last executing test programs: 30m24.843961717s ago: executing program 32 (id=17): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@noload}, {@delalloc}, {@grpjquota}, {@bsdgroups}]}, 0x0, 0x48e, &(0x7f0000000300)="$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") pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) epoll_create1(0x0) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket(0x400000000010, 0x3, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r4, 0x100000000) setns(r0, 0x20000000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000040)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 22m2.235685816s ago: executing program 1 (id=1571): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 22m1.249956916s ago: executing program 1 (id=1576): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, 0x0, 0x24048840) 22m1.060066801s ago: executing program 1 (id=1581): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ff8000) 22m0.703988632s ago: executing program 1 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x8890) 22m0.665345503s ago: executing program 1 (id=1584): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 21m59.567429117s ago: executing program 1 (id=1589): read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000002a480, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x9, 0xbd, 0x7}}) dup(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/186, 0xba, 0x400000f1) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x2000000, 0x0, 0x73130305, 0x33565347, 0x0, 0x0, 0x25, 0x0, 0x0, 0x7, 0x1}}) 21m58.553710897s ago: executing program 0 (id=1600): r0 = io_uring_setup(0x2be0, &(0x7f0000000000)={0x0, 0x6503, 0x10, 0x3, 0xffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x1300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) sendmsg$inet_sctp(r2, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x5, 0x30}, 0xc) r5 = dup(r2) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x2, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0xffcc) close_range(r0, 0xffffffffffffffff, 0x0) 21m58.48870409s ago: executing program 0 (id=1601): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, r0, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 21m58.388266403s ago: executing program 0 (id=1602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 21m57.16910984s ago: executing program 0 (id=1608): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 21m55.709234644s ago: executing program 0 (id=1628): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 21m55.580691698s ago: executing program 0 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000040800034000000c1a080003400000000908"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800400010062726964676500000400028008001f000c000000"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x80, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014010}, 0x8000) 21m55.406055444s ago: executing program 3 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 21m55.330400516s ago: executing program 3 (id=1632): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 21m55.18815341s ago: executing program 3 (id=1633): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) eventfd2(0xa, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) 21m55.076742574s ago: executing program 3 (id=1634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 21m54.066313065s ago: executing program 3 (id=1637): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 21m53.036364396s ago: executing program 3 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, r1, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 21m44.238534724s ago: executing program 33 (id=1589): read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000002a480, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x9, 0xbd, 0x7}}) dup(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/186, 0xba, 0x400000f1) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x2000000, 0x0, 0x73130305, 0x33565347, 0x0, 0x0, 0x25, 0x0, 0x0, 0x7, 0x1}}) 21m40.476968118s ago: executing program 34 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000040800034000000c1a080003400000000908"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800400010062726964676500000400028008001f000c000000"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x80, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014010}, 0x8000) 21m38.007225913s ago: executing program 35 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, r1, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 20m26.685103633s ago: executing program 5 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a9", 0xb2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb8", 0xce}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20m26.361678233s ago: executing program 4 (id=1825): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 20m26.072115632s ago: executing program 5 (id=1870): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) close(0x4) 20m25.943691215s ago: executing program 4 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 20m25.732198972s ago: executing program 4 (id=1873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x7ffffffe}) 20m25.709715343s ago: executing program 5 (id=1875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 20m25.603629626s ago: executing program 5 (id=1876): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20m25.527996238s ago: executing program 4 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 20m24.846940849s ago: executing program 4 (id=1880): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 20m24.716101843s ago: executing program 5 (id=1881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1ac}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b8, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1042, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 20m24.548365169s ago: executing program 4 (id=1882): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 20m24.052642483s ago: executing program 5 (id=1887): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) close(0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000008100), 0x4) 20m23.723120243s ago: executing program 36 (id=1887): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) close(0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000008100), 0x4) 20m23.719123464s ago: executing program 7 (id=1890): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 20m22.665473136s ago: executing program 7 (id=1892): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0xfe26) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x4000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, 0x32) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000", 0x1b) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') ioctl$vim2m_VIDIOC_EXPBUF(r1, 0x40045613, &(0x7f0000000180)={0x1, 0x8, 0x4, 0x80880}) sendto(r0, &(0x7f0000000280)="32ce234738004cd4940d9cacb0830e77768212b6b1364ac8a4eb05540555b2fa6aa9d7f7c353364036896d4bed95cc0e54472a45e268c949e113504a7a7cde21150511018599f02dc79b6d89719c15df76141ab3f0c485349bd4a7dcff941c5590a24cc7c9d15fb2e58ba5f8289360c5af33a409c353f947c955221655507ea597c1b2fedb7c1e", 0x87, 0x1, &(0x7f0000000340)=@ax25={{0x3, @default, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}, 0x80) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0xa0fc, 0x181102) ioctl$BLKREPORTZONE(r7, 0xc0101282, 0x0) sendmmsg(r0, &(0x7f0000004380), 0x0, 0x0) 20m21.325114296s ago: executing program 7 (id=1897): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}}, 0x24000004) 20m21.087684874s ago: executing program 7 (id=1898): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de92684a3e1ac765967623f0244a41cb9d7a1441909a5679b5fe088a4422e77db13eb1f37", 0x8a}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a6562ac1a1c75a04", 0xaa}, {&(0x7f0000000840)="37df6e48d5abd55f6b04a4aca97bba51c87aa3f6b01e3fbe283d8019f748b5ad67ae505cd6b7e6868ff81aa817ba4434821cc6132e114e4cec2353e912d23d05a8421a10a2a72a5d514a05235ca57e714888fdbee42d671f3c37118de58e08568a519fd7c541387124cbe3725868df6ba7659b410ae61bcaaab7005ae043d4765fab82a0acf20ed173c6bd880ecbb026504dfc1ee999a7c356a9e3e22eaa8c495ee66bc7029f2b420d0da2d6ff06cbe68fbc2f1cdc97c92d0eb4cbfb031cc6978a27d793227f0569d45274a920cc4eb24c565a16da6ee9f953455528b9b6062bfa0896b597ff23fde72e877a9fb0", 0xee}], 0x3}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x352}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 20m20.984390667s ago: executing program 7 (id=1899): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 20m20.54656488s ago: executing program 7 (id=1900): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 20m9.339768491s ago: executing program 37 (id=1882): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 20m5.458741959s ago: executing program 38 (id=1900): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 13.760040042s ago: executing program 8 (id=5133): syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019300)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0, 0xff, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f00000003c0)="e097566f5bec64", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd7d, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r4, 0x1, {0x1, 0xf0, 0x4}, 0x1}, 0x18) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ftruncate(0xffffffffffffffff, 0x200000) fsmount(0xffffffffffffffff, 0x0, 0x19) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) 12.349956367s ago: executing program 8 (id=5136): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@iv={0x80, 0x117, 0x2, 0x69, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907"}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9", 0xe7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.292111088s ago: executing program 6 (id=5137): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0, 0x1f}, 0x4000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x24) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbd9df250f0000002c0007800c0003000200000000000000080002007f00000008000100040000000c000400ff0f00000000000004000180"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1098c1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x2, 0x1a1064, 0x3cac79}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f00000000c0)={0x18, r7}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000100)={0xfef0, 0x6, r7}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x1a0, 0x358, 0x358, 0x1a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffff00, 0xff], 0x4e22, 0x4e20, 0x4e22, 0x4e1e, 0x8000, 0x1, 0x9, 0x1, 0xf7}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x5}, {0x1, 0x4, 0x1}, {0x0, 0x3, 0x4}, 0xaa2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 9.706711191s ago: executing program 6 (id=5138): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a9", 0xb2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb8", 0xce}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.644003795s ago: executing program 2 (id=5140): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x0, 0x56}, 0x28) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1e, 0x0, &(0x7f0000000080)="2571a7211f24377cb9633ca05384c3802bdbe76d2689474c6588a8000000", 0x0, 0x80d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0x4}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r5) 8.001323385s ago: executing program 6 (id=5142): syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(0x0, 0x3, 0x100) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffffff6, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.963755266s ago: executing program 8 (id=5143): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0xe0) 7.83597922s ago: executing program 2 (id=5145): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12e", 0x78, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.90981831s ago: executing program 8 (id=5146): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0, 0x1f}, 0x4000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x24) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbd9df250f0000002c0007800c0003000200000000000000080002007f00000008000100040000000c000400ff0f00000000000004000180"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1098c1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x2, 0x1a1064, 0x3cac79}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f00000000c0)={0x18, r7}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000100)={0xfef0, 0x6, r7}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x1a0, 0x358, 0x358, 0x1a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffff00, 0xff], 0x4e22, 0x4e20, 0x4e22, 0x4e1e, 0x8000, 0x1, 0x9, 0x1, 0xf7}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x5}, {0x1, 0x4, 0x1}, {0x0, 0x3, 0x4}, 0xaa2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 6.872207481s ago: executing program 9 (id=5147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x125800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.781100114s ago: executing program 8 (id=5148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010031bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c00"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x83de, 0x81, 0x603, 0x3, 0x1ff, 0x7, 0xdff8, 0xe, r8}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 6.733887495s ago: executing program 9 (id=5149): syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x100) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0xfffffff6, 0x9) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e23"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 6.60128595s ago: executing program 2 (id=5150): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 3.632585615s ago: executing program 9 (id=5151): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a9", 0xb2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb8", 0xce}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.542323798s ago: executing program 2 (id=5152): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=[@iv={0x80, 0x117, 0x2, 0x69, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907"}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9", 0xe7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.1397022s ago: executing program 6 (id=5153): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x0, 0x56}, 0x28) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1e, 0x0, &(0x7f0000000080)="2571a7211f24377cb9633ca05384c3802bdbe76d2689474c6588a8000000", 0x0, 0x80d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0x4}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r5) 2.478403401s ago: executing program 8 (id=5154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getrlimit(0xf, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_usb_connect$midi(0x2, 0x40, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0900009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf250500000014004680040004000400010008000200000000000c00018008000100", @ANYRES32=r11, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) 2.413513674s ago: executing program 9 (id=5155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f0000000100)}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 2.347467365s ago: executing program 2 (id=5156): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) kexec_load(0x2, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb403, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.927347769s ago: executing program 6 (id=5157): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0, 0x1f}, 0x4000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x24) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbd9df250f0000002c0007800c0003000200000000000000080002007f00000008000100040000000c000400ff0f00000000000004000180"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1098c1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x2, 0x1a1064, 0x3cac79}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f00000000c0)={0x18, r7}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000100)={0xfef0, 0x6, r7}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x1a0, 0x358, 0x358, 0x1a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffff00, 0xff], 0x4e22, 0x4e20, 0x4e22, 0x4e1e, 0x8000, 0x1, 0x9, 0x1, 0xf7}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x5}, {0x1, 0x4, 0x1}, {0x0, 0x3, 0x4}, 0xaa2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 129.160046ms ago: executing program 9 (id=5158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x125800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 128.310666ms ago: executing program 2 (id=5159): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 65.909958ms ago: executing program 6 (id=5160): syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x100) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0xfffffff6, 0x9) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e23"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 0s ago: executing program 9 (id=5161): syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(0x0, 0x3, 0x100) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffffff6, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): g attributes in process `syz.6.4186'. [ 1524.288453][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.297950][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.307093][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.316245][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.325375][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.334491][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.343716][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1524.354271][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1525.035751][T22668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1528.441796][T22695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1528.551678][T22700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1532.555381][T22744] ip6erspan0: left promiscuous mode [ 1533.057772][T22750] __nla_validate_parse: 2 callbacks suppressed [ 1533.057800][T22750] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4214'. [ 1534.309000][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1540.405769][T22819] binder: 22815:22819 ioctl 4018620d 0 returned -22 [ 1541.383039][T22823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1545.755154][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.761503][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.685915][T22898] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1546.695306][T22898] cramfs: wrong magic [ 1546.706600][T22898] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1546.866343][T19512] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1547.663494][T19512] usb 10-1: device descriptor read/64, error -71 [ 1547.933308][T19512] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1548.533009][T19512] usb 10-1: device descriptor read/64, error -71 [ 1548.661898][T19512] usb usb10-port1: attempt power cycle [ 1549.148603][T19512] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1549.344150][T19512] usb 10-1: device descriptor read/8, error -71 [ 1549.657098][T22921] fuse: Invalid rootmode [ 1549.795869][T19512] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1549.943050][T19512] usb 10-1: device descriptor read/8, error -71 [ 1550.072858][T19512] usb usb10-port1: unable to enumerate USB device [ 1550.602100][T22942] ERROR: device name not specified. [ 1551.111715][T22942] netlink: 'syz.2.4272': attribute type 1 has an invalid length. [ 1551.360918][T22942] bond4: entered promiscuous mode [ 1551.366404][T22942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1553.360606][ T5842] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1553.570153][ T5842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1553.597759][ T5842] usb 7-1: config 12 has an invalid interface number: 117 but max is 0 [ 1553.619184][ T5842] usb 7-1: config 12 has no interface number 0 [ 1553.629944][ T5842] usb 7-1: config 12 interface 117 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1553.651739][ T5842] usb 7-1: config 12 interface 117 has no altsetting 0 [ 1553.684038][ T5842] usb 7-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=3a.f3 [ 1553.717868][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.747014][ T5842] usb 7-1: Product: syz [ 1553.757142][ T5842] usb 7-1: Manufacturer: syz [ 1553.767301][ T5842] usb 7-1: SerialNumber: syz [ 1554.147172][T22977] SET target dimension over the limit! [ 1554.163962][T22977] gfs2: path_lookup on  returned error -2 [ 1555.145609][ T5842] kaweth 7-1:12.117: couldn't find required endpoints [ 1555.262210][ T5842] usb 7-1: USB disconnect, device number 14 [ 1555.977101][T22994] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1555.985696][T22994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1556.572431][T23000] ERROR: device name not specified. [ 1556.706993][T23001] netlink: 'syz.6.4285': attribute type 1 has an invalid length. [ 1556.905721][T23001] bond1: entered promiscuous mode [ 1556.912035][T23001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1557.590447][T23001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1557.597646][T23001] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1557.607802][T23001] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1557.620240][T23001] bond1: (slave vti0): making interface the new active one [ 1557.627485][T23001] vti0: entered promiscuous mode [ 1557.634079][T23001] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1559.501480][T23014] bond1: left promiscuous mode [ 1559.519809][T23014] vti0: left promiscuous mode [ 1560.447616][T23034] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1560.455980][T23034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1560.847534][T19512] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1561.056815][T19512] usb 7-1: Using ep0 maxpacket: 8 [ 1561.077789][T19512] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1561.113089][T19512] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.152882][T19512] usb 7-1: Product: syz [ 1561.172673][T19512] usb 7-1: Manufacturer: syz [ 1561.213658][T19512] usb 7-1: SerialNumber: syz [ 1561.258467][T23046] netlink: 'syz.8.4298': attribute type 1 has an invalid length. [ 1561.370011][T23046] bond8: entered promiscuous mode [ 1561.381241][T23046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1561.547659][T23044] orangefs_mount: mount request failed with -4 [ 1562.262690][T19512] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1562.285185][T19512] usb 7-1: clock source 0 is not valid, cannot use [ 1562.773416][T19512] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 1562.850220][T19512] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1562.893093][T19512] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1562.913391][T19512] usb 7-1: clock source 0 is not valid, cannot use [ 1562.940251][T19512] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 1562.959771][T19512] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1563.310727][T23065] (null): rxe_set_mtu: Set mtu to 256 [ 1563.396261][T23065] rdma_rxe: rxe_newlink: failed to add lo [ 1563.457673][T19512] usb 7-1: USB disconnect, device number 15 [ 1563.554515][T23064] netlink: 'syz.9.4303': attribute type 13 has an invalid length. [ 1563.606453][T23064] gretap0: refused to change device tx_queue_len [ 1563.613301][T23064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1563.629323][ T5842] lo speed is unknown, defaulting to 1000 [ 1563.738897][T23069] udevd[23069]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.412781][T23091] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4311'. [ 1568.433926][T23121] tmpfs: Bad value for 'mpol' [ 1568.554345][T23125] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1568.564245][T23125] cramfs: wrong magic [ 1572.971732][ T28] audit: type=1800 audit(1781940335.969:306): pid=23135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4322" name="bus" dev="ramfs" ino=73594 res=0 errno=0 [ 1573.203335][T23167] ieee802154 phy0 wpan0: encryption failed: -22 [ 1575.310630][T23192] netlink: 'syz.9.4331': attribute type 1 has an invalid length. [ 1575.597742][T23192] bond6: entered promiscuous mode [ 1575.654664][T23192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1575.834243][T23188] orangefs_mount: mount request failed with -4 [ 1577.033332][T23209] xt_connbytes: Forcing CT accounting to be enabled [ 1580.389576][T23247] (null): rxe_set_mtu: Set mtu to 256 [ 1580.395202][T23247] rdma_rxe: rxe_newlink: failed to add lo [ 1580.901332][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1583.926319][T23286] (null): rxe_set_mtu: Set mtu to 256 [ 1583.959234][T23286] rdma_rxe: rxe_newlink: failed to add lo [ 1584.320164][T23290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1584.394981][T19512] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1584.851387][T19512] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1584.908824][T19512] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.939470][T19512] usb 10-1: config 0 has no interface number 0 [ 1584.958662][T19512] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1584.974908][T19512] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.004321][T19512] usb 10-1: Product: syz [ 1585.019246][T19512] usb 10-1: Manufacturer: syz [ 1585.029603][T19512] usb 10-1: SerialNumber: syz [ 1585.052884][T19512] usb 10-1: config 0 descriptor?? [ 1585.068328][T19512] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1585.082405][T19512] usb 10-1: No valid video chain found. [ 1585.588679][ T28] audit: type=1326 audit(1781940348.605:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23285 comm="syz.9.4358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f055939ce59 code=0x0 [ 1585.742578][T19512] usb 10-1: USB disconnect, device number 47 [ 1587.957828][T23331] overlayfs: failed to resolve './file0': -2 [ 1588.243751][T23339] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4369'. [ 1589.829658][T23349] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1589.838484][T23349] cramfs: wrong magic [ 1589.848203][T23349] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4370'. [ 1591.515937][T23366] random: crng reseeded on system resumption [ 1592.545835][T23368] overlayfs: failed to resolve './file0': -2 [ 1593.446625][T23384] NILFS (nullb0): couldn't find nilfs on the device [ 1594.159636][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4382'. [ 1594.676894][T23393] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1594.687097][T23393] cramfs: wrong magic [ 1594.697927][T23393] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4383'. [ 1597.590781][T23429] netlink: 'syz.9.4394': attribute type 1 has an invalid length. [ 1597.938178][T23429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1598.079483][T23439] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1598.088993][T23439] cramfs: wrong magic [ 1598.099350][T23439] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4395'. [ 1599.387849][ T5842] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1599.596433][ T5842] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1599.682954][ T5842] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.788351][ T5842] usb 7-1: config 0 has no interface number 0 [ 1601.192753][ T5842] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1601.289415][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.367989][ T5842] usb 7-1: Product: syz [ 1601.400851][ T5842] usb 7-1: Manufacturer: syz [ 1601.436322][ T5842] usb 7-1: SerialNumber: syz [ 1601.524836][ T5842] usb 7-1: config 0 descriptor?? [ 1601.674932][ T5842] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1601.689234][ T5842] usb 7-1: No valid video chain found. [ 1601.847586][T23462] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4403'. [ 1602.331071][ T28] audit: type=1326 audit(1781940365.104:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23448 comm="syz.6.4399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411859ce59 code=0x0 [ 1602.727577][ T27] usb 7-1: USB disconnect, device number 16 [ 1603.310017][T23475] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 1603.382396][T23475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1604.959062][T23491] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1604.968339][T23491] cramfs: wrong magic [ 1607.161614][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.168163][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.915880][T23538] bond6: left promiscuous mode [ 1611.185323][T23464] syz.8.4403 (23464): drop_caches: 1 [ 1611.214853][T23462] syz.8.4403 (23462): drop_caches: 1 [ 1611.841405][ T9652] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1612.077399][ T9652] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1612.158138][ T9652] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.270033][ T9652] usb 7-1: config 0 has no interface number 0 [ 1612.387701][ T9652] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1612.477846][ T9652] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.566296][ T9652] usb 7-1: Product: syz [ 1612.613556][ T9652] usb 7-1: Manufacturer: syz [ 1612.666512][ T9652] usb 7-1: SerialNumber: syz [ 1612.824258][ T9652] usb 7-1: config 0 descriptor?? [ 1613.000583][ T9652] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1613.077504][ T9652] usb 7-1: No valid video chain found. [ 1614.066211][T14418] usb 7-1: USB disconnect, device number 17 [ 1614.088031][ T28] audit: type=1326 audit(1781940376.439:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23540 comm="syz.6.4422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411859ce59 code=0x0 [ 1615.603067][T23578] xt_connbytes: Forcing CT accounting to be enabled [ 1617.028702][T14418] IPVS: starting estimator thread 0... [ 1617.066901][T23593] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1617.101360][T23593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.108724][T23593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.116365][T23593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.123726][T23593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.153541][T23594] IPVS: using max 18 ests per chain, 43200 per kthread [ 1617.868876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.881101][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1618.364581][T23613] tap0: tun_chr_ioctl cmd 2147767520 [ 1618.464313][T23620] overlayfs: overlapping lowerdir path [ 1620.276191][T23648] tmpfs: Unknown parameter '01777777777777777777777' [ 1620.674974][T23660] tap0: tun_chr_ioctl cmd 2147775574 [ 1620.967278][T23667] overlayfs: overlapping lowerdir path [ 1622.073787][T23679] xt_connbytes: Forcing CT accounting to be enabled [ 1622.454430][T23682] netlink: 'syz.6.4456': attribute type 1 has an invalid length. [ 1623.008532][T23690] (null): rxe_set_mtu: Set mtu to 256 [ 1623.017638][T23690] rdma_rxe: rxe_newlink: failed to add lo [ 1623.454725][T23682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1623.507967][T23690] netlink: 'syz.2.4458': attribute type 13 has an invalid length. [ 1623.777632][T23690] gretap0: refused to change device tx_queue_len [ 1623.804897][T23690] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1624.020389][T23702] overlayfs: overlapping lowerdir path [ 1627.880986][T14667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1627.913628][T14667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1627.927563][T14667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1627.947369][T14667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1627.958393][T14667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1627.965970][T14667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1627.968291][T23747] netlink: 'syz.6.4480': attribute type 1 has an invalid length. [ 1628.117212][T23747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1628.187475][T23750] lo speed is unknown, defaulting to 1000 [ 1628.596967][T23750] chnl_net:caif_netlink_parms(): no params data found [ 1628.947141][T23750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.955919][T23750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.963698][T23750] bridge_slave_0: entered allmulticast mode [ 1628.972931][T23750] bridge_slave_0: entered promiscuous mode [ 1628.984385][T23750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.992871][T23750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.000423][T23750] bridge_slave_1: entered allmulticast mode [ 1629.008599][T23750] bridge_slave_1: entered promiscuous mode [ 1629.067973][T23750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.080710][T23750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.175384][T23750] team0: Port device team_slave_0 added [ 1629.195202][T23750] team0: Port device team_slave_1 added [ 1629.266134][T23750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.273479][T23750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1629.307321][T23750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.340014][T23750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.347187][T23750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1629.373338][T23750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.105688][ T9853] Bluetooth: hci2: command tx timeout [ 1630.619147][T23750] hsr_slave_0: entered promiscuous mode [ 1630.654530][T23750] hsr_slave_1: entered promiscuous mode [ 1630.671950][T23750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1630.679672][T23750] Cannot create hsr debugfs directory [ 1631.296405][T23750] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.381127][T23750] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.446520][T23750] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.509728][T23750] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.847619][T23750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1631.869840][T23750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1631.906553][T23750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1631.926132][T23750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1632.098140][T23750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.181872][ T9853] Bluetooth: hci2: command tx timeout [ 1632.191827][T23750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.213244][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.220477][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.791719][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.798906][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.430623][T23750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.105616][T23750] veth0_vlan: entered promiscuous mode [ 1634.125519][T23750] veth1_vlan: entered promiscuous mode [ 1634.171829][T23750] veth0_macvtap: entered promiscuous mode [ 1634.214242][T23750] veth1_macvtap: entered promiscuous mode [ 1634.234257][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1634.245865][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.260321][ T9853] Bluetooth: hci2: command tx timeout [ 1634.263596][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1634.287245][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.297577][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1634.308457][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.321831][T23750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.333805][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.360087][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.374523][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.385075][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.395216][T23750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.405722][T23750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.439665][T23750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.488941][T23750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.500057][T23750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.520262][T23750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.529009][T23750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.927556][ T9005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.943439][ T9005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.999738][T14428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.016845][T14428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.057077][T23849] tmpfs: Bad value for 'mpol' [ 1635.187790][T23851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1635.640028][T23855] netlink: 'syz.8.4511': attribute type 1 has an invalid length. [ 1635.654991][T23857] input: syz1 as /devices/virtual/input/input15 [ 1636.107490][T14667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1636.120864][T14667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1636.131657][T14667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1636.141701][T14667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1636.151888][T14667] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1636.160700][T14667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1636.228842][T23864] lo speed is unknown, defaulting to 1000 [ 1636.349229][T14667] Bluetooth: hci2: command tx timeout [ 1636.685870][T23864] chnl_net:caif_netlink_parms(): no params data found [ 1636.855930][T23875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1637.012425][T23864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.058748][T23864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.066039][T23864] bridge_slave_0: entered allmulticast mode [ 1637.306685][T23885] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1637.315790][T23885] cramfs: wrong magic [ 1638.080491][T23864] bridge_slave_0: entered promiscuous mode [ 1638.119938][T23885] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1638.162996][T23885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.170324][T23885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.229345][T23864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.320875][T14667] Bluetooth: hci1: command tx timeout [ 1638.328109][T23864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.697444][T23864] bridge_slave_1: entered allmulticast mode [ 1638.737417][T23864] bridge_slave_1: entered promiscuous mode [ 1638.748056][T23888] netlink: 'syz.2.4521': attribute type 1 has an invalid length. [ 1638.836780][T23888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1638.943630][T23864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.998648][T23864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.051240][T23864] team0: Port device team_slave_0 added [ 1639.063419][T23864] team0: Port device team_slave_1 added [ 1639.100863][T23864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.108582][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.136908][T23864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.160365][T23864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.167458][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.194198][T23864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.323206][T23864] hsr_slave_0: entered promiscuous mode [ 1639.337194][T23864] hsr_slave_1: entered promiscuous mode [ 1639.348656][T23864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1639.356349][T23864] Cannot create hsr debugfs directory [ 1639.690654][T23904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1639.698486][T23864] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.825081][T23864] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.925072][T23864] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.196656][T23864] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.337042][T14667] Bluetooth: hci1: command tx timeout [ 1640.638870][T23864] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1640.654464][T23864] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1640.695464][T23864] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1640.716605][T23864] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1641.007650][T23864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.050981][T23864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.096205][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.103441][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.148995][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.156175][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.816288][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1641.935826][T23864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.998977][ T9] usb 7-1: device descriptor read/64, error -71 [ 1642.072721][T23925] netlink: 'syz.8.4531': attribute type 1 has an invalid length. [ 1642.266087][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1642.417354][T14667] Bluetooth: hci1: command tx timeout [ 1642.436371][ T9] usb 7-1: device descriptor read/64, error -71 [ 1642.556866][ T9] usb usb7-port1: attempt power cycle [ 1642.722156][T23934] xt_connbytes: Forcing CT accounting to be enabled [ 1643.025952][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1643.245780][ T9] usb 7-1: device descriptor read/8, error -71 [ 1643.402754][T23864] veth0_vlan: entered promiscuous mode [ 1643.458269][T23864] veth1_vlan: entered promiscuous mode [ 1643.539541][T23864] veth0_macvtap: entered promiscuous mode [ 1643.547184][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1643.571015][T23864] veth1_macvtap: entered promiscuous mode [ 1643.588326][ T9] usb 7-1: device descriptor read/8, error -71 [ 1643.650890][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.681946][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.702385][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.714287][ T9] usb usb7-port1: unable to enumerate USB device [ 1643.743710][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.764177][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.793674][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.824995][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.842541][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.895268][T23864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.917388][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.937300][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.985234][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.019311][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.055630][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.095541][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.117919][T23864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.139530][T23864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.171690][T23864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.213596][T23864] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.255008][T23864] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.263822][T23864] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.291139][T23864] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.495579][T14667] Bluetooth: hci1: command tx timeout [ 1644.598742][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.616714][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.704043][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.731757][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.224966][T23954] netlink: 'syz.9.4539': attribute type 1 has an invalid length. [ 1646.873014][ T9853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1646.886394][ T9853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1646.897507][ T9853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1646.930811][ T9853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1646.940857][ T9853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1646.948751][ T9853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1646.953419][ T5842] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1647.036523][T23961] lo speed is unknown, defaulting to 1000 [ 1647.146368][ T5842] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1647.174728][ T5842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1647.186550][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1647.224001][ T5842] usb 10-1: Product: syz [ 1647.231888][ T5842] usb 10-1: Manufacturer: syz [ 1647.263724][ T5842] usb 10-1: SerialNumber: syz [ 1647.392671][T23961] chnl_net:caif_netlink_parms(): no params data found [ 1647.671033][ T5842] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1648.157813][T23982] (null): rxe_set_mtu: Set mtu to 256 [ 1648.163914][T23982] rdma_rxe: rxe_newlink: failed to add lo [ 1648.241942][T23982] netlink: 'syz.6.4544': attribute type 13 has an invalid length. [ 1648.256851][ T9] usb 10-1: USB disconnect, device number 48 [ 1648.280540][ T9] usblp0: removed [ 1648.317121][T23982] gretap0: refused to change device tx_queue_len [ 1648.324893][T23982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1648.367710][T23961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.395824][T23961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.407300][T23961] bridge_slave_0: entered allmulticast mode [ 1648.425251][T23961] bridge_slave_0: entered promiscuous mode [ 1648.445251][T23961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.452419][T23961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.500643][T23961] bridge_slave_1: entered allmulticast mode [ 1648.524348][T23961] bridge_slave_1: entered promiscuous mode [ 1648.562943][ T5848] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1648.616229][T23961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.663826][T23961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.713143][ T5848] usb 9-1: device descriptor read/64, error -71 [ 1648.797664][T23961] team0: Port device team_slave_0 added [ 1648.835286][T23961] team0: Port device team_slave_1 added [ 1648.875693][T23961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.893404][T23961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.936622][T23961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.959113][T23961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.966833][T23961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.003243][ T5848] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1649.014520][T23961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.047385][T23993] netlink: 'syz.6.4547': attribute type 1 has an invalid length. [ 1649.058017][T14667] Bluetooth: hci3: command tx timeout [ 1649.127690][T23993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1649.196151][ T5848] usb 9-1: device descriptor read/64, error -71 [ 1649.248587][T23961] hsr_slave_0: entered promiscuous mode [ 1649.271754][T23961] hsr_slave_1: entered promiscuous mode [ 1649.312797][ T5848] usb usb9-port1: attempt power cycle [ 1649.322741][T23961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1649.352887][T23961] Cannot create hsr debugfs directory [ 1649.542895][T23999] loop6: detected capacity change from 0 to 4096 [ 1649.710597][T24002] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1649.753443][ T5848] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1649.833767][ T5848] usb 9-1: device descriptor read/8, error -71 [ 1650.142437][ T5848] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1650.202350][ T5848] usb 9-1: device descriptor read/8, error -71 [ 1650.344661][ T5848] usb usb9-port1: unable to enumerate USB device [ 1650.774453][T23961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1650.798996][T23961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1650.825186][T23961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1650.855372][T23961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1651.024596][T24015] input: syz1 as /devices/virtual/input/input16 [ 1651.133586][T14667] Bluetooth: hci3: command tx timeout [ 1651.191334][T23961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.290844][T23961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.334189][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.341372][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.370491][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.377747][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.741746][ T9] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1651.819238][T23961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.891475][ T5842] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1651.911878][T23961] veth0_vlan: entered promiscuous mode [ 1651.935632][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1651.945688][T23961] veth1_vlan: entered promiscuous mode [ 1651.958540][ T9] usb 9-1: config 1 has an invalid interface number: 48 but max is 1 [ 1651.970409][ T9] usb 9-1: config 1 has no interface number 1 [ 1651.984224][ T9] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1652.012502][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1652.027478][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1652.030029][T23961] veth0_macvtap: entered promiscuous mode [ 1652.040518][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.052841][ T9] usb 9-1: Product: syz [ 1652.057044][ T9] usb 9-1: Manufacturer: syz [ 1652.062637][T23961] veth1_macvtap: entered promiscuous mode [ 1652.072668][ T9] usb 9-1: SerialNumber: syz [ 1652.103427][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1652.117576][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.125312][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1652.148060][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.151286][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1652.161688][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.187828][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.201105][ T5842] usb 7-1: Product: syz [ 1652.205357][ T5842] usb 7-1: Manufacturer: syz [ 1652.210013][ T5842] usb 7-1: SerialNumber: syz [ 1652.215671][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.239193][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.250563][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.263834][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.274050][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.285113][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.297120][T23961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.334779][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 1652.342427][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.372103][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.372243][ T9] smsusb:smsusb_probe: board id=8, interface number 48 [ 1652.402689][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.416211][ T9] usb 9-1: USB disconnect, device number 64 [ 1652.425736][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.466113][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.466304][ T5842] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1652.483882][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.561621][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.594569][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.614377][T23961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.646196][T23961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.683807][T23961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.729718][T23961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.766060][T23961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.782172][T23961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.798802][T23961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.868988][ T9] usb 7-1: USB disconnect, device number 22 [ 1652.890068][ T9] usblp0: removed [ 1653.016165][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.046343][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.112254][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.120128][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.221898][T14667] Bluetooth: hci3: command tx timeout [ 1653.587612][T24043] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1655.080186][ T5848] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1655.297770][T14667] Bluetooth: hci3: command tx timeout [ 1655.310823][ T5848] usb 10-1: Using ep0 maxpacket: 8 [ 1655.397338][ T5848] usb 10-1: config 0 has an invalid interface number: 239 but max is 0 [ 1655.408355][ T5848] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.431320][ T5848] usb 10-1: config 0 has no interface number 0 [ 1655.438200][ T5848] usb 10-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1655.539874][T24035] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1655.540543][ T5848] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1655.579486][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.587743][ T5848] usb 10-1: Product: syz [ 1655.592636][ T5848] usb 10-1: Manufacturer: syz [ 1655.597445][ T5848] usb 10-1: SerialNumber: syz [ 1655.676386][ T5848] usb 10-1: config 0 descriptor?? [ 1655.739683][T24035] usb 7-1: device descriptor read/64, error -71 [ 1656.011634][T24035] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1656.180893][T24069] input: syz1 as /devices/virtual/input/input17 [ 1656.222067][T24035] usb 7-1: device descriptor read/64, error -71 [ 1656.453969][T24035] usb usb7-port1: attempt power cycle [ 1656.778315][ T5848] ath6kl: Failed to submit usb control message: -110 [ 1656.954453][T24035] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1657.070057][T24035] usb 7-1: device descriptor read/8, error -71 [ 1660.033176][ T5848] ath6kl: unable to send the bmi data to the device: -110 [ 1660.040541][ T5848] ath6kl: Unable to send get target info: -110 [ 1660.067702][ T5848] ath6kl: Failed to init ath6kl core: -110 [ 1660.074484][ T5848] ath6kl_usb: probe of 10-1:0.239 failed with error -110 [ 1660.088106][ T5848] usb 10-1: USB disconnect, device number 49 [ 1660.618818][T15595] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1660.911056][T15595] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1661.083971][T15595] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1661.151320][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1661.170560][T15595] usb 7-1: Product: syz [ 1661.174981][T15595] usb 7-1: Manufacturer: syz [ 1661.199083][T15595] usb 7-1: SerialNumber: syz [ 1661.444496][T15595] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1662.001464][ T5848] usb 7-1: USB disconnect, device number 27 [ 1662.049461][ T5848] usblp0: removed [ 1662.345644][T24104] fuse: Unknown parameter 'fd0x0000000000000003' [ 1665.216425][T15595] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1665.279412][T24035] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1665.544565][T15595] usb 3-1: device descriptor read/64, error -71 [ 1665.566430][T24035] usb 7-1: Using ep0 maxpacket: 8 [ 1665.634149][T24035] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1665.670269][T24035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.690888][T24035] usb 7-1: config 0 has no interface number 0 [ 1665.716555][T24035] usb 7-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1665.743043][T24035] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1665.761820][T24035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.773173][T24035] usb 7-1: Product: syz [ 1665.777702][T24035] usb 7-1: Manufacturer: syz [ 1665.782325][T24035] usb 7-1: SerialNumber: syz [ 1665.789881][T24035] usb 7-1: config 0 descriptor?? [ 1665.834316][T15595] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1665.984595][T15595] usb 3-1: device descriptor read/64, error -71 [ 1666.104921][T15595] usb usb3-port1: attempt power cycle [ 1666.591172][T15595] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1667.633985][T24035] ath6kl: Failed to submit usb control message: -110 [ 1667.643464][T15595] usb 3-1: device descriptor read/8, error -71 [ 1667.655578][T24035] ath6kl: unable to send the bmi data to the device: -110 [ 1667.663926][T24035] ath6kl: Unable to send get target info: -110 [ 1667.687251][T24035] ath6kl: Failed to init ath6kl core: -110 [ 1667.697576][T24035] ath6kl_usb: probe of 7-1:0.239 failed with error -110 [ 1667.878299][T23940] usb 7-1: USB disconnect, device number 28 [ 1667.994566][T24139] fuse: Unknown parameter 'fd0x0000000000000003' [ 1668.569234][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.575996][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.023420][T24153] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1670.861805][T14418] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1670.864192][T24173] fuse: Unknown parameter 'fd0x0000000000000003' [ 1670.952283][ T8] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1671.042423][T14418] usb 9-1: device descriptor read/64, error -71 [ 1671.403405][T14418] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1672.844685][T14418] usb 9-1: device descriptor read/64, error -71 [ 1672.950234][T24180] Cannot find set identified by id 3 to match [ 1672.971017][T14418] usb usb9-port1: attempt power cycle [ 1673.011886][T24180] tipc: Failed to remove unknown binding: 66,0,0/0:1472374874/1472374875 [ 1673.041323][T24180] tipc: Failed to remove unknown binding: 66,0,0/0:1472374874/1472374875 [ 1673.121514][T24184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1673.134332][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1673.156554][ T8] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1673.170667][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.196289][ T8] usb 7-1: config 0 has no interface number 0 [ 1673.220804][ T8] usb 7-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1673.276062][ T8] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1673.291554][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.299722][ T8] usb 7-1: Product: syz [ 1673.307787][ T8] usb 7-1: Manufacturer: syz [ 1673.314429][ T8] usb 7-1: SerialNumber: syz [ 1673.352838][ T8] usb 7-1: config 0 descriptor?? [ 1673.380113][T24188] xt_connbytes: Forcing CT accounting to be enabled [ 1673.887786][ T8] usb 7-1: can't set config #0, error -71 [ 1674.015889][ T8] usb 7-1: USB disconnect, device number 29 [ 1678.288952][T15595] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1678.398313][ T786] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1678.468455][T15595] usb 3-1: device descriptor read/64, error -71 [ 1678.587954][ T786] usb 9-1: Using ep0 maxpacket: 8 [ 1678.606130][ T786] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 1678.628985][ T786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.651787][ T786] usb 9-1: config 0 has no interface number 0 [ 1678.663779][ T786] usb 9-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1678.683964][ T786] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1678.704140][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.736454][ T786] usb 9-1: Product: syz [ 1678.749283][ T786] usb 9-1: Manufacturer: syz [ 1678.753938][ T786] usb 9-1: SerialNumber: syz [ 1678.759157][T15595] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1678.780056][ T786] usb 9-1: config 0 descriptor?? [ 1678.939170][T15595] usb 3-1: device descriptor read/64, error -71 [ 1679.083897][T15595] usb usb3-port1: attempt power cycle [ 1679.837630][ T786] ath6kl: Failed to submit usb control message: -110 [ 1681.123170][ T786] ath6kl: unable to send the bmi data to the device: -110 [ 1682.196022][ T786] ath6kl: Unable to send get target info: -110 [ 1682.236715][ T786] ath6kl: Failed to init ath6kl core: -110 [ 1682.243204][ T786] ath6kl_usb: probe of 9-1:0.239 failed with error -110 [ 1682.300163][T23940] usb 9-1: USB disconnect, device number 68 [ 1683.565654][ T5768] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1683.795615][ T5768] usb 7-1: Using ep0 maxpacket: 8 [ 1683.893125][ T5768] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.141925][ T5768] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1684.257590][ T5768] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1684.325101][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.353527][ T5768] usb 7-1: Product: syz [ 1684.373589][ T5768] usb 7-1: Manufacturer: syz [ 1684.399243][ T5768] usb 7-1: SerialNumber: syz [ 1685.465673][ T5768] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1685.505321][ T5768] usb 7-1: clock source 0 is not valid, cannot use [ 1685.520571][ T5768] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 1685.559502][ T5768] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1685.612855][T23940] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1685.711203][ T5768] usb 7-1: USB disconnect, device number 30 [ 1685.814288][T23940] usb 9-1: device descriptor read/64, error -71 [ 1685.860963][T24030] udevd[24030]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1686.044473][T15595] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1686.114147][T23940] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1686.234238][T15595] usb 3-1: Using ep0 maxpacket: 8 [ 1686.241094][T15595] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1686.249919][T15595] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.260566][T15595] usb 3-1: config 0 has no interface number 0 [ 1686.271529][T15595] usb 3-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1686.284166][T23940] usb 9-1: device descriptor read/64, error -71 [ 1686.300636][T15595] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1686.324892][T15595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.340445][T15595] usb 3-1: Product: syz [ 1686.348690][T15595] usb 3-1: Manufacturer: syz [ 1686.353334][T15595] usb 3-1: SerialNumber: syz [ 1686.371900][T15595] usb 3-1: config 0 descriptor?? [ 1686.414180][T23940] usb usb9-port1: attempt power cycle [ 1686.630204][ T5848] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1687.147794][T23940] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1687.509899][T15595] ath6kl: Failed to submit usb control message: -110 [ 1687.865436][ T5848] usb 10-1: Using ep0 maxpacket: 8 [ 1688.014160][ T5848] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1688.093357][T23940] usb 9-1: device not accepting address 71, error -71 [ 1688.108462][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.147654][T24284] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.182858][ T5848] usb 10-1: Product: syz [ 1688.213608][ T5848] usb 10-1: Manufacturer: syz [ 1688.228363][ T5848] usb 10-1: SerialNumber: syz [ 1688.599457][T24284] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.938843][T24284] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.127953][T15595] ath6kl: unable to send the bmi data to the device: -110 [ 1689.135474][T15595] ath6kl: Unable to send get target info: -110 [ 1689.251837][ T5848] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1689.271292][ T5848] usb 10-1: clock source 0 is not valid, cannot use [ 1689.943016][ T5848] usb 10-1: 1:1: cannot get freq (v2/v3): err -32 [ 1689.970557][T24284] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.586671][T15595] ath6kl: Failed to init ath6kl core: -110 [ 1690.593225][T15595] ath6kl_usb: probe of 3-1:0.239 failed with error -110 [ 1690.605164][T15595] usb 3-1: USB disconnect, device number 66 [ 1690.748501][T24284] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.764963][T24284] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.778841][T24284] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.792689][T24284] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.160750][T24309] loop2: detected capacity change from 0 to 512 [ 1692.245502][T24309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.643121][T23961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.050756][T15595] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1693.220670][T15595] usb 7-1: device descriptor read/64, error -71 [ 1693.510974][T15595] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1693.689532][T15595] usb 7-1: device descriptor read/64, error -71 [ 1693.820471][T15595] usb usb7-port1: attempt power cycle [ 1693.980241][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1694.196406][ T5848] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1694.200172][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1694.222861][ T8] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1694.240086][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.250096][ T5848] usb 10-1: clock source 0 is not valid, cannot use [ 1694.260261][ T5848] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1694.260404][T15595] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1694.277586][ T5848] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1694.281051][ T8] usb 3-1: config 0 has no interface number 0 [ 1694.313650][ T8] usb 3-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.338111][T15595] usb 7-1: device descriptor read/8, error -71 [ 1694.349677][ T8] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1694.369193][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.389734][ T8] usb 3-1: Product: syz [ 1694.410200][ T8] usb 3-1: Manufacturer: syz [ 1694.420544][ T8] usb 3-1: SerialNumber: syz [ 1694.462291][ T5848] usb 10-1: USB disconnect, device number 50 [ 1694.463645][ T8] usb 3-1: config 0 descriptor?? [ 1694.538215][T24323] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.629552][T24323] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.650041][T15595] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1694.703664][T15595] usb 7-1: device descriptor read/8, error -71 [ 1694.744887][T24323] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.134113][T24323] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.273725][T24323] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.290004][T24323] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.306058][T24323] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.323263][T24323] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.634999][ T8] ath6kl: Failed to submit usb control message: -110 [ 1696.211744][T15595] usb usb7-port1: unable to enumerate USB device [ 1697.166499][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 1698.441820][ T8] ath6kl: Unable to send get target info: -110 [ 1698.608140][ T8] ath6kl: Failed to init ath6kl core: -110 [ 1698.614531][ T8] ath6kl_usb: probe of 3-1:0.239 failed with error -110 [ 1698.619125][T24334] 9pnet_fd: Insufficient options for proto=fd [ 1698.758052][ T8] usb 3-1: USB disconnect, device number 67 [ 1699.918525][T24347] loop2: detected capacity change from 0 to 4096 [ 1699.995818][T24348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1700.097391][T15595] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1700.308190][T15595] usb 10-1: Using ep0 maxpacket: 16 [ 1700.325092][T15595] usb 10-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1700.358088][T15595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1700.380200][T15595] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1700.421719][T15595] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1700.460900][T15595] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1700.589023][T15595] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1700.597884][T15595] usb 10-1: Manufacturer: syz [ 1700.616959][T23940] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1700.617912][T15595] usb 10-1: config 0 descriptor?? [ 1700.826947][T23940] usb 7-1: Using ep0 maxpacket: 8 [ 1700.861394][T23940] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1700.876972][T23940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.885338][T23940] usb 7-1: Product: syz [ 1700.890379][T23940] usb 7-1: Manufacturer: syz [ 1700.895098][T23940] usb 7-1: SerialNumber: syz [ 1701.058113][T24362] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.300306][T24362] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.372960][T24365] loop2: detected capacity change from 0 to 256 [ 1701.442184][T24365] exfat: Deprecated parameter 'utf8' [ 1701.501292][T24362] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.554356][T23940] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1701.597074][T23940] usb 7-1: clock source 0 is not valid, cannot use [ 1701.636059][T23940] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 1701.671786][T24362] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.839812][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1701.876209][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1701.927708][T24367] ceph: No mds server is up or the cluster is laggy [ 1701.977394][T15595] libceph: connect (1)[c::]:6789 error -101 [ 1701.993466][T15595] libceph: mon0 (1)[c::]:6789 connect error [ 1702.011188][ T786] usb 10-1: USB disconnect, device number 51 [ 1702.426404][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1702.444956][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1702.469430][T24362] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.280447][T24362] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.343034][T24362] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.022350][T24362] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.266728][T24382] loop9: detected capacity change from 0 to 4096 [ 1704.469581][T24385] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1704.940997][T24389] loop9: detected capacity change from 0 to 4096 [ 1704.999619][T24395] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.224645][T23940] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1705.233325][T23940] usb 7-1: clock source 0 is not valid, cannot use [ 1705.284638][T23940] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 1705.293713][T23940] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1705.533445][T23940] usb 7-1: USB disconnect, device number 35 [ 1706.262954][T24030] udevd[24030]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1706.833980][T24415] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.109088][T24415] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.217615][T24415] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.247926][T24419] loop9: detected capacity change from 0 to 4096 [ 1707.325126][T24420] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1707.401974][T24415] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.893287][T23940] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1707.993587][ T8] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1708.094777][T23940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.113378][T23940] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1708.122469][T23940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.155396][T23940] usb 7-1: config 0 descriptor?? [ 1708.165826][T23940] pwc: Askey VC010 type 2 USB webcam detected. [ 1708.203263][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 1708.217817][ T8] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1708.236649][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.256416][ T8] usb 10-1: Product: syz [ 1708.262196][ T8] usb 10-1: Manufacturer: syz [ 1708.275449][ T8] usb 10-1: SerialNumber: syz [ 1708.386407][T23940] pwc: send_video_command error -71 [ 1708.391681][T23940] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1708.413133][T23940] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 1708.435496][T23940] usb 7-1: USB disconnect, device number 36 [ 1708.840354][T24415] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.867831][T24415] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.889531][T24415] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.909437][ T8] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1708.932757][ T8] usb 10-1: clock source 0 is not valid, cannot use [ 1708.957592][T24415] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.962762][T23940] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1708.973029][ T8] usb 10-1: 1:1: cannot get freq (v2/v3): err -32 [ 1709.158076][T23940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.168748][T23940] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1709.189186][T23940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.220845][T23940] usb 7-1: config 0 descriptor?? [ 1709.253400][T23940] pwc: Askey VC010 type 2 USB webcam detected. [ 1709.649217][T23940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1709.904304][T23940] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1709.926482][T23940] pwc: recv_control_msg error -71 req 04 val 1000 [ 1709.945402][T23940] pwc: recv_control_msg error -71 req 04 val 1300 [ 1710.699189][T23940] pwc: recv_control_msg error -71 req 04 val 1400 [ 1710.740677][T23940] pwc: recv_control_msg error -71 req 02 val 2000 [ 1710.755395][T23940] pwc: recv_control_msg error -71 req 02 val 2100 [ 1710.766580][T23940] pwc: recv_control_msg error -71 req 04 val 1500 [ 1710.789549][T23940] pwc: recv_control_msg error -71 req 02 val 2500 [ 1710.806528][T23940] pwc: recv_control_msg error -71 req 02 val 2400 [ 1710.814874][T23940] pwc: recv_control_msg error -71 req 02 val 2600 [ 1710.823319][T23940] pwc: recv_control_msg error -71 req 02 val 2900 [ 1710.870224][T23940] pwc: recv_control_msg error -71 req 02 val 2800 [ 1710.904479][T23940] pwc: recv_control_msg error -71 req 04 val 1100 [ 1710.941802][T23940] pwc: recv_control_msg error -71 req 04 val 1200 [ 1710.994161][T23940] pwc: Registered as video103. [ 1711.030372][T23940] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18 [ 1711.060330][T24444] loop6: detected capacity change from 0 to 128 [ 1711.140812][T23940] usb 7-1: USB disconnect, device number 37 [ 1711.165462][T24444] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1711.231707][T24444] hpfs: filesystem error: improperly stopped [ 1711.237766][T24444] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1711.287770][T24444] hpfs: You really don't want any checks? You are crazy... [ 1711.318874][T24444] hpfs: Code page index out of array [ 1711.352324][T24444] hpfs: code page support is disabled [ 1711.434682][T24444] hpfs: hpfs_map_4sectors(): unaligned read [ 1711.470287][T24444] hpfs: hpfs_map_4sectors(): unaligned read [ 1711.522642][T24444] hpfs: filesystem error: unable to find root dir [ 1711.626290][ T8] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1711.659797][ T8] usb 10-1: clock source 0 is not valid, cannot use [ 1711.699143][ T8] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1711.713203][ T8] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1711.861502][ T8] usb 10-1: USB disconnect, device number 52 [ 1712.529987][T24462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.655497][T24462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.882758][T24462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.039299][T24494] loop6: detected capacity change from 0 to 4096 [ 1715.048415][T24462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.123525][T24497] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1715.400319][T24462] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.437850][T24462] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.492686][T24462] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.552710][T24462] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.729374][ T5768] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1715.762181][T24506] loop2: detected capacity change from 0 to 512 [ 1715.788686][T24506] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1715.817820][T24506] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1715.895717][T24506] EXT4-fs (loop2): 1 truncate cleaned up [ 1715.910414][ T5768] usb 10-1: Using ep0 maxpacket: 8 [ 1715.915696][T24506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1715.923534][ T5768] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1715.948694][ T5768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.957091][ T5768] usb 10-1: Product: syz [ 1715.961498][ T5768] usb 10-1: Manufacturer: syz [ 1715.966216][ T5768] usb 10-1: SerialNumber: syz [ 1716.069681][T24506] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1716.115935][T23961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.755779][T24517] loop2: detected capacity change from 0 to 512 [ 1717.180110][ T5768] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1717.190415][ T5768] usb 10-1: clock source 0 is not valid, cannot use [ 1717.197837][ T5768] usb 10-1: 1:1: cannot get freq (v2/v3): err -32 [ 1718.378903][T24531] loop6: detected capacity change from 0 to 4096 [ 1718.419401][ T5768] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1718.448995][ T5768] usb 10-1: clock source 0 is not valid, cannot use [ 1718.454287][T24534] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1718.467687][ T5768] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1718.500918][ T5768] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1718.597962][ T5768] usb 10-1: USB disconnect, device number 53 [ 1719.050418][T24539] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.201296][T24539] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.333343][T24539] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.433586][T24539] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.299761][T24565] xt_connbytes: Forcing CT accounting to be enabled [ 1723.618340][T24573] loop8: detected capacity change from 0 to 4096 [ 1723.663730][T24574] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1725.951138][T24539] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.967638][T24597] loop9: detected capacity change from 0 to 2048 [ 1726.036431][T24539] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.064539][T24602] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.125688][T24539] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.198834][T24539] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.312511][ T28] audit: type=1800 audit(1781940489.376:310): pid=24597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4710" name="bus" dev="loop9" ino=2097152 res=0 errno=0 [ 1726.384198][ T28] audit: type=1800 audit(1781940489.436:311): pid=24605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4710" name="bus" dev="loop9" ino=2097152 res=0 errno=0 [ 1726.638231][T19512] libceph: connect (1)[c::]:6789 error -101 [ 1726.673930][T19512] libceph: mon0 (1)[c::]:6789 connect error [ 1726.702889][T24611] ceph: No mds server is up or the cluster is laggy [ 1727.159187][T24617] loop6: detected capacity change from 0 to 4096 [ 1727.475869][T24623] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1729.635123][T24642] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1729.756465][T24641] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.986484][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.999669][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.039660][T24641] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.128274][T24641] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.229214][T24655] loop9: detected capacity change from 0 to 1024 [ 1730.240155][T24641] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.768527][T24641] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.323850][T24641] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.386207][T24641] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.640995][T24641] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.032386][T24679] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1733.719199][ T5848] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1733.943840][ T5848] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1733.973887][ T5848] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1733.988137][ T5848] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1733.997979][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.018065][T24697] loop9: detected capacity change from 0 to 4096 [ 1734.018556][ T5848] usb 7-1: config 0 descriptor?? [ 1734.053505][T24700] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1734.067675][T24681] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1734.109209][ T5848] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1736.085772][T24719] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1736.389291][ T5848] usb 7-1: USB disconnect, device number 38 [ 1736.517124][T24726] netlink: 'syz.9.4750': attribute type 11 has an invalid length. [ 1736.614771][T24728] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1736.624366][T24728] cramfs: wrong magic [ 1737.626417][T24729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1737.717560][T24730] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1737.754207][T24730] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1738.886803][T24744] loop9: detected capacity change from 0 to 32768 [ 1739.358355][T24744] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1739.402817][T24760] loop6: detected capacity change from 0 to 1024 [ 1739.857761][T23864] ocfs2: Unmounting device (7,9) on (node local) [ 1740.239482][T24776] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 1740.473181][T24776] bond1: entered promiscuous mode [ 1740.479968][T24776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1740.689569][T24773] orangefs_mount: mount request failed with -4 [ 1740.854246][T24777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1740.863160][T24777] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1740.873287][T24777] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1740.886397][T24777] bond1: (slave vti0): making interface the new active one [ 1740.893797][T24777] vti0: entered promiscuous mode [ 1740.900395][T24777] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1741.306017][T24782] loop6: detected capacity change from 0 to 8192 [ 1741.620457][T23940] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1741.857847][T23940] usb 10-1: Using ep0 maxpacket: 8 [ 1741.894646][T23940] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1741.924736][T23940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.945127][T23940] usb 10-1: Product: syz [ 1741.949834][T23940] usb 10-1: Manufacturer: syz [ 1741.954893][T23940] usb 10-1: SerialNumber: syz [ 1742.580026][T24793] bond1: left promiscuous mode [ 1742.584868][T24793] vti0: left promiscuous mode [ 1742.758166][T23940] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1742.803610][T23940] usb 10-1: clock source 0 is not valid, cannot use [ 1743.884111][T23940] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1743.918917][T23940] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1743.927774][T23940] usb 10-1: clock source 0 is not valid, cannot use [ 1743.937563][T23940] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1743.944466][T23940] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1744.072160][T23940] usb 10-1: USB disconnect, device number 54 [ 1745.012740][T24798] loop6: detected capacity change from 0 to 32768 [ 1745.925244][ T28] audit: type=1800 audit(1781940509.026:312): pid=24827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4771" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1746.024219][ T28] audit: type=1800 audit(1781940509.026:313): pid=24798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4771" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1747.930802][T24857] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4783'. [ 1749.132646][T19512] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1750.132241][T19512] usb 3-1: Using ep0 maxpacket: 8 [ 1750.167451][T19512] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1750.184295][T19512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.209331][T19512] usb 3-1: Product: syz [ 1750.241660][T19512] usb 3-1: Manufacturer: syz [ 1750.252579][T19512] usb 3-1: SerialNumber: syz [ 1750.663449][T24887] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1750.674172][T24887] cramfs: wrong magic [ 1750.687362][T24887] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4793'. [ 1750.994727][T19512] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1751.615540][T19512] usb 3-1: clock source 0 is not valid, cannot use [ 1752.606785][T24883] Bluetooth: hci2: command 0x0406 tx timeout [ 1752.765409][T19512] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1752.792237][T19512] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1752.845260][T19512] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1752.926117][T19512] usb 3-1: clock source 0 is not valid, cannot use [ 1752.933613][T24897] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4794'. [ 1752.940714][ T27] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1753.024725][T19512] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1753.041949][T24897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.049673][T24897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.177200][T19512] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1753.250819][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 1753.265110][ T27] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1753.280869][ T27] usb 10-1: too many configurations: 65, using maximum allowed: 8 [ 1753.319550][ T27] usb 10-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 1753.370318][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.381113][ T27] usb 10-1: Product: syz [ 1753.386710][ T27] usb 10-1: Manufacturer: syz [ 1753.395327][ T27] usb 10-1: SerialNumber: syz [ 1753.796757][T19512] usb 3-1: USB disconnect, device number 68 [ 1753.990255][T24030] udevd[24030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.840638][ T27] gspca_main: 102c:6151 too many config [ 1754.849185][ T27] usb 10-1: USB disconnect, device number 55 [ 1754.945490][T24906] loop2: detected capacity change from 0 to 4096 [ 1755.735536][T24918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1756.599140][ T27] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1756.727838][T24933] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4805'. [ 1757.536407][T24933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.544154][T24933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.608888][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 1757.628410][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1757.643288][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.698231][ T27] usb 3-1: Product: syz [ 1757.709844][ T27] usb 3-1: Manufacturer: syz [ 1757.723779][ T27] usb 3-1: SerialNumber: syz [ 1758.439291][ T27] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1758.449760][ T27] usb 3-1: clock source 0 is not valid, cannot use [ 1759.057697][ T27] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1759.068391][ T8] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1759.070211][ T27] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1759.086725][ T27] usb 3-1: clock source 0 is not valid, cannot use [ 1759.106871][ T27] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1759.127733][ T27] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1759.277850][ T27] usb 3-1: USB disconnect, device number 69 [ 1759.327513][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1759.349462][ T8] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1759.368879][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.391505][ T8] usb 7-1: config 0 has no interface number 0 [ 1759.404942][ T8] usb 7-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1759.438426][ T8] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1759.457449][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.476044][ T8] usb 7-1: Product: syz [ 1759.485873][ T8] usb 7-1: Manufacturer: syz [ 1759.503555][ T8] usb 7-1: SerialNumber: syz [ 1759.518572][ T8] usb 7-1: config 0 descriptor?? [ 1759.754670][ T8] ath6kl: Failed to submit usb control message: -71 [ 1759.787713][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 1759.808143][ T8] ath6kl: Unable to send get target info: -71 [ 1759.816878][ T8] ath6kl: Failed to init ath6kl core: -71 [ 1759.827700][ T8] ath6kl_usb: probe of 7-1:0.239 failed with error -71 [ 1759.841041][ T8] usb 7-1: USB disconnect, device number 39 [ 1761.929464][T24953] loop2: detected capacity change from 0 to 4096 [ 1762.025964][T24964] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1762.083086][T14418] libceph: connect (1)[c::]:6789 error -101 [ 1762.089392][T14418] libceph: mon0 (1)[c::]:6789 connect error [ 1762.152062][T24966] ceph: No mds server is up or the cluster is laggy [ 1762.697593][T24978] netlink: 'syz.6.4814': attribute type 1 has an invalid length. [ 1762.753008][T24978] bond5: entered promiscuous mode [ 1762.761696][T24978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1762.780855][ T9853] Bluetooth: hci1: command 0x0406 tx timeout [ 1762.933911][T24981] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1762.960145][T24981] cramfs: wrong magic [ 1763.123567][T24976] orangefs_mount: mount request failed with -4 [ 1764.185161][T15595] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1764.395021][T15595] usb 3-1: Using ep0 maxpacket: 8 [ 1764.404629][T15595] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1764.431720][T15595] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.471326][T15595] usb 3-1: config 0 has no interface number 0 [ 1764.496097][T15595] usb 3-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.557524][T15595] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1764.581139][T15595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.633424][T15595] usb 3-1: Product: syz [ 1764.655906][T15595] usb 3-1: Manufacturer: syz [ 1764.660558][T15595] usb 3-1: SerialNumber: syz [ 1764.700612][T15595] usb 3-1: config 0 descriptor?? [ 1764.714851][ T786] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1764.900257][T25001] (null): rxe_set_mtu: Set mtu to 256 [ 1764.907947][T25001] rdma_rxe: rxe_newlink: failed to add lo [ 1764.917569][T25001] netlink: 'syz.6.4824': attribute type 13 has an invalid length. [ 1764.928801][ T786] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1764.956483][T25001] gretap0: refused to change device tx_queue_len [ 1764.963210][T25001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1764.997783][ T786] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1765.007023][ T786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1765.016259][ T786] usb 10-1: Product: syz [ 1765.021588][T15595] ath6kl: Failed to submit usb control message: -71 [ 1765.030461][T15595] ath6kl: unable to send the bmi data to the device: -71 [ 1765.037952][ T786] usb 10-1: Manufacturer: syz [ 1765.052883][ T786] usb 10-1: SerialNumber: syz [ 1765.058281][T15595] ath6kl: Unable to send get target info: -71 [ 1765.095952][T15595] ath6kl: Failed to init ath6kl core: -71 [ 1765.102231][T15595] ath6kl_usb: probe of 3-1:0.239 failed with error -71 [ 1765.152583][T15595] usb 3-1: USB disconnect, device number 70 [ 1765.347296][ T786] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1765.647816][T25010] netlink: 'syz.6.4825': attribute type 1 has an invalid length. [ 1766.078498][T25008] orangefs_mount: mount request failed with -4 [ 1766.085407][T25010] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1766.806899][ T5848] usb 10-1: USB disconnect, device number 56 [ 1766.866776][ T5848] usblp0: removed [ 1767.952663][T25024] loop9: detected capacity change from 0 to 4096 [ 1768.207662][T25024] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1769.173364][T25024] ntfs3: loop9: Failed to initialize $Extend/$Reparse. [ 1769.952300][T25042] netlink: 'syz.6.4834': attribute type 1 has an invalid length. [ 1770.191979][T25041] orangefs_mount: mount request failed with -4 [ 1770.198456][T25042] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1771.241750][T14418] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1771.461412][T14418] usb 7-1: Using ep0 maxpacket: 8 [ 1771.474476][T14418] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1771.482996][T14418] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.493439][T14418] usb 7-1: config 0 has no interface number 0 [ 1771.501644][T14418] usb 7-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1771.522547][T14418] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1771.532389][T14418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.540532][T14418] usb 7-1: Product: syz [ 1771.545434][T14418] usb 7-1: Manufacturer: syz [ 1771.550168][T14418] usb 7-1: SerialNumber: syz [ 1771.591117][T14418] usb 7-1: config 0 descriptor?? [ 1771.642088][ T786] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1771.837382][T14418] ath6kl: Failed to submit usb control message: -71 [ 1771.845982][ T786] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1771.854848][T14418] ath6kl: unable to send the bmi data to the device: -71 [ 1771.863523][ T786] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1771.883750][T14418] ath6kl: Unable to send get target info: -71 [ 1771.895916][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1771.919271][T14418] ath6kl: Failed to init ath6kl core: -71 [ 1771.924592][ T786] usb 9-1: Product: syz [ 1771.931603][T14418] ath6kl_usb: probe of 7-1:0.239 failed with error -71 [ 1771.941197][ T786] usb 9-1: Manufacturer: syz [ 1771.945832][ T786] usb 9-1: SerialNumber: syz [ 1771.979932][T14418] usb 7-1: USB disconnect, device number 40 [ 1772.360577][ T786] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1772.411591][ T786] usb 9-1: USB disconnect, device number 73 [ 1772.423804][ T786] usblp0: removed [ 1773.030769][ T9853] Bluetooth: hci3: command 0x0406 tx timeout [ 1773.671621][T24035] libceph: connect (1)[c::]:6789 error -101 [ 1773.677706][T24035] libceph: mon0 (1)[c::]:6789 connect error [ 1773.706830][T25080] ceph: No mds server is up or the cluster is laggy [ 1773.956739][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1773.964019][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1776.398235][T25115] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1777.568362][ T786] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1777.909019][ T786] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1778.146419][ T786] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1778.168340][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1778.188169][ T786] usb 9-1: Product: syz [ 1778.192446][ T786] usb 9-1: Manufacturer: syz [ 1778.203512][ T786] usb 9-1: SerialNumber: syz [ 1778.460161][ T786] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1778.511469][ T786] usb 9-1: USB disconnect, device number 74 [ 1779.176839][ T786] usblp0: removed [ 1779.425839][T25158] (null): rxe_set_mtu: Set mtu to 256 [ 1779.431530][T25158] rdma_rxe: rxe_newlink: failed to add lo [ 1779.439189][T25158] netlink: 'syz.6.4864': attribute type 13 has an invalid length. [ 1779.455504][T25158] gretap0: refused to change device tx_queue_len [ 1779.462221][T25158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1782.080036][T25165] loop8: detected capacity change from 0 to 32768 [ 1782.274171][T25165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4866 (25165) [ 1782.354309][T25165] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1782.376814][T25165] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1782.385750][T25165] BTRFS info (device loop8): using free space tree [ 1782.461711][T25165] BTRFS info (device loop8): enabling ssd optimizations [ 1782.473150][T25165] BTRFS info (device loop8): auto enabling async discard [ 1782.814738][T23750] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1783.205599][T24035] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1783.215999][T25209] loop2: detected capacity change from 0 to 4096 [ 1783.300053][T25210] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1783.395534][T24035] usb 10-1: Using ep0 maxpacket: 8 [ 1783.534776][T24035] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1784.238985][T24035] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.315596][T25218] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1784.326326][T25218] cramfs: wrong magic [ 1784.341232][T25218] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4874'. [ 1784.353186][T24035] usb 10-1: Product: syz [ 1784.365133][T24035] usb 10-1: Manufacturer: syz [ 1784.369977][T24035] usb 10-1: SerialNumber: syz [ 1785.855967][T24035] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1785.881090][T24035] usb 10-1: clock source 0 is not valid, cannot use [ 1786.090888][T24035] usb 10-1: 1:1: cannot get freq (v2/v3): err -71 [ 1786.138890][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1786.243318][T24035] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1786.279108][T24035] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1786.296587][T24035] usb 10-1: clock source 0 is not valid, cannot use [ 1786.332914][T24035] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1786.348839][T24035] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1786.495047][T24035] usb 10-1: USB disconnect, device number 57 [ 1786.861687][T23920] udevd[23920]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1788.255817][T25238] loop6: detected capacity change from 0 to 32768 [ 1788.271462][T25238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.4883 (25238) [ 1788.282551][T25252] loop9: detected capacity change from 0 to 4096 [ 1788.324517][T25238] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1788.354724][T25254] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1788.385006][T25238] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1788.413276][T25238] BTRFS info (device loop6): using free space tree [ 1788.814351][T25238] BTRFS info (device loop6): enabling ssd optimizations [ 1788.949393][T25238] BTRFS info (device loop6): auto enabling async discard [ 1790.229239][T20261] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1790.729527][T25253] loop8: detected capacity change from 0 to 32768 [ 1790.926759][T25253] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1791.096757][T25253] XFS (loop8): Ending clean mount [ 1791.391138][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.397641][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.690835][T23750] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1791.971732][T25307] loop6: detected capacity change from 0 to 4096 [ 1792.710804][T25310] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1794.616922][T25335] loop9: detected capacity change from 0 to 1764 [ 1794.778987][T24328] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1795.380257][T25346] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1795.390251][T25346] cramfs: wrong magic [ 1795.402392][T25346] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4909'. [ 1795.447880][T25346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.455680][T25346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.207899][T25352] (null): rxe_set_mtu: Set mtu to 4096 [ 1796.319804][T25352] rdma_rxe: rxe_newlink: failed to add lo [ 1796.352077][T25352] netlink: 'syz.9.4910': attribute type 13 has an invalid length. [ 1796.471387][T25352] gretap0: refused to change device tx_queue_len [ 1796.673008][T25352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1796.691869][T25359] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1796.701423][T25359] cramfs: wrong magic [ 1797.575309][T25341] loop8: detected capacity change from 0 to 32768 [ 1797.665831][T25341] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1797.788721][T25341] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR [ 1797.789789][T25341] XFS (loop8): log mount failed [ 1801.838457][T25400] syzkaller0: entered promiscuous mode [ 1801.876428][T25400] syzkaller0: entered allmulticast mode [ 1802.542943][T25404] vlan0: entered promiscuous mode [ 1804.614070][T25409] loop8: detected capacity change from 0 to 32768 [ 1804.636588][T25409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4926 (25409) [ 1804.704736][T25409] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1804.733449][T25409] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1804.765532][T25409] BTRFS info (device loop8): using free space tree [ 1805.178937][T24035] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1805.321907][T25409] BTRFS info (device loop8): enabling ssd optimizations [ 1805.329312][T25409] BTRFS info (device loop8): auto enabling async discard [ 1805.515909][T24035] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1805.620023][T24035] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1805.654411][T24035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1805.691250][T24035] usb 7-1: Product: syz [ 1806.398152][T24035] usb 7-1: Manufacturer: syz [ 1806.402771][T24035] usb 7-1: SerialNumber: syz [ 1806.538743][T23750] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1806.709892][T24035] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1806.990337][T24908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop8 scanned by udevd (24908) [ 1807.710600][T25471] vlan0: left promiscuous mode [ 1807.731608][T25471] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 1810.888662][T23940] usb 7-1: USB disconnect, device number 41 [ 1810.938298][T23940] usblp0: removed [ 1811.696826][T25512] (null): rxe_set_mtu: Set mtu to 256 [ 1811.707426][T25512] rdma_rxe: rxe_newlink: failed to add lo [ 1811.802954][T25512] netlink: 'syz.6.4947': attribute type 13 has an invalid length. [ 1811.968650][T25512] gretap0: refused to change device tx_queue_len [ 1811.981915][T25512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1812.149804][T25515] loop9: detected capacity change from 0 to 4096 [ 1812.238909][T25519] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1815.469737][ T8] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1815.572502][T25546] loop8: detected capacity change from 0 to 4096 [ 1815.642640][T25547] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1815.672135][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1815.714457][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1815.735707][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1815.806528][ T8] usb 7-1: Product: syz [ 1815.819577][ T8] usb 7-1: Manufacturer: syz [ 1815.825590][ T8] usb 7-1: SerialNumber: syz [ 1816.121613][ T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1816.980163][T25561] (null): rxe_set_mtu: Set mtu to 4096 [ 1816.987652][T25561] rdma_rxe: rxe_newlink: failed to add lo [ 1816.996318][T25561] netlink: 'syz.8.4960': attribute type 13 has an invalid length. [ 1817.026271][T25561] gretap0: refused to change device tx_queue_len [ 1817.033225][T25561] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1818.369629][ T8] usb 7-1: USB disconnect, device number 42 [ 1818.382248][ T8] usblp0: removed [ 1819.816372][T25579] loop2: detected capacity change from 0 to 4096 [ 1819.850734][T25584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1822.755783][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1822.959985][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1823.358117][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1823.382847][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1823.400054][ T9] usb 3-1: Product: syz [ 1823.404290][ T9] usb 3-1: Manufacturer: syz [ 1823.417338][ T9] usb 3-1: SerialNumber: syz [ 1823.709074][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1824.735821][T23940] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 1824.965038][T23940] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1825.013959][T23940] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.036947][T23940] usb 9-1: config 0 has no interface number 0 [ 1825.046883][T23940] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1825.056166][T23940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.064268][T23940] usb 9-1: Product: syz [ 1825.069026][T23940] usb 9-1: Manufacturer: syz [ 1825.073735][T23940] usb 9-1: SerialNumber: syz [ 1825.088132][T23940] usb 9-1: config 0 descriptor?? [ 1825.108260][T23940] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 1825.116696][T23940] usb 9-1: No valid video chain found. [ 1825.879866][ T9] usb 9-1: USB disconnect, device number 75 [ 1825.886295][ T28] audit: type=1326 audit(1781940588.865:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25636 comm="syz.8.4983" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d0539ce59 code=0x0 [ 1826.335063][ T8] usb 3-1: USB disconnect, device number 71 [ 1826.367137][ T8] usblp0: removed [ 1827.596758][T25659] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1827.605852][T25659] cramfs: wrong magic [ 1827.614229][T25659] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4987'. [ 1831.549507][T25688] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1831.558608][T25688] cramfs: wrong magic [ 1831.567870][T25688] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4996'. [ 1832.664796][ T786] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1832.913110][ T786] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1832.950326][ T786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1832.967152][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1832.984256][ T786] usb 3-1: Product: syz [ 1832.988567][ T786] usb 3-1: Manufacturer: syz [ 1833.000433][ T786] usb 3-1: SerialNumber: syz [ 1833.349280][ T786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1834.326352][ T5768] libceph: connect (1)[c::]:6789 error -101 [ 1834.332873][ T5768] libceph: mon0 (1)[c::]:6789 connect error [ 1834.462605][T25711] ceph: No mds server is up or the cluster is laggy [ 1835.234067][ T8] usb 3-1: USB disconnect, device number 72 [ 1835.260071][ T8] usblp0: removed [ 1837.143701][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 1837.163718][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 1837.203985][T25750] ceph: No mds server is up or the cluster is laggy [ 1838.228276][ T5848] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1838.548968][ T5848] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1838.711611][ T5848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1838.844657][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1839.004892][ T5848] usb 3-1: Product: syz [ 1839.072188][ T5848] usb 3-1: Manufacturer: syz [ 1839.138411][ T5848] usb 3-1: SerialNumber: syz [ 1840.425414][ T5848] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1841.362046][ T5848] usb 3-1: USB disconnect, device number 73 [ 1841.406979][ T5848] usblp0: removed [ 1843.138349][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1843.154660][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1843.186526][T25801] ceph: No mds server is up or the cluster is laggy [ 1843.462499][T25813] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1843.471477][T25813] cramfs: wrong magic [ 1843.480510][T25813] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5026'. [ 1844.735001][ T9] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1845.314719][T23940] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1845.524405][T23940] usb 3-1: device descriptor read/64, error -71 [ 1845.556489][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1845.597516][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1845.606939][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1845.616075][ T9] usb 9-1: Product: syz [ 1845.620312][ T9] usb 9-1: Manufacturer: syz [ 1845.625516][ T9] usb 9-1: SerialNumber: syz [ 1845.839027][ T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1845.928690][ T8] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1846.144335][T23940] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1846.206450][ T8] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1846.218537][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.259177][ T8] usb 7-1: config 0 has no interface number 0 [ 1846.285012][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1846.325262][T23940] usb 3-1: device descriptor read/64, error -71 [ 1846.413317][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.474771][T23940] usb usb3-port1: attempt power cycle [ 1846.559802][ T8] usb 7-1: Product: syz [ 1846.603839][ T8] usb 7-1: Manufacturer: syz [ 1846.630900][ T8] usb 7-1: SerialNumber: syz [ 1846.708528][ T8] usb 7-1: config 0 descriptor?? [ 1846.738827][ T8] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1846.753151][ T8] usb 7-1: No valid video chain found. [ 1846.857905][T25840] (null): rxe_set_mtu: Set mtu to 4096 [ 1846.866565][T25840] rdma_rxe: rxe_newlink: failed to add lo [ 1846.877198][T25840] netlink: 'syz.9.5032': attribute type 13 has an invalid length. [ 1846.891586][T25840] gretap0: refused to change device tx_queue_len [ 1846.900869][T25840] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1847.044008][T23940] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1847.074041][T23940] usb 3-1: device descriptor read/8, error -71 [ 1847.383807][T23940] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1847.969939][T14418] usb 9-1: USB disconnect, device number 76 [ 1848.030222][T14418] usblp0: removed [ 1848.307247][T23940] usb 3-1: device not accepting address 77, error -71 [ 1848.316446][T23940] usb usb3-port1: unable to enumerate USB device [ 1849.632089][T25866] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1849.641656][T25866] cramfs: wrong magic [ 1849.653160][T25866] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5037'. [ 1849.974254][ T8] usb 7-1: USB disconnect, device number 43 [ 1852.560938][T14418] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1852.720852][T14418] usb 3-1: device descriptor read/64, error -71 [ 1852.808752][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.817489][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.850858][T23940] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1852.855246][T25893] bond5: left promiscuous mode [ 1853.100694][T14418] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1853.134954][T23940] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1853.155102][T23940] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1853.169968][T23940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1853.192460][T23940] usb 10-1: Product: syz [ 1853.208444][T23940] usb 10-1: Manufacturer: syz [ 1853.221211][T23940] usb 10-1: SerialNumber: syz [ 1853.280759][T14418] usb 3-1: device descriptor read/64, error -71 [ 1853.500901][T23940] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1853.565243][T14418] usb usb3-port1: attempt power cycle [ 1854.240800][T14418] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1854.324083][T14418] usb 3-1: device descriptor read/8, error -71 [ 1855.579367][T25909] netlink: 'syz.6.5046': attribute type 1 has an invalid length. [ 1855.959071][T25908] orangefs_mount: mount request failed with -4 [ 1855.965514][T25909] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1856.592878][T25912] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1856.608829][ T9] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 1856.619666][T25912] cramfs: wrong magic [ 1856.630355][T25912] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5048'. [ 1856.802918][ T5848] usb 10-1: USB disconnect, device number 58 [ 1856.846869][ T5848] usblp0: removed [ 1857.017418][ T9] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1857.229218][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.356438][ T9] usb 9-1: config 0 has no interface number 0 [ 1857.521282][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1857.553164][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.588315][ T9] usb 9-1: Product: syz [ 1857.592547][ T9] usb 9-1: Manufacturer: syz [ 1857.597169][ T9] usb 9-1: SerialNumber: syz [ 1857.790185][ T9] usb 9-1: config 0 descriptor?? [ 1857.802216][T25924] (null): rxe_set_mtu: Set mtu to 4096 [ 1857.814043][T25924] rdma_rxe: rxe_newlink: failed to add lo [ 1857.817037][ T9] usb 9-1: can't set config #0, error -71 [ 1857.851948][ T9] usb 9-1: USB disconnect, device number 77 [ 1857.859486][T25924] netlink: 'syz.2.5051': attribute type 13 has an invalid length. [ 1857.916607][T25924] gretap0: refused to change device tx_queue_len [ 1857.927253][T25924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1861.327179][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1861.607107][T25950] netlink: 'syz.9.5057': attribute type 1 has an invalid length. [ 1861.815239][T25950] bond1: entered promiscuous mode [ 1861.822329][T25950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.154202][T25949] orangefs_mount: mount request failed with -4 [ 1862.689214][T25951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.695517][ T9] usb 7-1: device descriptor read/64, error -71 [ 1862.696482][T25951] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1862.712488][T25951] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1862.725312][T25951] bond1: (slave vti0): making interface the new active one [ 1862.732865][T25951] vti0: entered promiscuous mode [ 1862.739506][T25951] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1862.956651][ T8] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1863.147991][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.236391][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1863.249984][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1863.258678][ T8] usb 3-1: Product: syz [ 1863.262843][ T8] usb 3-1: Manufacturer: syz [ 1863.273907][ T8] usb 3-1: SerialNumber: syz [ 1863.710744][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1863.775982][T23940] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 1864.215351][T23940] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1864.223543][T23940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.241781][T23940] usb 10-1: config 0 has no interface number 0 [ 1864.267600][T23940] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1864.458040][T23940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.627505][T23940] usb 10-1: Product: syz [ 1864.631921][T23940] usb 10-1: Manufacturer: syz [ 1864.653635][T23940] usb 10-1: SerialNumber: syz [ 1864.675376][T23940] usb 10-1: config 0 descriptor?? [ 1864.698979][T23940] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1864.721345][T23940] usb 10-1: No valid video chain found. [ 1865.919757][T23940] usb 3-1: USB disconnect, device number 82 [ 1866.206505][T23940] usblp0: removed [ 1867.377174][ T9] usb 10-1: USB disconnect, device number 59 [ 1867.936127][T25999] netlink: 'syz.2.5068': attribute type 1 has an invalid length. [ 1868.429455][T25998] orangefs_mount: mount request failed with -4 [ 1868.436076][T25999] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1869.423486][T26010] (null): rxe_set_mtu: Set mtu to 4096 [ 1869.473095][T26010] rdma_rxe: rxe_newlink: failed to add lo [ 1869.533665][T26010] netlink: 'syz.2.5071': attribute type 13 has an invalid length. [ 1869.560294][T26010] gretap0: refused to change device tx_queue_len [ 1869.571246][T26010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1870.202061][T23940] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1870.424440][T23940] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1870.475276][T23940] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1870.493103][T23940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1870.515447][T23940] usb 7-1: Product: syz [ 1870.519729][T23940] usb 7-1: Manufacturer: syz [ 1870.538842][T23940] usb 7-1: SerialNumber: syz [ 1871.007314][T23940] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1872.873742][ T9] usb 7-1: USB disconnect, device number 46 [ 1873.013703][ T9] usblp0: removed [ 1873.331061][ T8] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1873.589782][ T8] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1873.747540][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.789956][ T8] usb 3-1: config 0 has no interface number 0 [ 1873.802954][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1873.960504][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.989440][ T8] usb 3-1: Product: syz [ 1873.993875][ T8] usb 3-1: Manufacturer: syz [ 1873.998540][ T8] usb 3-1: SerialNumber: syz [ 1874.013411][ T8] usb 3-1: config 0 descriptor?? [ 1874.034841][ T8] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1874.041483][ T8] usb 3-1: No valid video chain found. [ 1876.215931][T26060] netlink: 'syz.8.5080': attribute type 1 has an invalid length. [ 1876.246717][T26060] bond1: entered promiscuous mode [ 1876.252232][T26060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1876.456343][T26048] orangefs_mount: mount request failed with -4 [ 1877.147017][ T9] usb 3-1: USB disconnect, device number 83 [ 1880.324837][T26085] bond1: left promiscuous mode [ 1880.338585][T26085] vti0: left promiscuous mode [ 1882.191124][ T9652] libceph: connect (1)[c::]:6789 error -101 [ 1882.224720][ T9652] libceph: mon0 (1)[c::]:6789 connect error [ 1882.425999][ T8] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 1882.480770][T26110] (null): rxe_set_mtu: Set mtu to 4096 [ 1882.486888][T26110] rdma_rxe: rxe_newlink: failed to add lo [ 1882.494724][T26110] netlink: 'syz.2.5094': attribute type 13 has an invalid length. [ 1882.512217][ T9652] libceph: connect (1)[c::]:6789 error -101 [ 1882.520169][ T9652] libceph: mon0 (1)[c::]:6789 connect error [ 1882.607776][ T8] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1882.622974][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.646275][ T8] usb 10-1: config 0 has no interface number 0 [ 1882.652578][T26110] gretap0: refused to change device tx_queue_len [ 1882.659483][T26110] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1882.701192][ T8] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1882.736540][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.753532][ T8] usb 10-1: Product: syz [ 1882.758654][ T8] usb 10-1: Manufacturer: syz [ 1882.763518][ T8] usb 10-1: SerialNumber: syz [ 1882.787938][ T8] usb 10-1: config 0 descriptor?? [ 1883.193444][T23940] libceph: connect (1)[c::]:6789 error -101 [ 1883.713750][T23940] libceph: mon0 (1)[c::]:6789 connect error [ 1883.735246][T26103] ceph: No mds server is up or the cluster is laggy [ 1883.775364][ T8] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1883.802010][ T8] usb 10-1: No valid video chain found. [ 1886.051892][T26131] loop2: detected capacity change from 0 to 4096 [ 1886.099502][T26134] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1887.026371][T24035] usb 10-1: USB disconnect, device number 60 [ 1887.874071][T26153] netlink: 'syz.9.5104': attribute type 1 has an invalid length. [ 1888.121996][T26153] bond2: entered promiscuous mode [ 1888.128535][T26153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1888.256681][T26150] orangefs_mount: mount request failed with -4 [ 1890.152126][T24035] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1890.673618][T24035] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1890.719622][T24035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.744324][T24035] usb 7-1: config 0 has no interface number 0 [ 1890.763347][T24035] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1890.781827][T24035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.790157][T24035] usb 7-1: Product: syz [ 1890.799874][T24035] usb 7-1: Manufacturer: syz [ 1890.810303][T24035] usb 7-1: SerialNumber: syz [ 1890.839500][T24035] usb 7-1: config 0 descriptor?? [ 1890.876522][T24035] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1890.907211][T24035] usb 7-1: No valid video chain found. [ 1891.267049][ T786] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1892.567352][T26196] netlink: 'syz.9.5117': attribute type 1 has an invalid length. [ 1892.700072][T26196] bond3: entered promiscuous mode [ 1892.706522][T26196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1892.925062][T26192] orangefs_mount: mount request failed with -4 [ 1893.035085][ T786] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1893.108954][ T786] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1893.866252][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1893.884450][ T786] usb 9-1: Product: syz [ 1893.893542][ T786] usb 9-1: Manufacturer: syz [ 1893.900320][T14418] usb 7-1: USB disconnect, device number 47 [ 1893.981778][ T786] usb 9-1: SerialNumber: syz [ 1894.302510][ T786] usb 9-1: can't set config #1, error -71 [ 1894.312554][ T786] usb 9-1: USB disconnect, device number 78 [ 1895.889889][T24035] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1896.508988][T26245] netlink: 'syz.9.5129': attribute type 1 has an invalid length. [ 1896.888592][T26243] orangefs_mount: mount request failed with -4 [ 1896.895278][T26245] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1897.636103][T26253] fuse: Bad value for 'fd' [ 1897.728215][T24035] usb 3-1: Using ep0 maxpacket: 8 [ 1897.773712][T24035] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1897.831839][T24035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.961056][T24035] usb 3-1: config 0 has no interface number 0 [ 1898.043230][T24035] usb 3-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1898.292025][T24035] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1898.370647][T26251] loop6: detected capacity change from 0 to 4096 [ 1898.391074][T24035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.478492][T24035] usb 3-1: Product: syz [ 1898.514668][T24035] usb 3-1: Manufacturer: syz [ 1898.545871][T24035] usb 3-1: SerialNumber: syz [ 1898.570089][T26258] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1898.735365][T24035] usb 3-1: config 0 descriptor?? [ 1899.077673][T24035] usb 3-1: can't set config #0, error -71 [ 1899.148086][T24035] usb 3-1: USB disconnect, device number 84 [ 1900.045618][T26266] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1903.785561][T24035] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1904.235202][T24035] usb 7-1: Using ep0 maxpacket: 8 [ 1904.592764][T24035] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1904.615877][T24035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.632641][T24035] usb 7-1: config 0 has no interface number 0 [ 1904.683314][T24035] usb 7-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1904.715626][T24035] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1904.726030][T24035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.759736][T24035] usb 7-1: Product: syz [ 1904.763940][T24035] usb 7-1: Manufacturer: syz [ 1904.779995][T24035] usb 7-1: SerialNumber: syz [ 1904.801322][T24035] usb 7-1: config 0 descriptor?? [ 1904.943835][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5149'. [ 1907.210180][T24035] ath6kl: Failed to submit usb control message: -110 [ 1907.352872][T24035] ath6kl: unable to send the bmi data to the device: -110 [ 1907.398920][T24035] ath6kl: Unable to send get target info: -110 [ 1907.440901][T24035] ath6kl: Failed to init ath6kl core: -110 [ 1907.512118][T24035] ath6kl_usb: probe of 7-1:0.239 failed with error -110 [ 1907.661140][T26318] bond1: left promiscuous mode [ 1907.730165][T26325] loop2: detected capacity change from 0 to 4096 [ 1907.806659][T26332] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1908.301503][T14418] usb 7-1: USB disconnect, device number 48 [ 1911.222214][T26360] (null): rxe_set_mtu: Set mtu to 4096 [ 1911.227903][T26360] rdma_rxe: rxe_newlink: failed to add lo [ 1911.241736][T26360] netlink: 'syz.2.5156': attribute type 13 has an invalid length. [ 1911.263664][T26360] gretap0: refused to change device tx_queue_len [ 1911.271288][T26360] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1911.563320][T26367] ================================================================== [ 1911.571435][T26367] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 1911.579239][T26367] Read of size 8 at addr ffff888026f96618 by task syz.2.5159/26367 [ 1911.587208][T26367] [ 1911.589657][T26367] CPU: 1 PID: 26367 Comm: syz.2.5159 Not tainted syzkaller #0 [ 1911.597133][T26367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1911.607206][T26367] Call Trace: [ 1911.610494][T26367] [ 1911.613430][T26367] dump_stack_lvl+0x18c/0x250 [ 1911.618136][T26367] ? read_lock_is_recursive+0x20/0x20 [ 1911.623526][T26367] ? show_regs_print_info+0x20/0x20 [ 1911.628740][T26367] ? load_image+0x420/0x420 [ 1911.633284][T26367] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1911.638838][T26367] ? __virt_addr_valid+0x10c/0x380 [ 1911.643984][T26367] ? __virt_addr_valid+0x10c/0x380 [ 1911.649110][T26367] ? __virt_addr_valid+0x10c/0x380 [ 1911.654238][T26367] print_report+0xa8/0x210 [ 1911.658666][T26367] ? dvb_device_open+0xc9/0x360 [ 1911.663534][T26367] kasan_report+0x117/0x150 [ 1911.668087][T26367] ? chrdev_open+0x385/0x600 [ 1911.672694][T26367] ? dvb_device_open+0xc9/0x360 [ 1911.677563][T26367] dvb_device_open+0xc9/0x360 [ 1911.682260][T26367] chrdev_open+0x58c/0x600 [ 1911.686694][T26367] ? cd_forget+0x160/0x160 [ 1911.691125][T26367] ? fsnotify_perm+0x3ed/0x5e0 [ 1911.695944][T26367] do_dentry_open+0x880/0x14b0 [ 1911.700725][T26367] ? cd_forget+0x160/0x160 [ 1911.705156][T26367] path_openat+0x284f/0x3270 [ 1911.709780][T26367] ? verify_lock_unused+0x140/0x140 [ 1911.715005][T26367] ? do_filp_open+0x430/0x430 [ 1911.719708][T26367] do_filp_open+0x1f2/0x430 [ 1911.724229][T26367] ? vfs_tmpfile+0x480/0x480 [ 1911.728843][T26367] ? _raw_spin_unlock+0x28/0x40 [ 1911.733711][T26367] ? alloc_fd+0x590/0x640 [ 1911.738059][T26367] do_sys_openat2+0x134/0x1d0 [ 1911.742762][T26367] ? do_sys_open+0xe0/0xe0 [ 1911.747196][T26367] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1911.753199][T26367] ? lock_chain_count+0x20/0x20 [ 1911.758069][T26367] __x64_sys_openat+0x139/0x160 [ 1911.762942][T26367] do_syscall_64+0x55/0xb0 [ 1911.767380][T26367] ? clear_bhb_loop+0x40/0x90 [ 1911.772064][T26367] ? clear_bhb_loop+0x40/0x90 [ 1911.776764][T26367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.782677][T26367] RIP: 0033:0x7f5b2ff5d68e [ 1911.787106][T26367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1911.806732][T26367] RSP: 002b:00007f5b30e53b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1911.815164][T26367] RAX: ffffffffffffffda RBX: 00007f5b30e546c0 RCX: 00007f5b2ff5d68e [ 1911.823145][T26367] RDX: 0000000000040002 RSI: 00007f5b30e53c00 RDI: ffffffffffffff9c [ 1911.831134][T26367] RBP: 00007f5b30e53c00 R08: 0000000000000000 R09: 0000000000000000 [ 1911.839113][T26367] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1911.847098][T26367] R13: 00007f5b30216128 R14: 00007f5b30216090 R15: 00007ffe7ebef758 [ 1911.855096][T26367] [ 1911.858119][T26367] [ 1911.860440][T26367] Allocated by task 1: [ 1911.864510][T26367] kasan_set_track+0x4e/0x70 [ 1911.869112][T26367] __kasan_kmalloc+0x8f/0xa0 [ 1911.873709][T26367] dvb_register_device+0x309/0x1df0 [ 1911.878922][T26367] dvb_register_frontend+0x62d/0x900 [ 1911.884217][T26367] vidtv_bridge_probe+0x9d6/0xf60 [ 1911.889358][T26367] platform_probe+0x13b/0x1c0 [ 1911.894051][T26367] really_probe+0x247/0xae0 [ 1911.898567][T26367] __driver_probe_device+0x1f5/0x390 [ 1911.903862][T26367] driver_probe_device+0x4f/0x420 [ 1911.908896][T26367] __driver_attach+0x444/0x6d0 [ 1911.913669][T26367] bus_for_each_dev+0x235/0x2b0 [ 1911.918523][T26367] bus_add_driver+0x340/0x630 [ 1911.923207][T26367] driver_register+0x23a/0x310 [ 1911.927981][T26367] vidtv_bridge_init+0x3d/0x70 [ 1911.932821][T26367] do_one_initcall+0x242/0x790 [ 1911.937614][T26367] do_initcall_level+0x13d/0x1f0 [ 1911.942586][T26367] do_initcalls+0x69/0xd0 [ 1911.946922][T26367] kernel_init_freeable+0x3d9/0x560 [ 1911.952128][T26367] kernel_init+0x1d/0x1c0 [ 1911.956463][T26367] ret_from_fork+0x48/0x80 [ 1911.960887][T26367] ret_from_fork_asm+0x11/0x20 [ 1911.965662][T26367] [ 1911.967986][T26367] Freed by task 26266: [ 1911.972051][T26367] kasan_set_track+0x4e/0x70 [ 1911.976652][T26367] kasan_save_free_info+0x28/0x40 [ 1911.981690][T26367] ____kasan_slab_free+0x126/0x1f0 [ 1911.986811][T26367] slab_free_freelist_hook+0x130/0x1a0 [ 1911.992276][T26367] __kmem_cache_free+0xba/0x1f0 [ 1911.997144][T26367] dvb_device_open+0x2d9/0x360 [ 1912.001918][T26367] chrdev_open+0x58c/0x600 [ 1912.006342][T26367] do_dentry_open+0x880/0x14b0 [ 1912.011117][T26367] path_openat+0x284f/0x3270 [ 1912.015712][T26367] do_filp_open+0x1f2/0x430 [ 1912.020222][T26367] do_sys_openat2+0x134/0x1d0 [ 1912.024911][T26367] __x64_sys_openat+0x139/0x160 [ 1912.029769][T26367] do_syscall_64+0x55/0xb0 [ 1912.034197][T26367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.040105][T26367] [ 1912.042432][T26367] The buggy address belongs to the object at ffff888026f96600 [ 1912.042432][T26367] which belongs to the cache kmalloc-256 of size 256 [ 1912.056613][T26367] The buggy address is located 24 bytes inside of [ 1912.056613][T26367] freed 256-byte region [ffff888026f96600, ffff888026f96700) [ 1912.070329][T26367] [ 1912.072654][T26367] The buggy address belongs to the physical page: [ 1912.079148][T26367] page:ffffea00009be580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26f96 [ 1912.089307][T26367] head:ffffea00009be580 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1912.098249][T26367] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1912.106233][T26367] page_type: 0xffffffff() [ 1912.110583][T26367] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 1912.119171][T26367] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1912.127752][T26367] page dumped because: kasan: bad access detected [ 1912.134170][T26367] page_owner tracks the page as allocated [ 1912.139884][T26367] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16721066512, free_ts 0 [ 1912.159608][T26367] post_alloc_hook+0x1c1/0x200 [ 1912.164392][T26367] get_page_from_freelist+0x2181/0x22a0 [ 1912.169945][T26367] __alloc_pages+0x1f0/0x460 [ 1912.174539][T26367] alloc_page_interleave+0x24/0x1e0 [ 1912.179743][T26367] alloc_slab_page+0x5d/0x180 [ 1912.184423][T26367] new_slab+0x87/0x2d0 [ 1912.188502][T26367] ___slab_alloc+0xc5c/0x12f0 [ 1912.193202][T26367] __kmem_cache_alloc_node+0x11f/0x250 [ 1912.198677][T26367] kmalloc_trace+0x2a/0xe0 [ 1912.203107][T26367] bus_add_driver+0x162/0x630 [ 1912.207790][T26367] driver_register+0x23a/0x310 [ 1912.212561][T26367] i2c_register_driver+0xba/0x160 [ 1912.217630][T26367] do_one_initcall+0x242/0x790 [ 1912.222409][T26367] do_initcall_level+0x13d/0x1f0 [ 1912.227357][T26367] do_initcalls+0x69/0xd0 [ 1912.231697][T26367] kernel_init_freeable+0x3d9/0x560 [ 1912.236907][T26367] page_owner free stack trace missing [ 1912.242270][T26367] [ 1912.244594][T26367] Memory state around the buggy address: [ 1912.250226][T26367] ffff888026f96500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1912.258292][T26367] ffff888026f96580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1912.266359][T26367] >ffff888026f96600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1912.274420][T26367] ^ [ 1912.279268][T26367] ffff888026f96680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1912.287332][T26367] ffff888026f96700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1912.295395][T26367] ================================================================== [ 1912.307930][T26367] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1912.315142][T26367] CPU: 1 PID: 26367 Comm: syz.2.5159 Not tainted syzkaller #0 [ 1912.322609][T26367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1912.332668][T26367] Call Trace: [ 1912.335949][T26367] [ 1912.338885][T26367] dump_stack_lvl+0x18c/0x250 [ 1912.343583][T26367] ? show_regs_print_info+0x20/0x20 [ 1912.348821][T26367] ? load_image+0x420/0x420 [ 1912.353341][T26367] panic+0x2ca/0x720 [ 1912.357272][T26367] ? bpf_jit_dump+0xd0/0xd0 [ 1912.361803][T26367] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1912.367456][T26367] ? dvb_device_open+0xc9/0x360 [ 1912.372333][T26367] ? check_panic_on_warn+0x70/0xa0 [ 1912.377494][T26367] ? dvb_device_open+0xc9/0x360 [ 1912.382363][T26367] check_panic_on_warn+0x84/0xa0 [ 1912.387322][T26367] ? dvb_device_open+0xc9/0x360 [ 1912.392189][T26367] end_report+0x6f/0x130 [ 1912.396445][T26367] kasan_report+0x128/0x150 [ 1912.400962][T26367] ? chrdev_open+0x385/0x600 [ 1912.405566][T26367] ? dvb_device_open+0xc9/0x360 [ 1912.410435][T26367] dvb_device_open+0xc9/0x360 [ 1912.415130][T26367] chrdev_open+0x58c/0x600 [ 1912.419556][T26367] ? cd_forget+0x160/0x160 [ 1912.423985][T26367] ? fsnotify_perm+0x3ed/0x5e0 [ 1912.428755][T26367] do_dentry_open+0x880/0x14b0 [ 1912.433531][T26367] ? cd_forget+0x160/0x160 [ 1912.437958][T26367] path_openat+0x284f/0x3270 [ 1912.442567][T26367] ? verify_lock_unused+0x140/0x140 [ 1912.447780][T26367] ? do_filp_open+0x430/0x430 [ 1912.452474][T26367] do_filp_open+0x1f2/0x430 [ 1912.456985][T26367] ? vfs_tmpfile+0x480/0x480 [ 1912.461590][T26367] ? _raw_spin_unlock+0x28/0x40 [ 1912.466458][T26367] ? alloc_fd+0x590/0x640 [ 1912.470798][T26367] do_sys_openat2+0x134/0x1d0 [ 1912.475493][T26367] ? do_sys_open+0xe0/0xe0 [ 1912.479920][T26367] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1912.485909][T26367] ? lock_chain_count+0x20/0x20 [ 1912.490771][T26367] __x64_sys_openat+0x139/0x160 [ 1912.495636][T26367] do_syscall_64+0x55/0xb0 [ 1912.500078][T26367] ? clear_bhb_loop+0x40/0x90 [ 1912.504767][T26367] ? clear_bhb_loop+0x40/0x90 [ 1912.509450][T26367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.515364][T26367] RIP: 0033:0x7f5b2ff5d68e [ 1912.519796][T26367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1912.539416][T26367] RSP: 002b:00007f5b30e53b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1912.547849][T26367] RAX: ffffffffffffffda RBX: 00007f5b30e546c0 RCX: 00007f5b2ff5d68e [ 1912.555841][T26367] RDX: 0000000000040002 RSI: 00007f5b30e53c00 RDI: ffffffffffffff9c [ 1912.563828][T26367] RBP: 00007f5b30e53c00 R08: 0000000000000000 R09: 0000000000000000 [ 1912.571807][T26367] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1912.579789][T26367] R13: 00007f5b30216128 R14: 00007f5b30216090 R15: 00007ffe7ebef758 [ 1912.587778][T26367] [ 1912.591063][T26367] Kernel Offset: disabled [ 1912.595374][T26367] Rebooting in 86400 seconds..