, device number 94 [ 1252.242879][T14845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1252.348937][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1252.706317][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.773205][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.800668][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1252.837926][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1252.891918][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.952463][ T9] usb 5-1: config 0 descriptor?? [ 1253.485460][ T9] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1253.668092][T14852] fuse: Unknown parameter 'user_i00000000000000000000' [ 1254.143430][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.242507][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.102173][T14856] usb 5-1: string descriptor 0 read error: -71 [ 1255.240725][ T9] usb 5-1: reset high-speed USB device number 120 using dummy_hcd [ 1256.149811][T14427] usb 5-1: USB disconnect, device number 120 [ 1256.588876][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1256.787971][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1256.830641][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1256.858813][ T9] usb 4-1: Product: syz [ 1256.880781][ T9] usb 4-1: SerialNumber: syz [ 1256.907594][ T9] usb 4-1: config 0 descriptor?? [ 1257.270558][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 1259.736927][ T9] usb 4-1: USB disconnect, device number 95 [ 1259.890533][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1259.907704][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1259.939949][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1260.016629][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1260.051510][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.474855][T14899] fuse: Unknown parameter 'user_i00000000000000000000' [ 1262.159394][ T5073] Bluetooth: hci5: command tx timeout [ 1262.302586][T14881] syz.0.2842 (14881): drop_caches: 2 [ 1262.310935][T14886] chnl_net:caif_netlink_parms(): no params data found [ 1263.228964][T11498] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1263.430388][T11498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.488868][T11498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.547835][T11498] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1263.613594][T11498] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.649043][T11498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.732042][T11498] usb 5-1: config 0 descriptor?? [ 1264.249038][ T5073] Bluetooth: hci5: command tx timeout [ 1264.262727][T14886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.264199][T11498] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1264.271454][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.294213][T14886] bridge_slave_0: entered allmulticast mode [ 1264.327053][T14886] bridge_slave_0: entered promiscuous mode [ 1264.396000][T14886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.438023][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.460004][T14886] bridge_slave_1: entered allmulticast mode [ 1264.550265][T14886] bridge_slave_1: entered promiscuous mode [ 1264.977102][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.050040][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.091863][T14886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.193561][T14886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.300255][ T178] team0: Port device netdevsim3 removed [ 1265.358073][ T178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.786818][ T178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.871169][T14915] usb 5-1: string descriptor 0 read error: -71 [ 1266.066569][ T178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.144232][T14886] team0: Port device team_slave_0 added [ 1266.327356][ T178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.351458][ T5073] Bluetooth: hci5: command tx timeout [ 1266.564397][T14886] team0: Port device team_slave_1 added [ 1266.648238][ T5831] usb 5-1: USB disconnect, device number 121 [ 1266.856611][T14886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.864218][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.898945][T14886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.942998][T14886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.977301][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.074770][T14886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.820537][T14886] hsr_slave_0: entered promiscuous mode [ 1267.853358][T14886] hsr_slave_1: entered promiscuous mode [ 1267.858876][T11498] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1267.864624][T14886] debugfs: 'hsr0' already exists in 'hsr' [ 1267.915657][T14886] Cannot create hsr debugfs directory [ 1268.075029][T11498] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1268.127135][T11498] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1268.169171][T11498] usb 1-1: Product: syz [ 1268.173552][T11498] usb 1-1: SerialNumber: syz [ 1268.227022][T11498] usb 1-1: config 0 descriptor?? [ 1268.261476][T14932] netlink: 'syz.3.2856': attribute type 2 has an invalid length. [ 1268.381314][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1268.405394][ T178] vxlan0: left allmulticast mode [ 1268.420308][ T5073] Bluetooth: hci5: command tx timeout [ 1268.438490][ T178] bridge0: port 3(vxlan0) entered disabled state [ 1268.509631][ T178] bridge_slave_1: left allmulticast mode [ 1268.519133][ T178] bridge_slave_1: left promiscuous mode [ 1268.535760][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.565395][ T178] bridge_slave_0: left allmulticast mode [ 1268.574723][ T178] bridge_slave_0: left promiscuous mode [ 1268.586240][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.621928][T11498] hso 1-1:0.0: Failed to find BULK IN ep [ 1269.377147][T14940] Cannot find add_set index 3 as target [ 1270.049740][ T178] bond1 (unregistering): Released all slaves [ 1270.502690][ T178] bond2 (unregistering): Released all slaves [ 1270.572604][ T178] bond3 (unregistering): Released all slaves [ 1270.793824][ T178] bond0 (unregistering): Released all slaves [ 1271.243458][ T178] tipc: Left network mode [ 1271.571762][ T9] usb 1-1: USB disconnect, device number 104 [ 1272.243179][ T178] hsr_slave_0: left promiscuous mode [ 1272.271463][ T178] hsr_slave_1: left promiscuous mode [ 1272.290505][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.328986][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.364604][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.384980][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.468022][ T178] veth1_macvtap: left promiscuous mode [ 1272.490369][ T178] veth0_macvtap: left promiscuous mode [ 1272.515155][ T178] veth1_vlan: left promiscuous mode [ 1272.547720][ T178] veth0_vlan: left promiscuous mode [ 1273.341817][T14950] fuse: Unknown parameter 'user_i00000000000000000000' [ 1274.178992][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1274.374489][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.394799][ T178] team0 (unregistering): Port device team_slave_1 removed [ 1274.417255][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.437074][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1274.462735][ T178] team0 (unregistering): Port device team_slave_0 removed [ 1274.506131][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.552988][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.625263][ T9] usb 1-1: config 0 descriptor?? [ 1275.293879][ T9] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1276.349895][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.439021][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.791761][T14961] usb 1-1: string descriptor 0 read error: -2 [ 1276.851678][T14959] syz.1.2863 (14959): drop_caches: 2 [ 1277.583512][T13159] usb 1-1: USB disconnect, device number 105 [ 1277.751816][T14886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1277.899504][T14886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1278.003930][T14886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1278.134130][T14886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1278.218953][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1278.259693][T14974] netlink: 'syz.0.2866': attribute type 2 has an invalid length. [ 1278.311288][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1278.438833][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1278.469764][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.518948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.538747][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1278.608175][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1278.670100][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.758130][ T9] usb 4-1: config 0 descriptor?? [ 1279.629115][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.003D/input/input72 [ 1279.783063][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.003D/input/input73 [ 1279.883499][T14886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.918931][ T5831] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1280.029806][ T9] kye 0003:0458:5011.003D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1280.083865][T14886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.158405][ T5831] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1280.202939][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1280.256995][ T5831] usb 5-1: Product: syz [ 1280.265966][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.273672][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.278776][ T5831] usb 5-1: SerialNumber: syz [ 1280.381648][ T5831] usb 5-1: config 0 descriptor?? [ 1280.517304][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.524883][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.568504][T13159] usb 4-1: USB disconnect, device number 96 [ 1280.930138][ T5831] hso 5-1:0.0: Failed to find BULK IN ep [ 1281.298052][T14994] fido_id[14994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1281.957649][T15002] fuse: Unknown parameter 'user_i00000000000000000000' [ 1282.844496][ T9] usb 5-1: USB disconnect, device number 122 [ 1283.172099][T15018] fuse: Unknown parameter 'user_i00000000000000000000' [ 1283.213880][T14886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.866191][T14886] veth0_vlan: entered promiscuous mode [ 1284.152745][T14886] veth1_vlan: entered promiscuous mode [ 1284.159392][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1284.378863][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.429295][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.471017][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1284.543374][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1284.565257][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.593348][T14886] veth0_macvtap: entered promiscuous mode [ 1284.648980][ T9] usb 2-1: config 0 descriptor?? [ 1284.732014][T15030] netlink: 'syz.3.2876': attribute type 2 has an invalid length. [ 1284.739018][T14886] veth1_macvtap: entered promiscuous mode [ 1284.776052][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2876'. [ 1284.938477][T14886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.108440][T14886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.230908][ T9] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1285.264419][ T1124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.301755][ T1124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.412683][ T1124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.471073][T13119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.871428][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.956701][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.810314][T15045] usb 2-1: string descriptor 0 read error: -2 [ 1287.593419][ T9] usb 2-1: USB disconnect, device number 11 [ 1288.018864][T11498] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1288.134927][T15063] fuse: Unknown parameter 'user_id00000000000000000000' [ 1288.252525][T11498] usb 4-1: config 0 has no interfaces? [ 1288.288943][T11498] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1288.298240][T11498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.376310][T11498] usb 4-1: config 0 descriptor?? [ 1289.028869][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1289.150034][ T5831] usb 4-1: USB disconnect, device number 97 [ 1289.246188][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1289.268833][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1289.289102][ T9] usb 2-1: Product: syz [ 1289.293533][ T9] usb 2-1: SerialNumber: syz [ 1289.330860][ T9] usb 2-1: config 0 descriptor?? [ 1289.602795][ T9] hso 2-1:0.0: Failed to find BULK IN ep [ 1290.221433][T15076] fuse: Unknown parameter 'user_i00000000000000000000' [ 1291.479348][T11498] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1291.527825][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.541431][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.639027][T11498] usb 4-1: Using ep0 maxpacket: 32 [ 1291.674026][T11498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.699683][T11498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.747355][T11498] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1291.769757][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.793846][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.835625][T11498] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1291.887141][T11498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.947023][T11498] usb 4-1: config 0 descriptor?? [ 1292.026086][ T9] usb 2-1: USB disconnect, device number 12 [ 1292.155782][T15089] netlink: 'syz.4.2887': attribute type 2 has an invalid length. [ 1292.229750][T15089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2887'. [ 1292.663390][T11498] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.003F/input/input74 [ 1292.845205][T11498] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.003F/input/input75 [ 1292.936558][T15099] fuse: Unknown parameter 'user_id00000000000000000000' [ 1292.966896][T11498] kye 0003:0458:5011.003F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1292.991668][ T8829] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1293.210060][ T8829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.242432][ T8829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.281138][ T8829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.346755][ T8829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.358124][ T9] usb 4-1: USB disconnect, device number 98 [ 1293.391453][ T8829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.465696][ T8829] usb 5-1: config 0 descriptor?? [ 1293.761804][T15106] fuse: Unknown parameter 'user_i00000000000000000000' [ 1293.962140][T15103] fido_id[15103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1294.084549][ T8829] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1294.767667][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.874792][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.139056][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1295.383003][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1295.414380][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1295.467480][ T9] usb 2-1: Product: syz [ 1295.490730][ T9] usb 2-1: SerialNumber: syz [ 1295.556060][ T9] usb 2-1: config 0 descriptor?? [ 1295.674528][T15114] usb 5-1: string descriptor 0 read error: -71 [ 1295.828906][ T8829] usb 5-1: reset high-speed USB device number 123 using dummy_hcd [ 1295.981574][ T9] hso 2-1:0.0: Failed to find BULK IN ep [ 1296.634249][T11498] usb 5-1: USB disconnect, device number 123 [ 1296.925451][T15133] netlink: 'syz.3.2900': attribute type 2 has an invalid length. [ 1296.969573][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2900'. [ 1297.556962][T15137] binder: 15132:15137 ioctl 4018620d 0 returned -22 [ 1297.572677][T15137] binder: 15132:15137 ioctl c0306201 0 returned -14 [ 1298.015213][ T9] usb 2-1: USB disconnect, device number 13 [ 1298.402966][T15141] fuse: Unknown parameter 'user_id00000000000000000000' [ 1300.348813][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1300.548939][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1300.622364][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.664762][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.705914][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1300.752761][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1300.765237][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.797693][ T9] usb 4-1: config 0 descriptor?? [ 1301.001797][T15152] fuse: Unknown parameter 'user_i00000000000000000000' [ 1301.509329][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0041/input/input76 [ 1301.683071][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0041/input/input77 [ 1301.923406][ T9] kye 0003:0458:5011.0041: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1302.355656][ T9] usb 4-1: USB disconnect, device number 99 [ 1302.890925][T15159] fido_id[15159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1302.927137][T15163] netlink: 'syz.0.2912': attribute type 2 has an invalid length. [ 1302.949322][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2912'. [ 1302.969233][ T5831] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1303.168515][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.230945][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.281926][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1303.339119][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.368816][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.412071][ T5831] usb 2-1: config 0 descriptor?? [ 1303.802430][T15166] binder_alloc: 15165: binder_alloc_buf, no vma [ 1303.902390][T15168] fuse: Bad value for 'fd' [ 1304.083307][ T5831] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1304.703111][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.781100][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.883610][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.912467][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.925936][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.945232][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.964080][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1305.630792][T15180] usb 2-1: string descriptor 0 read error: -71 [ 1305.787613][T15187] fuse: Bad value for 'fd' [ 1306.242135][T15192] fuse: Unknown parameter 'user_i00000000000000000000' [ 1306.510247][ T9] usb 2-1: USB disconnect, device number 14 [ 1307.014342][T15181] chnl_net:caif_netlink_parms(): no params data found [ 1307.069859][ T5785] Bluetooth: hci1: command tx timeout [ 1307.126151][T15203] netlink: 'syz.4.2923': attribute type 2 has an invalid length. [ 1307.168149][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1307.829310][T11498] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1308.037744][T11498] usb 1-1: Using ep0 maxpacket: 8 [ 1308.165179][T11498] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.212739][T11498] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.282261][T11498] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1308.383787][T11498] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.481990][T15210] binder: 15206:15210 ioctl 4018620d 0 returned -22 [ 1308.502147][T11498] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1308.522295][T11498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.584355][T15209] binder: 15206:15209 ioctl c0306201 0 returned -14 [ 1309.223689][ T5785] Bluetooth: hci1: command tx timeout [ 1310.367777][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.416787][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.430884][T15218] binder_alloc: 15217: binder_alloc_buf, no vma [ 1310.479512][T15181] bridge_slave_0: entered allmulticast mode [ 1310.546027][T15181] bridge_slave_0: entered promiscuous mode [ 1310.616775][T15220] fuse: Bad value for 'fd' [ 1310.721443][ T1330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.740504][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.747582][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.824462][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.839531][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.847970][T15181] bridge_slave_1: entered allmulticast mode [ 1310.896391][T15181] bridge_slave_1: entered promiscuous mode [ 1310.927093][ T1330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.225898][ T1330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.279508][ T5785] Bluetooth: hci1: command tx timeout [ 1311.517108][ T1330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.744390][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.865938][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.527816][T15181] team0: Port device team_slave_0 added [ 1312.821543][T15181] team0: Port device team_slave_1 added [ 1313.359096][ T5785] Bluetooth: hci1: command tx timeout [ 1313.464223][ T1330] vxlan0: left allmulticast mode [ 1313.470206][ T8829] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1313.482690][ T1330] bridge0: port 3(vxlan0) entered disabled state [ 1313.520528][ T1330] bridge_slave_1: left allmulticast mode [ 1313.528960][ T1330] bridge_slave_1: left promiscuous mode [ 1313.542199][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.582218][ T1330] bridge_slave_0: left allmulticast mode [ 1313.588219][ T1330] bridge_slave_0: left promiscuous mode [ 1313.605932][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.675739][ T8829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.699392][T11498] usb 1-1: usb_control_msg returned -110 [ 1313.714372][T11498] usbtmc 1-1:16.0: can't read capabilities [ 1313.724876][ T8829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.765377][ T8829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1313.826719][ T8829] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1313.888788][ T8829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.963549][ T8829] usb 2-1: config 0 descriptor?? [ 1314.423120][T15239] fuse: Unknown parameter 'user_i00000000000000000000' [ 1314.576574][ T8829] plantronics 0003:047F:FFFF.0043: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1314.977541][ T1330] bond1 (unregistering): Released all slaves [ 1315.199501][ T1330] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1315.230047][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.280518][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.340299][ T1330] bond0 (unregistering): (slave bond4): Releasing backup interface [ 1315.366641][ T1330] bond0 (unregistering): Released all slaves [ 1315.413775][ T9] usb 1-1: USB disconnect, device number 106 [ 1315.422212][ T1330] bond2 (unregistering): Released all slaves [ 1315.864099][ T1330] bond3 (unregistering): Released all slaves [ 1316.041234][ T1330] bond4 (unregistering): Released all slaves [ 1316.179293][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.195029][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.244613][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.476569][T15255] binder: 15251:15255 ioctl 4018620d 0 returned -22 [ 1316.507918][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.539637][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.719023][T15255] binder: 15251:15255 ioctl c0306201 0 returned -14 [ 1316.778739][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.802424][T13159] usb 2-1: USB disconnect, device number 15 [ 1316.983553][ T1330] tipc: Left network mode [ 1317.425637][T15262] binder_alloc: 15261: binder_alloc_buf, no vma [ 1317.539563][T15181] hsr_slave_0: entered promiscuous mode [ 1317.562295][T15181] hsr_slave_1: entered promiscuous mode [ 1317.599246][T15181] debugfs: 'hsr0' already exists in 'hsr' [ 1317.623561][T15181] Cannot create hsr debugfs directory [ 1318.200709][ T1330] hsr_slave_0: left promiscuous mode [ 1318.242055][T15268] fuse: Bad value for 'fd' [ 1318.274414][ T1330] hsr_slave_1: left promiscuous mode [ 1318.327032][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.378924][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.481336][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.540278][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.659519][ T1330] veth1_macvtap: left promiscuous mode [ 1318.665254][ T1330] veth0_macvtap: left promiscuous mode [ 1318.723382][ T1330] veth1_vlan: left promiscuous mode [ 1318.748956][ T1330] veth0_vlan: left promiscuous mode [ 1319.766274][T15294] fuse: Bad value for 'fd' [ 1321.063930][ T1330] team_slave_1 (unregistering): left promiscuous mode [ 1321.102947][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 1321.139398][ T1330] team_slave_0 (unregistering): left promiscuous mode [ 1321.174763][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 1322.291370][T15302] fuse: Unknown parameter 'user_i00000000000000000000' [ 1323.379022][T13159] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1323.609390][T13159] usb 5-1: Using ep0 maxpacket: 8 [ 1323.671127][T13159] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1323.739048][T13159] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1323.790761][T13159] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1323.894705][T13159] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.950900][T13159] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1324.032851][T13159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.769274][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1324.858909][T15317] binder: BINDER_SET_CONTEXT_MGR already set [ 1324.869815][T15317] binder: 15316:15317 ioctl 4018620d 80004a80 returned -16 [ 1324.917368][T15181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1324.985914][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.005323][T15181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1325.038931][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.111980][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1325.163176][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1325.199504][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.264480][ T9] usb 1-1: config 0 descriptor?? [ 1325.295696][T15181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1325.503794][T15181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1325.893836][ T9] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1329.199522][T13159] usb 5-1: usb_control_msg returned -110 [ 1329.205366][T13159] usbtmc 5-1:16.0: can't read capabilities [ 1329.256746][T11498] usb 1-1: USB disconnect, device number 107 [ 1329.910460][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.913067][T15337] fuse: Unknown parameter '0x0000000000000004' [ 1330.258252][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.358469][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.366011][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.587144][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.594511][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.248844][T11498] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1331.469050][T11498] usb 2-1: Using ep0 maxpacket: 16 [ 1331.539374][T11498] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1331.602595][T11498] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1331.670526][T11498] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.736010][T11498] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1331.838247][T11498] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1331.928937][T11498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.937191][T11498] usb 2-1: Product: syz [ 1332.029048][T11498] usb 2-1: Manufacturer: syz [ 1332.039505][T11498] usb 2-1: SerialNumber: syz [ 1332.065078][T15354] binder: 15349:15354 ioctl 4018620d 0 returned -22 [ 1332.076873][T15354] binder: 15349:15354 ioctl c0306201 0 returned -14 [ 1332.387150][T11498] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1332.596621][ T5831] usb 2-1: USB disconnect, device number 16 [ 1332.650031][ T5831] usblp0: removed [ 1333.347338][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.125986][T15181] veth0_vlan: entered promiscuous mode [ 1334.217683][T15181] veth1_vlan: entered promiscuous mode [ 1334.558293][ T9] usb 5-1: USB disconnect, device number 124 [ 1334.851550][T15181] veth0_macvtap: entered promiscuous mode [ 1334.971885][T15181] veth1_macvtap: entered promiscuous mode [ 1335.233084][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.280752][ T5831] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1335.322632][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.503910][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.541264][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.560415][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.583323][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1335.612142][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1335.645092][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.660893][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.700231][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.730148][ T5831] usb 5-1: config 0 descriptor?? [ 1335.758214][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.076089][T15391] fuse: Unknown parameter '0x0000000000000004' [ 1336.283215][ T5831] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1336.992469][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.032248][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.820224][T15397] usb 5-1: string descriptor 0 read error: -2 [ 1338.623472][ T9] usb 5-1: USB disconnect, device number 125 [ 1340.774492][T15435] binder: 15428:15435 ioctl 4018620d 0 returned -22 [ 1340.803196][T15435] binder: 15428:15435 ioctl c0306201 0 returned -14 [ 1341.809366][ T8829] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1342.044200][ T8829] usb 1-1: Using ep0 maxpacket: 16 [ 1342.102846][ T8829] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1342.149323][ T8829] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1342.191951][ T8829] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.267726][ T8829] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1342.320414][ T8829] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1342.355643][ T8829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.385097][ T8829] usb 1-1: Product: syz [ 1342.401194][ T8829] usb 1-1: Manufacturer: syz [ 1342.423026][ T8829] usb 1-1: SerialNumber: syz [ 1342.672772][ T8829] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1342.877087][ T8829] usb 1-1: USB disconnect, device number 108 [ 1342.945807][ T8829] usblp0: removed [ 1343.312116][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.354958][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.766005][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.803141][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.048898][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1344.248880][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1344.286082][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1344.307254][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1344.338306][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1344.388890][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.444097][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1344.491809][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.431758][ T9] usb 3-1: usb_control_msg returned -71 [ 1346.468258][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1346.574477][ T9] usb 3-1: USB disconnect, device number 6 [ 1347.086937][T15478] fuse: Unknown parameter '0x0000000000000004' [ 1347.909438][ T5831] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1348.051283][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1348.083511][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1348.171824][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.197284][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.211862][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1348.230763][ T5831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1348.247535][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.313227][ T5831] usb 1-1: config 0 descriptor?? [ 1348.924901][ T5831] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1349.593777][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.609130][ T5831] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1349.650113][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.829506][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 1349.919432][ T5831] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1349.953152][ T5831] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1350.004411][ T5831] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.034637][ T5831] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1350.060192][ T5831] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1350.072523][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.082863][ T5831] usb 3-1: Product: syz [ 1350.087350][ T5831] usb 3-1: Manufacturer: syz [ 1350.093266][ T5831] usb 3-1: SerialNumber: syz [ 1350.196773][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'. [ 1350.372797][ T5831] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1350.417740][ T5073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1350.447316][ T5073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1350.459364][ T5073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1350.487912][ T5073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1350.524245][ T5073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1350.563441][T15501] usb 1-1: string descriptor 0 read error: -71 [ 1350.634391][T13159] usb 3-1: USB disconnect, device number 7 [ 1350.691377][ T8829] usb 1-1: reset high-speed USB device number 109 using dummy_hcd [ 1350.754652][T13159] usblp1: removed [ 1351.573790][T11498] usb 1-1: USB disconnect, device number 109 [ 1352.258947][ T5831] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1352.370907][T15526] fuse: Unknown parameter '0x0000000000000004' [ 1352.459761][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 1352.511944][ T5831] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1352.544101][ T5831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1352.597085][ T5831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1352.639482][ T5073] Bluetooth: hci3: command tx timeout [ 1352.649141][ T5831] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.690060][ T5831] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1352.724815][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.778332][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1352.790414][T15509] chnl_net:caif_netlink_parms(): no params data found [ 1352.852263][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1354.721410][ T5073] Bluetooth: hci3: command tx timeout [ 1355.001424][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.274480][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.579719][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.654541][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.081167][T15545] loop2: detected capacity change from 0 to 2048 [ 1356.282898][T15545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.571245][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.623007][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.669492][T15509] bridge_slave_0: entered allmulticast mode [ 1356.721739][T15509] bridge_slave_0: entered promiscuous mode [ 1356.800104][ T5785] Bluetooth: hci3: command tx timeout [ 1356.842774][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.872288][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.914207][T15509] bridge_slave_1: entered allmulticast mode [ 1356.931876][T15509] bridge_slave_1: entered promiscuous mode [ 1357.043688][T14427] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1357.226133][ T34] bridge_slave_1: left allmulticast mode [ 1357.246694][ T34] bridge_slave_1: left promiscuous mode [ 1357.269988][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.309044][T14427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.317231][ T34] bridge_slave_0: left allmulticast mode [ 1357.347169][T14427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.357454][ T34] bridge_slave_0: left promiscuous mode [ 1357.358332][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.441390][T14427] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1357.518802][T14427] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.564949][T14427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.639945][T14427] usb 2-1: config 0 descriptor?? [ 1357.849980][ T5831] usb 4-1: usb_control_msg returned -110 [ 1357.891113][ T5831] usbtmc 4-1:16.0: can't read capabilities [ 1358.212358][T14427] plantronics 0003:047F:FFFF.0047: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1358.455670][ T34] bond1 (unregistering): Released all slaves [ 1358.532804][ T34] bond2 (unregistering): Released all slaves [ 1358.649462][T15548] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1358.656531][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.789230][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.797271][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.850167][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.884185][ T5073] Bluetooth: hci3: command tx timeout [ 1358.912250][ T34] tipc: Left network mode [ 1359.045408][T15509] team0: Port device team_slave_0 added [ 1359.185477][T15509] team0: Port device team_slave_1 added [ 1359.503175][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.535879][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.630435][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.729474][T14886] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.762023][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.775874][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.908321][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.194363][ T8829] usb 2-1: USB disconnect, device number 17 [ 1360.263333][ T34] hsr_slave_0: left promiscuous mode [ 1360.356773][T14427] usb 4-1: USB disconnect, device number 100 [ 1360.368757][ T34] hsr_slave_1: left promiscuous mode [ 1360.390169][T15556] fuse: Unknown parameter 'user_i00000000000000000000' [ 1360.446060][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.486017][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.520164][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.527969][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.647664][ T34] veth1_macvtap: left promiscuous mode [ 1360.670351][ T34] veth0_macvtap: left promiscuous mode [ 1360.686802][ T34] veth1_vlan: left promiscuous mode [ 1360.702917][ T34] veth0_vlan: left promiscuous mode [ 1360.839591][T15562] fuse: Unknown parameter '0x0000000000000004' [ 1361.142244][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 1362.239158][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1362.321853][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1363.508805][T15509] hsr_slave_0: entered promiscuous mode [ 1363.564992][T15509] hsr_slave_1: entered promiscuous mode [ 1363.608454][T15509] debugfs: 'hsr0' already exists in 'hsr' [ 1363.637393][T15509] Cannot create hsr debugfs directory [ 1364.463755][ T34] IPVS: stop unused estimator thread 0... [ 1365.479426][T15591] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1365.486183][T15591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1365.569297][T15591] vhci_hcd vhci_hcd.0: Device attached [ 1365.629407][T15597] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 1365.636139][T15597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1365.801015][T15597] vhci_hcd vhci_hcd.0: Device attached [ 1365.848932][ T5831] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1365.962907][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1366.319347][T15592] vhci_hcd: connection reset by peer [ 1366.327499][T15598] vhci_hcd: connection closed [ 1366.339090][ T34] vhci_hcd vhci_hcd.1: stop threads [ 1366.414969][ T34] vhci_hcd vhci_hcd.1: release socket [ 1366.449232][ T34] vhci_hcd vhci_hcd.1: disconnect device [ 1366.515027][T15509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1366.522946][ T34] vhci_hcd vhci_hcd.1: stop threads [ 1366.528420][ T34] vhci_hcd vhci_hcd.1: release socket [ 1366.601171][ T34] vhci_hcd vhci_hcd.1: disconnect device [ 1366.743222][T15509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1366.836424][T15509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1366.926326][T15509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1368.019656][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.226544][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.360683][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.368142][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.596531][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.604009][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.609024][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1369.787568][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.826515][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.864723][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1369.919067][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1369.950898][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.998456][ T9] usb 1-1: config 0 descriptor?? [ 1370.576517][ T9] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1370.967728][ T5831] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1371.402185][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.478257][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.595667][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.828811][T14427] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1372.038864][T14427] usb 4-1: Using ep0 maxpacket: 8 [ 1372.196546][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.206488][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.271482][T15623] usb 1-1: string descriptor 0 read error: -2 [ 1372.348068][T14427] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1372.405994][T14427] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.466919][T14427] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.561986][T14427] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.669680][T14427] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1372.707195][T14427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.062382][ T9] usb 1-1: USB disconnect, device number 110 [ 1374.291410][T15639] fuse: Unknown parameter 'user_i00000000000000000000' [ 1375.433597][T15645] fuse: Unknown parameter '0x0000000000000004' [ 1376.086842][T15509] veth0_vlan: entered promiscuous mode [ 1376.342957][T15509] veth1_vlan: entered promiscuous mode [ 1376.419755][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1377.166221][T15509] veth0_macvtap: entered promiscuous mode [ 1377.304420][T15509] veth1_macvtap: entered promiscuous mode [ 1377.753111][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.920944][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.929292][T14427] usb 4-1: usb_control_msg returned -110 [ 1377.935099][T14427] usbtmc 4-1:16.0: can't read capabilities [ 1378.095490][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.136465][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.157470][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.226097][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.948316][T14427] usb 4-1: USB disconnect, device number 101 [ 1379.913273][ T8829] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1380.098944][ T8829] usb 1-1: Using ep0 maxpacket: 8 [ 1380.211043][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.301395][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.454601][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.584086][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.740663][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.815053][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.071835][T15664] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1381.289909][ T8829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1381.401291][ T8829] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1381.458211][ T8829] usb 1-1: can't read configurations, error -71 [ 1381.879056][T14427] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1382.085540][T14427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.129037][T14427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.169603][T14427] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1382.215139][T14427] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1382.253953][T14427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.278214][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1382.287175][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1382.296909][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1382.321471][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1382.347346][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1382.374460][T14427] usb 4-1: config 0 descriptor?? [ 1382.793326][T15684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1382.809734][T15684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1382.845220][T15684] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1382.875264][T15684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1382.890654][T15684] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1382.976024][T14427] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1383.075407][T15686] fuse: Unknown parameter 'user_i00000000000000000000' [ 1383.605730][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.687381][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.061777][T15695] fuse: Unknown parameter 'fd0x0000000000000004' [ 1384.399502][T15684] Bluetooth: hci4: command tx timeout [ 1384.488887][T15684] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.539485][T15690] usb 4-1: string descriptor 0 read error: -2 [ 1384.959678][ T5073] Bluetooth: hci6: command tx timeout [ 1384.997180][T15679] chnl_net:caif_netlink_parms(): no params data found [ 1385.049689][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1385.361892][ T8829] usb 4-1: USB disconnect, device number 102 [ 1386.186102][T13119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.261230][T13119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.484994][ T5073] Bluetooth: hci4: command tx timeout [ 1386.730004][ T8829] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1386.809918][T15682] chnl_net:caif_netlink_parms(): no params data found [ 1386.934215][ T8829] usb 1-1: Using ep0 maxpacket: 8 [ 1387.038903][ T5073] Bluetooth: hci6: command tx timeout [ 1387.073541][ T8829] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1387.115853][ T8829] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1387.120809][T13119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.197731][ T8829] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1387.239270][T13119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.284427][ T8829] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.419111][ T8829] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1387.481296][ T8829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.190729][T15679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.230490][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.334991][T15679] bridge_slave_0: entered allmulticast mode [ 1388.414688][T15679] bridge_slave_0: entered promiscuous mode [ 1388.467567][T15679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.499631][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.535418][T15679] bridge_slave_1: entered allmulticast mode [ 1388.559425][ T5073] Bluetooth: hci4: command tx timeout [ 1388.586645][T15679] bridge_slave_1: entered promiscuous mode [ 1389.053121][T15679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.119008][ T5073] Bluetooth: hci6: command tx timeout [ 1389.258110][T15679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.863100][T15679] team0: Port device team_slave_0 added [ 1390.624559][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.649218][ T5073] Bluetooth: hci4: command tx timeout [ 1390.762097][T15679] team0: Port device team_slave_1 added [ 1391.199293][ T5073] Bluetooth: hci6: command tx timeout [ 1391.407095][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.475947][T15732] fuse: Unknown parameter 'user_i00000000000000000000' [ 1391.542216][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.558929][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1391.573925][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.597703][T15682] bridge_slave_0: entered allmulticast mode [ 1391.621467][T15682] bridge_slave_0: entered promiscuous mode [ 1391.697900][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.749004][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1391.764403][T15679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.808374][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.843428][T15730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.861055][T15730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.956916][T15679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.984104][T15730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.041475][T15730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.057118][T15679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.079235][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.131909][T15730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.181624][T15730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.204455][T15679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.240549][T15730] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1392.261122][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.289590][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.297786][T15682] bridge_slave_1: entered allmulticast mode [ 1392.343937][T15682] bridge_slave_1: entered promiscuous mode [ 1392.424183][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.461663][T15736] fuse: Unknown parameter 'fd0x0000000000000004' [ 1392.591570][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1392.617817][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1392.636811][ T9] usb 4-1: can't read configurations, error -71 [ 1392.655540][ T8829] usb 1-1: usb_control_msg returned -110 [ 1392.720595][ T8829] usbtmc 1-1:16.0: can't read capabilities [ 1392.839760][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.921874][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.362362][ T8829] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1393.571094][ T8829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.600436][T15679] hsr_slave_0: entered promiscuous mode [ 1393.609067][ T8829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.621946][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1393.637917][T15679] hsr_slave_1: entered promiscuous mode [ 1393.646252][ T8829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1393.662580][T15679] debugfs: 'hsr0' already exists in 'hsr' [ 1393.691590][T15679] Cannot create hsr debugfs directory [ 1393.699982][ T8829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1393.736257][ T8829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.781028][ T8829] usb 5-1: config 0 descriptor?? [ 1393.964965][T15682] team0: Port device team_slave_0 added [ 1394.019295][ T13] bridge_slave_1: left allmulticast mode [ 1394.025140][ T13] bridge_slave_1: left promiscuous mode [ 1394.090053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.133894][ T13] bridge_slave_0: left allmulticast mode [ 1394.158124][ T13] bridge_slave_0: left promiscuous mode [ 1394.169691][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.423781][T11498] usb 1-1: USB disconnect, device number 113 [ 1394.539683][ T8829] plantronics 0003:047F:FFFF.004A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1395.317849][T15746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.392949][T15746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.831690][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.864595][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.894345][ T13] bond0 (unregistering): Released all slaves [ 1395.913407][T15682] team0: Port device team_slave_1 added [ 1396.152464][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.163178][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.202107][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.336837][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.345197][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.385498][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.274397][ T13] hsr_slave_0: left promiscuous mode [ 1397.301066][ T13] hsr_slave_1: left promiscuous mode [ 1397.323366][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.335089][T14427] usb 5-1: USB disconnect, device number 126 [ 1397.349364][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.427499][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.470292][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.596245][ T13] veth1_macvtap: left promiscuous mode [ 1397.630984][ T13] veth0_macvtap: left promiscuous mode [ 1397.650455][ T13] veth1_vlan: left promiscuous mode [ 1397.678278][ T13] veth0_vlan: left promiscuous mode [ 1398.096288][T15769] loop4: detected capacity change from 0 to 512 [ 1398.173210][T15769] EXT4-fs: Ignoring removed nobh option [ 1398.306533][T15769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.392797][T15769] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.571912][ T29] audit: type=1800 audit(1775806175.027:2): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3031" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1398.891830][T15775] fuse: Unknown parameter 'fd0x0000000000000004' [ 1398.977034][T15509] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.091387][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1399.195889][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1399.635941][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1399.859690][T14427] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1399.903036][T15682] hsr_slave_0: entered promiscuous mode [ 1399.931422][T15682] hsr_slave_1: entered promiscuous mode [ 1399.971795][T15682] debugfs: 'hsr0' already exists in 'hsr' [ 1399.982880][T15682] Cannot create hsr debugfs directory [ 1400.045987][T14427] usb 5-1: Using ep0 maxpacket: 8 [ 1400.089438][T15778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.099973][T15778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.168166][T15778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.231955][T15778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.311296][T15778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.373896][T15778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.467410][T15778] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1400.700245][T14427] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1400.752779][T14427] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1400.779085][T14427] usb 5-1: can't read configurations, error -71 [ 1401.339025][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1401.534493][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1401.701119][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.724208][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.751830][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1401.789917][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.828035][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1401.846686][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.549027][T15679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1402.924504][T15679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1403.036000][T15679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1403.333576][T15679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1404.545751][ T13] bridge_slave_1: left allmulticast mode [ 1404.596081][ T13] bridge_slave_1: left promiscuous mode [ 1404.608450][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.639653][ T13] bridge_slave_0: left allmulticast mode [ 1404.645584][ T13] bridge_slave_0: left promiscuous mode [ 1404.664045][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.406069][ T13] bond1 (unregistering): Released all slaves [ 1405.488127][ T13] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1405.581733][ T13] bond0 (unregistering): Released all slaves [ 1405.704718][ T13] bond2 (unregistering): Released all slaves [ 1405.862467][ T13] bond3 (unregistering): Released all slaves [ 1406.305093][T15682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1406.427151][ T13] tipc: Left network mode [ 1406.428372][T15682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1406.665755][T15682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1406.776125][T15682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1407.067480][ T9] usb 4-1: usb_control_msg returned -110 [ 1407.111696][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1407.479037][ T13] hsr_slave_0: left promiscuous mode [ 1407.502018][ T13] hsr_slave_1: left promiscuous mode [ 1407.539780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.582528][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.218934][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1408.233856][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1408.270045][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1408.314631][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1408.352386][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1408.415285][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.436820][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.458915][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1408.518966][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1408.546850][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.581177][ T9] usb 5-1: config 0 descriptor?? [ 1409.191624][ T9] plantronics 0003:047F:FFFF.004B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1409.672652][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.686512][ T13] IPVS: stop unused estimator thread 0... [ 1409.717955][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.987179][T15679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.988015][T14991] usb 4-1: USB disconnect, device number 105 [ 1410.487907][T15679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.754864][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.762616][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.986814][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.994577][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.257114][T15682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.298758][T14991] usb 5-1: USB disconnect, device number 3 [ 1411.867402][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.036832][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.044273][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.362724][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.370270][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.062387][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1414.113965][ T8829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1414.230195][T15684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1414.240998][T15684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1414.251122][T15684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1414.263744][T15684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1414.275487][T15684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1414.290208][ T8829] usb 5-1: Using ep0 maxpacket: 8 [ 1414.357428][T15844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.368825][T15844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.434318][T15844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.448388][T15844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.472911][T15844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.541562][T15844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.560653][T15679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.689139][T15844] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1414.830137][ T8829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1414.919507][ T8829] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1414.927352][ T8829] usb 5-1: can't read configurations, error -71 [ 1416.036158][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.327283][T15684] Bluetooth: hci2: command tx timeout [ 1416.928005][T15679] veth0_vlan: entered promiscuous mode [ 1416.949632][ T8829] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1417.162131][T15679] veth1_vlan: entered promiscuous mode [ 1417.191234][ T8829] usb 4-1: Using ep0 maxpacket: 8 [ 1417.262429][ T8829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1417.271322][T15850] chnl_net:caif_netlink_parms(): no params data found [ 1417.314299][ T8829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1417.362270][ T8829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1417.396824][ T8829] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.471237][ T8829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1417.489874][ T8829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.400719][T15684] Bluetooth: hci2: command tx timeout [ 1418.771735][T15679] veth0_macvtap: entered promiscuous mode [ 1419.050266][T15679] veth1_macvtap: entered promiscuous mode [ 1419.824193][T15679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.873672][T13119] vxlan0: left allmulticast mode [ 1419.890708][T13119] bridge0: port 3(vxlan0) entered disabled state [ 1419.940505][T13119] bridge_slave_1: left allmulticast mode [ 1419.947131][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.993121][T13119] bridge_slave_0: left allmulticast mode [ 1420.026818][T13119] bridge_slave_0: left promiscuous mode [ 1420.043530][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.478979][T15684] Bluetooth: hci2: command tx timeout [ 1420.536864][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 1420.832543][T13119] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1420.993101][T13119] bond1 (unregistering): Released all slaves [ 1421.141179][T13119] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1421.212664][T13119] bond0 (unregistering): Released all slaves [ 1421.287345][T13119] bond2 (unregistering): Released all slaves [ 1421.337096][T13119] bond3 (unregistering): Released all slaves [ 1421.676746][T15850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.693251][T15850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.716435][T15850] bridge_slave_0: entered allmulticast mode [ 1421.742035][T15850] bridge_slave_0: entered promiscuous mode [ 1421.786751][T15679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.814676][T13119] tipc: Left network mode [ 1421.917838][T15850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.950367][T15850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.958087][T15850] bridge_slave_1: entered allmulticast mode [ 1422.001663][T15850] bridge_slave_1: entered promiscuous mode [ 1422.434535][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.506814][T15850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.559104][T15684] Bluetooth: hci2: command tx timeout [ 1422.592230][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.602158][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.619029][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1422.643847][ T8829] usb 4-1: usb_control_msg returned -110 [ 1422.653426][ T8829] usbtmc 4-1:16.0: can't read capabilities [ 1422.682648][T15850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.809513][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1422.889709][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.912878][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.957896][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.968485][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.003998][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.004097][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.061185][T13119] hsr_slave_0: left promiscuous mode [ 1423.070172][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.103559][T13119] hsr_slave_1: left promiscuous mode [ 1423.132599][T13119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.152897][T15918] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1423.161739][T13119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.749005][T13119] team0 (unregistering): Port device team_slave_1 removed [ 1423.802069][T13119] team0 (unregistering): Port device team_slave_0 removed [ 1423.820911][ T8829] usb 4-1: USB disconnect, device number 106 [ 1424.206949][T15923] loop3: detected capacity change from 0 to 2048 [ 1424.259136][T15923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1424.433260][T15850] team0: Port device team_slave_0 added [ 1424.488502][T15850] team0: Port device team_slave_1 added [ 1424.497407][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1424.543002][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1424.574906][ T9] usb 5-1: can't read configurations, error -71 [ 1425.083300][T15850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.094705][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.123358][T15850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.162871][T15682] veth0_vlan: entered promiscuous mode [ 1425.212967][T15850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.230127][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.270017][T15850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.784083][T15682] veth1_vlan: entered promiscuous mode [ 1426.008474][T15850] hsr_slave_0: entered promiscuous mode [ 1426.034304][T15850] hsr_slave_1: entered promiscuous mode [ 1427.213416][T15682] veth0_macvtap: entered promiscuous mode [ 1427.377057][T15682] veth1_macvtap: entered promiscuous mode [ 1428.099631][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.315092][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.617043][ T178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.662063][ T178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.737670][ T178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.783075][ T77] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.958440][T15850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1429.121723][T15850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1429.238274][T15850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1429.359326][T15850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1430.559721][ T5073] Bluetooth: hci1: command 0x0406 tx timeout [ 1431.105468][T15973] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3059'. [ 1431.729183][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.737200][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.887062][T15850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.325737][T15850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.360373][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.397891][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.446072][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.453668][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.674413][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.682607][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.250666][T15850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1433.348134][T15850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.663029][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.681043][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.868158][T15850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.187684][T15647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.224492][T15647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.545140][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.620360][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.906935][T15850] veth0_vlan: entered promiscuous mode [ 1439.141077][T15850] veth1_vlan: entered promiscuous mode [ 1439.856417][T15850] veth0_macvtap: entered promiscuous mode [ 1439.967128][T15850] veth1_macvtap: entered promiscuous mode [ 1440.435341][T15850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.655329][T15850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.982598][T15963] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.069383][T15647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.296449][T15647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.449275][T15755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.469074][T11498] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1441.563769][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1441.573387][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1441.582739][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1441.614895][ T5073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1441.630982][ T5073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1441.668801][T11498] usb 7-1: Using ep0 maxpacket: 8 [ 1441.714944][T11498] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1441.739202][T11498] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1441.764059][T11498] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1441.808761][T11498] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.880511][T11498] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1441.958759][T11498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.278995][T14991] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1442.498932][T14991] usb 5-1: Using ep0 maxpacket: 8 [ 1442.612096][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.711861][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.875783][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.015054][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.100397][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.192435][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.371595][T16050] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1443.594756][T14991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1443.679043][T15684] Bluetooth: hci0: command tx timeout [ 1443.733050][T14991] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1443.779262][T14991] usb 5-1: can't read configurations, error -71 [ 1444.072708][T11498] usb 7-1: usb_control_msg returned -71 [ 1444.099446][T11498] usbtmc 7-1:16.0: can't read capabilities [ 1444.222566][T11498] usb 7-1: USB disconnect, device number 2 [ 1444.543344][ T5831] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1444.765687][ T5831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1444.798938][ T5831] usb 6-1: config 0 has no interface number 0 [ 1444.845256][ T5831] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1444.891446][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.923228][ T5831] usb 6-1: Product: syz [ 1444.971616][ T5831] usb 6-1: Manufacturer: syz [ 1445.009062][ T5831] usb 6-1: SerialNumber: syz [ 1445.067495][ T5831] usb 6-1: config 0 descriptor?? [ 1445.154435][ T5831] usb 6-1: selecting invalid altsetting 1 [ 1445.200820][ T5831] dvb_ttusb_budget: ttusb_init_controller: error [ 1445.207383][T16045] chnl_net:caif_netlink_parms(): no params data found [ 1445.255317][ T5831] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1445.591209][ T178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.774561][T15684] Bluetooth: hci0: command tx timeout [ 1445.805899][ T5831] DVB: Unable to find symbol stv0299_attach() [ 1446.213676][ T5831] DVB: Unable to find symbol tda8083_attach() [ 1446.237952][ T178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.245239][ T5831] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1446.374876][ T5831] usb 6-1: USB disconnect, device number 2 [ 1446.639432][ T178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.053608][ T178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.846490][T15684] Bluetooth: hci0: command tx timeout [ 1448.230615][T16086] netlink: 'syz.5.3068': attribute type 13 has an invalid length. [ 1448.669444][T16086] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1448.764027][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.809538][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.871939][T16045] bridge_slave_0: entered allmulticast mode [ 1448.922092][T16045] bridge_slave_0: entered promiscuous mode [ 1449.046173][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.087443][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.123014][T16045] bridge_slave_1: entered allmulticast mode [ 1449.153790][T16045] bridge_slave_1: entered promiscuous mode [ 1449.345005][ T178] bridge_slave_1: left allmulticast mode [ 1449.359492][ T178] bridge_slave_1: left promiscuous mode [ 1449.365732][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.522600][ T178] bridge_slave_0: left allmulticast mode [ 1449.557433][ T178] bridge_slave_0: left promiscuous mode [ 1449.594233][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.925582][T15684] Bluetooth: hci0: command tx timeout [ 1450.103208][T16108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1451.166761][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.217962][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.240968][ T178] bond0 (unregistering): Released all slaves [ 1451.651734][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.731611][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.340169][T16045] team0: Port device team_slave_0 added [ 1452.684148][T16045] team0: Port device team_slave_1 added [ 1452.891878][ T178] hsr_slave_0: left promiscuous mode [ 1452.914009][ T178] hsr_slave_1: left promiscuous mode [ 1452.940915][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.948423][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.018781][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.039289][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.079602][ T178] veth1_macvtap: left promiscuous mode [ 1453.085235][ T178] veth0_macvtap: left promiscuous mode [ 1453.133224][ T178] veth1_vlan: left promiscuous mode [ 1453.149198][ T178] veth0_vlan: left promiscuous mode [ 1455.110860][ T178] team0 (unregistering): Port device team_slave_1 removed [ 1455.224736][ T178] team0 (unregistering): Port device team_slave_0 removed [ 1456.473574][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.483126][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.534675][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.657961][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.673060][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.716142][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.803756][T13119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.878167][T13119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.603500][T16045] hsr_slave_0: entered promiscuous mode [ 1457.701104][T16045] hsr_slave_1: entered promiscuous mode [ 1457.779979][T16045] debugfs: 'hsr0' already exists in 'hsr' [ 1457.785894][T16045] Cannot create hsr debugfs directory [ 1457.935586][T13119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.968834][T13119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.205276][T16045] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1460.497377][T16045] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1460.756038][T16045] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1460.921440][T16045] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1461.635719][ T5073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1461.673210][ T5073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1461.684139][ T5073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1461.780082][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1461.802113][ T5073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1463.956518][T15684] Bluetooth: hci1: command tx timeout [ 1464.241023][T16045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.623719][T16152] chnl_net:caif_netlink_parms(): no params data found [ 1464.805282][T16045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.206000][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.213550][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.814746][T15647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.822279][T15647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.003646][T15684] Bluetooth: hci1: command tx timeout [ 1466.013943][ T1330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.407199][ T1330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.712918][ T1330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.034851][ T1330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.082391][T15684] Bluetooth: hci1: command tx timeout [ 1468.168367][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.219951][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.249299][T16152] bridge_slave_0: entered allmulticast mode [ 1468.316500][T16152] bridge_slave_0: entered promiscuous mode [ 1468.411970][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.452852][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.509744][T16152] bridge_slave_1: entered allmulticast mode [ 1468.550336][T16152] bridge_slave_1: entered promiscuous mode [ 1469.529648][ T1330] bridge_slave_1: left allmulticast mode [ 1469.535414][ T1330] bridge_slave_1: left promiscuous mode [ 1469.572717][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.637437][ T1330] bridge_slave_0: left allmulticast mode [ 1469.651841][ T1330] bridge_slave_0: left promiscuous mode [ 1469.681673][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.159717][T15684] Bluetooth: hci1: command tx timeout [ 1470.796939][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.871082][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.913180][ T1330] bond0 (unregistering): Released all slaves [ 1471.015370][T16152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.182181][T16152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.941907][T16152] team0: Port device team_slave_0 added [ 1472.034139][T16152] team0: Port device team_slave_1 added [ 1473.343323][T16152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.399049][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.508091][T16152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.565714][T16152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.599331][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.711714][T16152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.961254][ T1330] hsr_slave_0: left promiscuous mode [ 1473.979854][ T1330] hsr_slave_1: left promiscuous mode [ 1473.998958][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.049041][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.085614][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.122195][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.212273][ T1330] veth1_macvtap: left promiscuous mode [ 1474.239604][ T1330] veth0_macvtap: left promiscuous mode [ 1474.254980][ T1330] veth1_vlan: left promiscuous mode [ 1474.275341][ T1330] veth0_vlan: left promiscuous mode [ 1474.350721][ C0] ===================================================== [ 1474.357950][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1474.366704][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1474.373103][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1474.380216][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1474.386272][ C0] sysvec_call_function_single+0x7c/0x90 [ 1474.392232][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1474.398381][ C0] pv_native_safe_halt+0x13/0x20 [ 1474.403564][ C0] default_idle+0xd/0x20 [ 1474.407991][ C0] arch_cpu_idle+0xd/0x20 [ 1474.412484][ C0] default_idle_call+0x3f/0x70 [ 1474.417497][ C0] do_idle+0x6ad/0xa10 [ 1474.421699][ C0] cpu_startup_entry+0x5f/0x80 [ 1474.426606][ C0] rest_init+0x1df/0x260 [ 1474.430968][ C0] start_kernel+0x6d1/0x8b0 [ 1474.435695][ C0] x86_64_start_reservations+0x28/0x30 [ 1474.441354][ C0] x86_64_start_kernel+0x139/0x140 [ 1474.446623][ C0] common_startup_64+0x13e/0x147 [ 1474.451731][ C0] [ 1474.454111][ C0] Local variable rf created at: [ 1474.459018][ C0] __schedule+0x3b/0x8640 [ 1474.463563][ C0] preempt_schedule_irq+0x50/0xa0 [ 1474.468722][ C0] [ 1474.471172][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1474.481901][ C0] Tainted: [L]=SOFTLOCKUP [ 1474.486324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1474.496487][ C0] ===================================================== [ 1474.503489][ C0] Disabling lock debugging due to kernel taint [ 1474.509720][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1474.516239][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1474.526905][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1474.532527][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1474.542710][ C0] Call Trace: [ 1474.546077][ C0] [ 1474.548994][ C0] __dump_stack+0x26/0x30 [ 1474.553490][ C0] dump_stack_lvl+0x50/0x1c0 [ 1474.558225][ C0] ? dump_stack+0x12/0x25 [ 1474.562705][ C0] dump_stack+0x1e/0x25 [ 1474.567004][ C0] vpanic+0x7b4/0x1430 [ 1474.571249][ C0] panic+0x15d/0x160 [ 1474.575340][ C0] kmsan_report+0x31a/0x320 [ 1474.580027][ C0] ? __msan_warning+0x1b/0x30 [ 1474.584866][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1474.591462][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1474.598737][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1474.604956][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 1474.610924][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1474.617229][ C0] ? pv_native_safe_halt+0x13/0x20 [ 1474.622501][ C0] ? default_idle+0xd/0x20 [ 1474.627073][ C0] ? arch_cpu_idle+0xd/0x20 [ 1474.631739][ C0] ? default_idle_call+0x3f/0x70 [ 1474.636856][ C0] ? do_idle+0x6ad/0xa10 [ 1474.641222][ C0] ? cpu_startup_entry+0x5f/0x80 [ 1474.646293][ C0] ? rest_init+0x1df/0x260 [ 1474.650860][ C0] ? start_kernel+0x6d1/0x8b0 [ 1474.655695][ C0] ? x86_64_start_reservations+0x28/0x30 [ 1474.661508][ C0] ? x86_64_start_kernel+0x139/0x140 [ 1474.666962][ C0] ? common_startup_64+0x13e/0x147 [ 1474.672254][ C0] ? native_apic_msr_write+0x15/0x70 [ 1474.677675][ C0] ? lapic_next_event+0x22/0x50 [ 1474.682692][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 1474.688246][ C0] ? clockevents_program_event+0x58d/0xcb0 [ 1474.694239][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1474.699558][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1474.704821][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1474.711326][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1474.716563][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1474.722502][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1474.727753][ C0] __msan_warning+0x1b/0x30 [ 1474.732423][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1474.738923][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1474.744208][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1474.751312][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1474.757376][ C0] sysvec_call_function_single+0x7c/0x90 [ 1474.763173][ C0] [ 1474.766169][ C0] [ 1474.769169][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1474.775310][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1474.781201][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 57 1a 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1474.800976][ C0] RSP: 0000:ffffffff92803d78 EFLAGS: 00000242 [ 1474.807178][ C0] RAX: ffff8881aa3ca000 RBX: ffffffff9282c980 RCX: 0000000000b39494 [ 1474.815347][ C0] RDX: ffff88823ea84e48 RSI: 0000000000000001 RDI: 000000000066f544 [ 1474.823425][ C0] RBP: ffffffff92803d78 R08: ffffea000000000f R09: 0000000000000007 [ 1474.831503][ C0] R10: ffff88823f18cdf7 R11: ffffffff8183f860 R12: 0000000000000000 [ 1474.839581][ C0] R13: 0000000000000000 R14: ffffffff9282d548 R15: 0000000000000000 [ 1474.847778][ C0] ? __pfx_read_tsc+0x10/0x10 [ 1474.852617][ C0] default_idle+0xd/0x20 [ 1474.857058][ C0] arch_cpu_idle+0xd/0x20 [ 1474.861552][ C0] default_idle_call+0x3f/0x70 [ 1474.866485][ C0] do_idle+0x6ad/0xa10 [ 1474.870682][ C0] ? do_idle+0xd/0xa10 [ 1474.874896][ C0] cpu_startup_entry+0x5f/0x80 [ 1474.879805][ C0] rest_init+0x1df/0x260 [ 1474.884173][ C0] start_kernel+0x6d1/0x8b0 [ 1474.888830][ C0] x86_64_start_reservations+0x28/0x30 [ 1474.894473][ C0] x86_64_start_kernel+0x139/0x140 [ 1474.899766][ C0] common_startup_64+0x13e/0x147 [ 1474.904902][ C0] [ 1474.908383][ C0] Kernel Offset: disabled [ 1474.912754][ C0] Rebooting in 86400 seconds..