last executing test programs: 2m10.141836996s ago: executing program 2 (id=285): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004780)='./bus\x00', 0x3000008, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c646174613d77726974656261636b2c75737271756f74612c626172726965723d30303030303030303030303030303030303030372c6865617274626561743d6e6f6e652c696e6f646536342c00ff65c4d5fce9c89960fb885e061c4bf90b5b3e317c0d5bfa1c89db07887560d006274d52fa5b01dba2ab7a782649b606d1fee5d7bc"], 0x1, 0x470a, &(0x7f00000047c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKBdH6IlKogg8GbaArM3Nvdu6d2d7JTtJi8/tBO3vPvefcM/vfe+6ceyaFWPXUwmpxYbVYWipWZh9cva34uUq5tjgXCq+TN/r8dOdK5CT7N86R933gI/fdFsIfjn3tQ2tra2uhbjh0dKDl5/P/Oj3b+pooZOrU2+3cWtMfa4+98vO3vNYReU6EEHa09auuL4TwsV+EsCWEMBKXjcavgyGEbSGEKITw+G/++eOBXrrQ4uz9L71w7MzhfWemnnziuQvzRzc8MArhu+Xdt84vvry/744X33GZTg8AAK/pg8eP3Ht08kB4OgpD5/rbP6/vjF+Tz8d3v+1T9zzav75/je70vY6hAgAAQMb6/H84erXDel2yspYsCT710Il7n4nW95vY/n87dM+RO98/eSBe/43a9t8eF/3jvX2NNdTsum92/XckU7/z+u/6eR796vO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp954OV2tLJzZ/3zSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/69nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPn9jE93/q48xwVO/rQGoEeDUu3+ArTGSk828GkRo641/kRtf/fzP5X5dpPy//uyt//91fe7j/bzT+j0/10ubVI51/M4hi6oj163+kkH/9X59pPy//35760/Of7Ole3Z5/vf/j7v9dSecf34jTg2fjN9nt+L8z035e/rvGHnhkYRP9/vBg3M+hKIy1fOv0XP0WNrS+Xt2Y0tR3L2/iJFeBdP7N31rq0hlqvjSu/+H88X9Xpv28/B/Z8/X3nO7p+7+dx/9J439X0vkPNsouJf9XMvnvzrSfl/8PT//tzw9c5vG/vn1Q/l1J57+1bf/6859CV/O/GzL1857/7Bt95rG/9DD/T/qXnDd5/pM8hxiPms9/6Cyd/zUbHtft/X9Ppl7e9f+tf7/47P5exv9owBOAHqTz39Ys7DAB7Db/GzPt5+X/hfu+/PG+Tcz/Gp/4BpL8W+b/W5rlR43/XUnnv71ZmPrHUA83/t+4/0ftuf8nk/9Nmfbz8r9waKL/K5f5/l/v/3iHR9m0S+c/tOFx9fx/38X9/+ZMvbz8v7j3py/f2tPn/xAmzfU3LZ3/tRse17j+B/LzvyVTLy//73zj10893EP/395DXbL5N+/1qcsp/mze7fy/mGk/L/8fjZ8/u/8KzP9ud//vSjr/5qr5peSfnf/vzbSfl//3jvxgpf8KPP+5S/4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbMhq/DoeoMJHaLhQmJkIYi7d3ha3RTOnk9Ey5MvuZ1RB2xOXFMBrNlyszpfL0wlLl5Nx0qVyuzIZwXbx/RxiIVsuV6vRiafn6i20NRqfmSivVmblSNYSwMy6/MWxP2ppZqC6WlhvHJnWuiUqfrVWqpYna6txK2H2xfFtSPr9SqS3fcLGtawuVleVTpaXpkwsr756cnJwMey72eSSae6g6t1Rt9ra5t14nqTsctbyZxu6bWs736UptZalUbpTf3FKnXJktlVvq3NJyvupKbWm2VJ2bLlfmk/MVW+q2vLfG7r3xvvEwknp/Sd2sg/HrnYeOf/T44QNt+4tROu+l2uLc5PbOfxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvHk9fce7vh1C6G9uFUIIB5Mfovi/lLP3v/TCsTOH952ZevKJ5y7MH+10DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo79/MSRRjHAfidsdUCKaWLkMfAEBG9SVjQLyKpXCM7dukc1Ckhg6LAMKJjQRAEdYsKgk5B5V8QdfDYqbrUoYNBBBWjMyk71opLzuo8DwzvzM7uO1+YZXfm/QwvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8zi3c649aS/v3jK/dPSE0Jbuaw0hDEUL61/2tYTOEMK3r5NnwjJtprOm/7dj0yP5o0Z/1g6MPLoxFK2+/uyz2XE7QhT3L9neFcVxf//q+9+o7vY9n+iLQoiLLoRCzA4/PVsJIbQUXQiF+PVp5lLy+76p6EL4r1r/8nrPx3vtyb7KGtdDc9i253N35R/fDza2C9WLfUv/++tdgjdwiU4Tenfq6vvYSS29V+n9f5Qu7gfLYerk0Q8vii6CwkxNjx8rugYAAGBtna+T/4etC+sPrkShsyOf+3+vyf+7avpfPv9fdH/HzeHJhkKI7bmxyWR7YH8jfa5zKxjXO9177c6bivGespL/l5v8v9zk/+Um/y83+X+5yf9JvJb/l9KTW3vnXhZdBIWR/wMAQPkcPjE6Xh0YTG7+N/9sy+f13WlbTfP0h7cneh8vGTeSH65vR46PHjw0MJie9/yA4OL8D/H83h/p8x61bWas5rmLevM/dD2bnbneln9HdYXPb2T1Zcc1/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAb3bnnoZBMArD6HdbEbXRqmjCwk+CDzQwIgApzGhABxMGYCAEFDCQc5Z7k2d5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5/lVeF99fGiO91og0lV127Z/jafYz9+2wvM8eN24FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2duBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4KgAA///lHcpr") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000002c0)='./file3\x00') 2m8.708398348s ago: executing program 2 (id=288): syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000007f0000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6a0000000048110000000000000000000000ffff7f000b01fe800000000000000000000000000070ce2814153d18fa780300010000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c26d0eb5c3b85e4508546e551af9e5963171a15e05e7d43b829c6d63e6138529e8666da2a59f5fd007cd83f69b459bce772af4cf5a2c9a9d2899e0db1ae3b72a120c8818d5fc8ad0669a6fea2dd35c3d400dbe14a9a2324c77"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) shmget(0x0, 0x800000, 0x1004, &(0x7f0000000000/0x800000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x60, r5, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 2m3.091113455s ago: executing program 2 (id=300): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="caf98025f2ae2e72f9b3ab9c585ff3bb8094deaecd75887dcd50d58fb8f3118236898b858442c825382d707b681ae6e2b60147258f4c58db567e0b259e0f1ac910d0050f5f062a86eed29c57d19ec577c422d31c7da3476698e1512222138c03b48970d9dbb0f22a", 0x68) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$char_usb(r4, &(0x7f0000002600)="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", 0xf9a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x1002, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.088919746s ago: executing program 2 (id=302): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4148a1b414e7e323) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40060, 0x96) 1m59.981265872s ago: executing program 2 (id=309): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES8=r7, @ANYRES64=r4], 0x14}}, 0x40080) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001e00030903000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00ff0e1cbb78ffffe1b60100", @ANYRES32=0x0, @ANYBLOB="140014006c6f000000000000000000000000000008002900a24f0600"], 0x44}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc4) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002880), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000000000000616263649b85f865666768696a6b6c6d6e6f707172737475767778797a30313204343536"], 0x29, 0xfffffffffffffffc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) 1m58.232481043s ago: executing program 2 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b81", 0x75}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c0, 0x29, 0x36, {0x5e, 0x34, '\x00', [@generic={0xff, 0x44, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac435"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdf, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m57.663810228s ago: executing program 32 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b81", 0x75}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c0, 0x29, 0x36, {0x5e, 0x34, '\x00', [@generic={0xff, 0x44, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac435"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdf, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m20.363154692s ago: executing program 0 (id=384): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xda, 0x9, 0x10, 0x44, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x2, 0x8}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000440000000000000000000000289fc85a818f824d02000000030000000030000016a68177962bd8c28790efb6be56f160939c145155"], &(0x7f00000001c0)=""/43, 0x30, 0x2b, 0x0, 0xea7, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, r1, 0x0, '\x00', r2, r3, 0x5, 0x4, 0x3}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m14.601175466s ago: executing program 0 (id=390): syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000007f0000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6a0000000048110000000000000000000000ffff7f000b01fe800000000000000000000000000070ce2814153d18fa780300010000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c26d0eb5c3b85e4508546e551af9e5963171a15e05e7d43b829c6d63e6138529e8666da2a59f5fd007cd83f69b459bce772af4cf5a2c9a9d2899e0db1ae3b72a120c8818d5fc8ad0669a6fea2dd35c3d400dbe14a9a2324c77"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) shmget(0x0, 0x800000, 0x1004, &(0x7f0000000000/0x800000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 1m9.434086029s ago: executing program 0 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f00000001c0), 0x1, 0x968d, &(0x7f000001fd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4001, 0x8001, 0xc}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000019300)='projid_map\x00') r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m4.128197946s ago: executing program 0 (id=407): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@fat=@nocase}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x3, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) chdir(&(0x7f0000000400)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) mknod$loop(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @remote, 0xffffffdd}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="24000000000000002900000032000000ff0200"/29, @ANYRES32], 0x28}, 0x8855) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000b40500160007"], 0x4c}}, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m0.338917073s ago: executing program 0 (id=415): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4000) recvmsg(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 59.299329317s ago: executing program 0 (id=418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) r6 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 57.769509518s ago: executing program 33 (id=418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) r6 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 15.139902345s ago: executing program 6 (id=513): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0xc1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$sysctl(r4, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.811102184s ago: executing program 3 (id=517): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket(0x10, 0x3, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="26643db0e3d7a672736abb81ba257c1b32b80862f80905d86611ede40f0babb7e0c2a1186e5dc8b8d4f8231c0fb42e2ac3bce3615559bed8e1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x5c, 0x59455247, 0x500, 0x2d0, 0x0, @discrete={0x5, 0x6}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r6, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}) io_uring_enter(r7, 0x3e65, 0xfffffffc, 0x40, 0x0, 0x0) accept4(r5, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000002c0)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x3, 0x7fffffff, 0x3f8}, 0x0, 0x0) 12.244820069s ago: executing program 6 (id=521): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @call, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0xff9, &(0x7f0000000a80)=""/4089}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r0, 0xffff8000) 12.107743464s ago: executing program 3 (id=524): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004780)='./bus\x00', 0x3000008, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c646174613d77726974656261636b2c75737271756f74612c626172726965723d30303030303030303030303030303030303030372c6865617274626561743d6e6f6e652c696e6f646536342c00ff65c4d5fce9c89960fb885e061c4bf90b5b3e317c0d5bfa1c89db07887560d006274d52fa5b01dba2ab7a782649b606d1fee5d7bc"], 0x1, 0x470a, &(0x7f00000047c0)="$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") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000002c0)='./file3\x00') 11.789069026s ago: executing program 1 (id=525): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xda, 0x9, 0x10, 0x44, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x2, 0x8}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000440000000000000000000000289fc85a818f824d02000000030000000030000016a68177962bd8c28790efb6be56f160939c145155"], &(0x7f00000001c0)=""/43, 0x30, 0x2b, 0x0, 0xea7, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, r1, 0x0, '\x00', r2, r3, 0x5, 0x4, 0x3}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.688962397s ago: executing program 3 (id=526): openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x7, 0x5000, 0x1000, &(0x7f0000fec000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.449031503s ago: executing program 1 (id=527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000003000)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x6c, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="6ecab9", 0x3}], 0x1}], 0x1, 0x4000884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0x3, 0x7ffcfffc}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 9.260900784s ago: executing program 3 (id=530): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000002480)={0x2, 'ipvlan0\x00', 0x3}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x60008, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}]}}, 0x1, 0x0, &(0x7f0000000200)="c404075b0c965d1ffc682f906ad7474a3d659624d37459048fcd7aa31d130dbc799ad194fe59c64e5d414a5fe466d9d47ffa723c500e549e73cef71de4eb094227c8ce14481cacc53073b4bd7384b1c97ded10c56b1186180d0edb7450ebd091660ad6c8adbd2b35b03113a8") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, 0x0}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000000000000700"/24, @ANYRES32, @ANYBLOB], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x44, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x2c, 0x4, @private0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r5, 0x25, 0x3, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'pim6reg0\x00', &(0x7f0000000680)=@ethtool_dump={0x3f, 0x7fffffff, 0x4, 0x71, "d4a169c72f419b924f5853912863d7ea657328e136d5ccf014696e728ff29cdd6b38a70cba8bd4a40746417c316abe3c5e3539329a1e7126f985204cd8573486b803c7cf078212beaab68978d7f482837b87f4cf5a568511c033ee9da79a62594f5c5abed77a675048fe112edb37d76f95"}}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r8], 0x40c}}, 0x0) unshare(0x8040480) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r9, 0x339, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 7.723646883s ago: executing program 1 (id=533): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4000) recvmsg(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.487229833s ago: executing program 6 (id=534): prctl$PR_MCE_KILL(0x35, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_USERDATA={0xb4, 0xd, 0x1, 0x0, "b7a89b4e7101e1fc0d99319c339f2c5f6c609c463b7cb46e9f7718c36f3f513f2b70cef01d1b9250c9382a007e8c26447f7aa92cb4550af6d65b9f416dd8a1d374223b9b5a7d1444b63504d61f4933eec6983c446888e0d07c357f38d865c7d8a1b1796d62fb703b044237f8caaeb65b503d78d0b47ee16a45b2a7f33a2c74e990a52a6cbbedf6609598cb8756a2818654a4e0a64ca52bd1db2e85b552665d365eea49294fd792669e79a841fa288e56"}]}], {0x14}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0x7feffffffdfffffc, 0x10000002000003, 0x0, 0x0, 0x300}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001800010000000000000000000a000000ff03ff0800000000040008805997a69250c28d68f17f615bd7f9faa7f2c6581fd02d32c0d949b5dc5eccc4ee6706e5f46ce79732331d0af3747a6655fdc339c85a5c5950628d8ea8bb5d56d29e2613dd292f88cc01a9c81af1f29395ae99e765efc2dad960da4617df3dc50a3d42069a36fcfdc133a95e3ed5ab4ee8e79c16e7"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x5, 0x9, 0x4, {0xa, @pix_mp={0x4, 0xffffffff, 0x31303453, 0x5, 0xc, [{0x0, 0x1}, {0x5, 0xa}, {0x7, 0x985}, {0x4, 0xc6e}, {0x8, 0xdfc}, {0x4, 0x6}, {0xe, 0x4}, {0x3, 0x8}], 0x3, 0x4, 0x2, 0x1, 0x4}}, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "f931e02edd81e117c55aee8334a02f96bdf9f6b4d408"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_USERDATA={0x2e, 0x7, 0x1, 0x0, "7407c75fd02ba2c5cf5bf6fe66b0086e8d4818380b263fb7f7c1983337b85b8f04fcc04e00d7d8428487"}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xb6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}]}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x30, 0x4, 0x66}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f746f5f626f6e640000000c80"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.485412675s ago: executing program 5 (id=535): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000580)={0x4, 0x1, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.306474467s ago: executing program 3 (id=536): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04063120"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa2b080045000024006400001a11907864010100fffff8fffffd4620001090784207000000000000"], 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/97, 0x61}, {0x0}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x5, &(0x7f0000000000)=""/62, 0x3e}, 0x6ca}], 0x1, 0x40014102, 0x0) 5.964371414s ago: executing program 5 (id=537): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x140, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), &(0x7f0000000280)=0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x1000, @mcast2, 0x9d}, 0x1c) 5.909993516s ago: executing program 6 (id=538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0xd0, 0x290, 0x1a0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x290}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}, 0x18, 0x25, 0x162b}}}, {{@ipv6={@local, @private0, [0xffffff00, 0x0, 0x0, 0xff], [0xff], 'veth1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast, 0x2e}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00', {}, {}, 0x27}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x0, 0x18, 0x1, "f4"}, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0xffff, 0x800a, 0x54, 0x2, r6}, &(0x7f00000000c0)=0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@any, 0x5}, @host, 0x1e, 0x4, 0x9, 0x3643, 0xffff, 0x0, 0x59d2dfce}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000080)=0x105, 0x9) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x310, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x421}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "dd77072f78a66c3e38006a445f1ffbba70f91c68c60784507062611f81e5615fc2a9392ba366d6a5a7e80111fb180e3dfe4bcc39d365141bd9e20fdaf2e33dea219ae08a241753481b7ee4bd2c97820a6e21667aa4ef7f"}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "54a834e34a3424844703a53406410d079988fa51d6cbcd21079ec1d92f4e2e6e0ea2e77fdd4ef20b5f11b0c08040a990c95eeffc84735453b7c0fd897992d7bf2563099b1bb1205fda114ba7d400e0dd15b48fc975ce5f210b69755a7d0d388e85db6e4322bf66"}, @TIPC_NLA_NODE_ID={0x84, 0x3, "f08b312d8beb9a5bb52fbd982de8fd67cadbb3bff25393039c8ddcb536744eec958066705fb8a4828b8f54da46be785694a41a42153c086ec46c75f06f4fbedbb59450a5fe73fafc272f32d6a1517aae1405b452cee728d96d6744c0e29a4a26677791844a650e0f35c909afdccd1026c3be3caae034b4c1b2b4cea6cbf790b0"}, @TIPC_NLA_NODE_ID={0xf, 0x3, "18046caf725c8c31423274"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a9f16b85ed5743986e8882b764f68bab274f752e88229cacd1d91642a79bfb8ad8"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x48040}, 0x20040014) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r10, 0x313}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r10, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4814}, 0x40000) r11 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.796496468s ago: executing program 5 (id=539): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.79453301s ago: executing program 4 (id=540): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xfff8, 0x8, 0x10, 0x7}, {0x400, 0x40, 0x2, 0x8}, {0x7, 0x1, 0x6, 0x1}, {0x25, 0x4, 0x0, 0x80000000}, {0x7, 0x8, 0x1}]}) 5.580418854s ago: executing program 5 (id=541): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @call, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0xff9, &(0x7f0000000a80)=""/4089}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r0, 0xffff8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48091}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') r5 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 5.487714817s ago: executing program 4 (id=542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="31735300671a05003ba4d09ca1750474b03a8c41286312f9669c231b6808c6ad53c908e0d7521efbcd35cb2424f95af7cf13a90c88ec55faae11b6bf9348a233586d5af7c6f19ea29b256fb9086bc936c44fbefa11da3b81215f9df5b2000926a61c8e806ac14175f7dbbaffd1e4a65baa8437b65074cea15aae5a199be7"], 0x20}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x2c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 3.258540127s ago: executing program 4 (id=543): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1b26d318) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0xfffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003b00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000002000a000a01010100000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) shutdown(r3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x15e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x22741, 0x1aa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) 3.201099067s ago: executing program 3 (id=544): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @call, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0xff9, &(0x7f0000000a80)=""/4089}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r0, 0xffff8000) 2.779446036s ago: executing program 1 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x168, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "e26650ad996852b124f0c9f6e3a1f41d69554f0c833c86d2dda88a15d2e4f578973584d6a4290da299b927d8511cefc1bd810cea6426767296445a4acba48244edf14e3c2e59a122f78b124729ff27a3044e7e4faea2cd0765cda91193a4c430db12c15c945e96c66bd0c6fb2b7d47cceaf8c3c735d89ad85af442ca2329ef3948f456ea7225486437cbeb708b9e81816f621f9863ccca3d6bba3a2781de98bb61c47404db960ce14abdfed6ad93fbb5951cc6556f73bc4b11ab6fb217e5fd5576eaaf2db1c1c82a9091e1c45a07a8d5596f934397ce3fb2414e637a8678b151b0d92b"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x1f4}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r0, &(0x7f0000001f40)=[{&(0x7f00000005c0)="a6808abb7bd864ddf8acb62f25684c257e8dfd47c350a3afef20ca14d78c8981976a05543b001f05ca50c353aea05f737fe6cce114945137673dbce20f859b5191c86c601bcc2336d88606eff2f16e86d3214100935d1746b2de4882bfe746dcdbf025320e5b007bedf62184cb806aa55c9f3a5c086b4e4c88f8f354fc9878afc65ab5f57399fbdad7cda69fb7ec8f35be12fcee509732dec39025403f29e1b8c2f51706ddcc5518ed864db67c22a3813c98706d27de05c181107a7a2abaf9505ca8a831"}, {&(0x7f0000000180)="1c3a54d6c5581da130ec8d1354106fb391a14c40ac8a95bfc19c02a6bedfcdcba8c20dc1286522"}, {&(0x7f0000000740)="c31fa0a99646f0fc05fffc92ca1fce2da76386e9763e58be7cf4ef6c2a62a74474e5441703e276a0160994d62181d1bf7d806e46b466078447f6d750ef8ae1cf50658332fa194ea1cd385ace9a9a00c2c57820958ca1325c079c8d1398d3fe586b9ab660dbd6dec8263eaa9f3ccb3282efd41688822b7877855977184c615158394ac001668de8ec8f80d11a481caf7c214a795e334f4e829829d06638575c26aede4c94d3cd58d32426dee5666e9487fce9d8f9ace4e9b0d4b9c82cd1392d5cb11781b81d8bf1974f5a420eda5543"}, {&(0x7f0000002040)="8d3d24b75be6cea74549c9edaf4120402f6b7e88952c13a1f28e92af37e50ff3b2c428fe6b1c0a30764b79348cea68987ebd0d482dad135119e076d2fa76bb7c9a87d1b48aa039c5ffbbbaa5e9dea346e43900d6fc23a28a5392c6695cbee3ef39325335bbfb018ff3e4e5a69e7a28e6638ac1c6b300821c87f5136447589ba08c36de5e500eeb1db4162242cab3f8fd16326c393e417db86c12985c"}, {&(0x7f0000000c40)="26158fc5b8ce8a7e566312ec6149bf7f3797672c311b9941993104a2cef8bb5d8e85c0216c5838afe32f717abb9b9549025f0daf6ab68b3f7a3956018ae824920efa19b80aa6deda1319d053ec41b5c9fc7c3511f297c8f85679af72ad151e81e326ddb99879e8b9d325c27980b1e2cf51a5f88b704053da22a4ddc278b40af615b4c967595f63d2b259df1dc76e4ae1fd4349f606c2fc424b70a02d31f781026e764b122535b4fbc9ce3b83f70e93e629a3798c93359a1ab4efb9b40a029186d54729611c1150fa68e37034f756ead13800a9e5e5d7073bad1a88a4a742a121e7c6"}, {&(0x7f0000000d40)="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"}, {&(0x7f0000001d40)="b84bff8f8065c7a6dc87ed62aab901e4569e978261a6719ff3c8e4592c004768ee03a8fc85ff8564592d27250d014e180feb27f8674afb35af373fe7bd356e3bd6b94bf426ce0ca3d8f0cdbc66f3dcc6add6070a1f4ba1ac459366b488aa84502cf35309fd15a80408ead12442d234"}, {&(0x7f0000001dc0)="770c00e300adc2bbf315772ebda52d9d0246aa9db5f537e0c23b8241402c4ac8ca81ccaae91106300bcb75bc68a89fd12a7ee5405bca0efae1e07f2d7f83ad152089fe0054d283e52a8538e8f8a6302132eba929234e8022eb1a7cfb27e066b5d576b6d84015cb1eb324f16f1d2a7cd54be3695a3cbbdbad7342676488bc1b03392b70659b"}, {&(0x7f0000001e80)="d9581df2dc9b53da30b2616b3bc1eb6e447b7925080e90994ebd5165d5ebd9209be25d31f6343a7c7ba1326d711d6cef5f35622ee9008174c8b7075e42862b199bb0e1c5589cbf9faba79145379897477e4b2a9fecb18fe8039a6ae036294f4973707b7889ead7972e8d83992e1ab87db3786d911dfd36c0eb30b334e745d77995ad672fe62e57fa9113d40b88561e574c64d10c3f371751ead34d5cf179cdbec466bc"}], 0x10c2) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x5, 0x0, [{0x0, 0x0, 0x1, 0x100, 0xffffffff, 0x10, 0xb}, {0x80000019, 0x81, 0x1, 0x401, 0x937, 0xb4a0, 0x8001}, {0x7, 0x9889, 0x4, 0x4, 0x4, 0xffffffff, 0x1}, {0x80000000, 0x0, 0x0, 0x5, 0x1, 0x7, 0x7}, {0xb, 0x9, 0x0, 0x2, 0x3, 0x5dfb, 0x6}]}) mprotect(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3000005) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x14) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.608254949s ago: executing program 6 (id=546): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x1062200) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf000000000000"], 0x28}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 1.378813034s ago: executing program 4 (id=547): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000580)={0x4, 0x1, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.177564854s ago: executing program 5 (id=548): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0xff, 0x6b6, &(0x7f0000001100)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x6}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0x80a, 0xfffffffc, 0x0, [{0xc, 0x5, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0xe, 0x10, 0x8, '\x00', 0xa6}, {0x2, 0xa, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x4, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x9}, {0x5, 0xdc, 0x6, '\x00', 0x4}, {0x2, 0x40, 0x15, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x9}, {0x4, 0x2, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x61, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x5, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x86, 0x81}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xd000, 0x3, &(0x7f0000004000/0xd000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$evdev(&(0x7f0000000040), 0x20000, 0x68600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x800009}, &(0x7f0000000040)=0x8) 1.167435874s ago: executing program 6 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000003000)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x6c, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="6ecab9", 0x3}], 0x1}], 0x1, 0x4000884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0x3, 0x7ffcfffc}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xb7) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 1.124838565s ago: executing program 1 (id=550): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file3\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiUhsUthYGDCiucvtoaQ5NIJgJULir0oPs4aYTU4uK5iAJMHGRjsLIY2F/4BFCisLO/8BQQsVBAuvsLCxGZkfeze3w+ZySzrfpxi+M/Nm3743b1+xIAjiv+X7tz9fn1+amT8L4AgmcMis//QAxrRmW337L68enXnZvLzz9vObD6tHn7zLPk8eEWJwobyHfx/A+1kPiZpx+/RfKSbMZB68p6+D47TRN8FQNfouOG4YHYHhttEPLN2W9tXq/aU4qt5rxwtSTMuhLodQDo3s+3W3GRbMXAghmLW/tr6x3IrjqGMJ3+xZW5vI2Iwies6Wx538lRCgO8vRtN5PZvHWs6fbcp7mZtrKXx0cdRNEAwxzZn0GO2ludEqs+I/7qKQuvIH4MdaKM9FKwUwxAMOCLGvR/F0gNXuLY1PFjk/KcC66W2OFbhGDp0rob8lM5h7PK6/RSkcJP3s7rrhgLrSAr6vZKMSm8wEo8UKW0IHfsisKRZGK8S776G790ILn1rNgw12w/ddPeb/vnH6IZsUfvUQrkHH1VnzvYO4C+LSr+4d4zXDK6k++1T9qycrD2tr6xtTSSmsxWoxWw7BxngFb58KaakR6dPpevz9XVH86bNqTfH4pxzbgAR63kqRT12PAAlSQJJ1QzUPrs5nbbf+6Y44luALgpJ7Ilhb0nug5PligbbiylWrSNSIIgiAIgiAIgiAIgiAIgijECTD1F3QI4TVl/S8AAP//CkpUTQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (fail_nth: 2) 612.179166ms ago: executing program 4 (id=551): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) creat(&(0x7f00000002c0)='./file0\x00', 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 558.527644ms ago: executing program 1 (id=552): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004780)='./bus\x00', 0x3000008, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c646174613d77726974656261636b2c75737271756f74612c626172726965723d30303030303030303030303030303030303030372c6865617274626561743d6e6f6e652c696e6f646536342c00ff65c4d5fce9c89960fb885e061c4bf90b5b3e317c0d5bfa1c89db07887560d006274d52fa5b01dba2ab7a782649b606d1fee5d7bc"], 0x1, 0x470a, &(0x7f00000047c0)="$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") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000002c0)='./file3\x00') 150.997351ms ago: executing program 4 (id=553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="31735300671a05003ba4d09ca1750474b03a8c41286312f9669c231b6808c6ad53c908e0d7521efbcd35cb2424f95af7cf13a90c88ec55faae11b6bf9348a233586d5af7c6f19ea29b256fb9086bc936c44fbefa11da3b81215f9df5b2000926a61c8e806ac14175f7dbbaffd1e4a65baa8437b65074cea15aae5a199be7"], 0x20}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x2c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 0s ago: executing program 5 (id=554): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04063120"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa2b080045000024006400001a11907864010100fffff8fffffd4620001090784207000000000000"], 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/97, 0x61}, {0x0}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x5, &(0x7f0000000000)=""/62, 0x3e}, 0x6ca}], 0x1, 0x40014102, 0x0) kernel console output (not intermixed with test programs): 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.906424][ T6041] usb 5-1: Using ep0 maxpacket: 8 [ 181.915160][ T6041] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.927349][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.157392][ T6121] usb 2-1: USB disconnect, device number 9 [ 182.251741][ T6041] pvrusb2: Hardware description: Terratec Grabster AV400 [ 182.286799][ T6041] pvrusb2: ********** [ 182.295243][ T6775] loop0: detected capacity change from 0 to 4096 [ 182.306377][ T6041] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 182.334645][ T6041] pvrusb2: Important functionality might not be entirely working. [ 182.365123][ T6799] FAULT_INJECTION: forcing a failure. [ 182.365123][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.366154][ T6041] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 182.384939][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT(full) [ 182.384973][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.384987][ T6799] Call Trace: [ 182.384996][ T6799] [ 182.385006][ T6799] dump_stack_lvl+0x189/0x250 [ 182.385042][ T6799] ? __pfx____ratelimit+0x10/0x10 [ 182.385069][ T6799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.385097][ T6799] ? __pfx__printk+0x10/0x10 [ 182.385149][ T6799] should_fail_ex+0x414/0x560 [ 182.385182][ T6799] strncpy_from_user+0x36/0x2c0 [ 182.385215][ T6799] getname_flags+0xf3/0x540 [ 182.385251][ T6799] do_sys_openat2+0xbc/0x200 [ 182.385288][ T6799] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.385323][ T6799] ? ksys_write+0x22a/0x250 [ 182.385348][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 182.385376][ T6799] __x64_sys_creat+0x8f/0xc0 [ 182.385420][ T6799] do_syscall_64+0xfa/0xf80 [ 182.385451][ T6799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.385476][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 182.385507][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.385531][ T6799] RIP: 0033:0x7f7f7458f749 [ 182.385552][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.385574][ T6799] RSP: 002b:00007f7f727f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 182.385599][ T6799] RAX: ffffffffffffffda RBX: 00007f7f747e5fa0 RCX: 00007f7f7458f749 [ 182.385616][ T6799] RDX: 0000000000000000 RSI: bc9dc8fbd81cb451 RDI: 0000200000000580 [ 182.385633][ T6799] RBP: 00007f7f727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.385646][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.385661][ T6799] R13: 00007f7f747e6038 R14: 00007f7f747e5fa0 R15: 00007ffe03010d98 [ 182.385700][ T6799] [ 182.725977][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.759660][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.773980][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.956842][ T6041] pvrusb2: ********** [ 182.965090][ T2344] pvrusb2: Invalid write control endpoint [ 182.976137][ T6041] usb 5-1: USB disconnect, device number 12 [ 183.054491][ T40] usb 1-1: USB disconnect, device number 5 [ 183.384287][ T2344] pvrusb2: Invalid write control endpoint [ 183.425840][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.470614][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.487662][ T5909] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 183.510127][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.569127][ T2344] pvrusb2: Device being rendered inoperable [ 183.605065][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.644378][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.665408][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.679914][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.720911][ T2344] pvrusb2: Attached sub-driver cx25840 [ 183.733468][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.744226][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.794430][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 183.814710][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.851415][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.883447][ T5909] usb 4-1: Product: syz [ 183.905043][ T5909] usb 4-1: Manufacturer: syz [ 183.915541][ T5909] usb 4-1: SerialNumber: syz [ 184.104868][ T6821] ubi31: attaching mtd0 [ 184.125047][ T6821] ubi31: scanning is finished [ 184.196501][ T869] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 184.254532][ T40] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.301831][ T6041] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 184.671639][ T869] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 184.680754][ T869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.699804][ T869] usb 1-1: config 0 has no interface number 0 [ 184.706771][ T6041] usb 5-1: Using ep0 maxpacket: 32 [ 184.714468][ T40] usb 3-1: config 255 has an invalid interface number: 128 but max is 0 [ 184.728027][ T6041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.735531][ T869] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 184.746218][ T40] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 184.758581][ T869] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 184.771768][ T6041] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 184.784414][ T40] usb 3-1: config 255 has no interface number 0 [ 184.791459][ T869] usb 1-1: Product: syz [ 184.795975][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.817999][ T40] usb 3-1: config 255 interface 128 has no altsetting 0 [ 184.825242][ T869] usb 1-1: Manufacturer: syz [ 184.831308][ T869] usb 1-1: SerialNumber: syz [ 184.836403][ T6041] usb 5-1: Product: syz [ 184.840755][ T6041] usb 5-1: Manufacturer: syz [ 184.845388][ T6041] usb 5-1: SerialNumber: syz [ 184.856650][ T869] usb 1-1: config 0 descriptor?? [ 184.863076][ T40] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=e7.3a [ 184.915024][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.089786][ T6041] usb 5-1: config 0 descriptor?? [ 185.166633][ T40] usb 3-1: Product: syz [ 185.199767][ T869] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 185.279549][ T40] usb 3-1: Manufacturer: syz [ 185.361129][ T869] uvcvideo 1-1:0.105: Entity type for entity Output 1 was not initialized! [ 185.377488][ T40] usb 3-1: SerialNumber: syz [ 185.384833][ T6819] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 185.396446][ T6819] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 185.401534][ T6821] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 185.405926][ T6819] netlink: 'syz.0.227': attribute type 2 has an invalid length. [ 185.420345][ T6819] netlink: 'syz.0.227': attribute type 2 has an invalid length. [ 185.428411][ T6819] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 185.439629][ T6819] netlink: 'syz.0.227': attribute type 2 has an invalid length. [ 185.582917][ T869] uvcvideo 1-1:0.105: Failed to create links for entity 1 [ 185.601886][ T869] uvcvideo 1-1:0.105: Failed to register entities (-22). [ 186.008271][ T40] usb 3-1: USB disconnect, device number 5 [ 186.107526][ T6833] ubi31: attaching mtd0 [ 186.119655][ T6833] ubi31: scanning is finished [ 186.665444][ T6041] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 186.674330][ T5909] usb 4-1: 0:2 : does not exist [ 186.680574][ T6041] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 186.738652][ T5909] usb 4-1: USB disconnect, device number 8 [ 186.855768][ T6026] usb 5-1: USB disconnect, device number 13 [ 186.913152][ T6833] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 186.979757][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.098392][ T6041] usb 1-1: USB disconnect, device number 6 [ 187.207099][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.396410][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 187.452384][ T6850] FAULT_INJECTION: forcing a failure. [ 187.452384][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.459885][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.478614][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.1.233 Not tainted syzkaller #0 PREEMPT(full) [ 187.478644][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.478657][ T6850] Call Trace: [ 187.478665][ T6850] [ 187.478673][ T6850] dump_stack_lvl+0x189/0x250 [ 187.478706][ T6850] ? __pfx____ratelimit+0x10/0x10 [ 187.478729][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.478754][ T6850] ? __pfx__printk+0x10/0x10 [ 187.478797][ T6850] should_fail_ex+0x414/0x560 [ 187.478827][ T6850] strncpy_from_user+0x36/0x2c0 [ 187.478853][ T6850] getname_flags+0xf3/0x540 [ 187.478885][ T6850] __x64_sys_mkdir+0x5d/0x80 [ 187.478908][ T6850] do_syscall_64+0xfa/0xf80 [ 187.478934][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.478954][ T6850] ? clear_bhb_loop+0x60/0xb0 [ 187.478979][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.478999][ T6850] RIP: 0033:0x7f7f7458f749 [ 187.479017][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.479035][ T6850] RSP: 002b:00007f7f727b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 187.479057][ T6850] RAX: ffffffffffffffda RBX: 00007f7f747e6180 RCX: 00007f7f7458f749 [ 187.479071][ T6850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 187.479084][ T6850] RBP: 00007f7f727b4090 R08: 0000000000000000 R09: 0000000000000000 [ 187.479097][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.479109][ T6850] R13: 00007f7f747e6218 R14: 00007f7f747e6180 R15: 00007ffe03010d98 [ 187.479144][ T6850] [ 187.984281][ T5909] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 188.048845][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.073219][ T5909] usb 4-1: Product: syz [ 188.077586][ T5909] usb 4-1: Manufacturer: syz [ 188.082233][ T5909] usb 4-1: SerialNumber: syz [ 188.137947][ T5909] usb 4-1: config 0 descriptor?? [ 188.348285][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 188.370917][ T6859] fuse: Bad value for 'fd' [ 188.631770][ T6864] FAULT_INJECTION: forcing a failure. [ 188.631770][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 188.674722][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 188.674753][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.674766][ T6864] Call Trace: [ 188.674775][ T6864] [ 188.674785][ T6864] dump_stack_lvl+0x189/0x250 [ 188.674816][ T6864] ? __pfx____ratelimit+0x10/0x10 [ 188.674840][ T6864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.674866][ T6864] ? __pfx__printk+0x10/0x10 [ 188.674905][ T6864] ? __pfx___might_resched+0x10/0x10 [ 188.674928][ T6864] ? fs_reclaim_acquire+0x7d/0x100 [ 188.674957][ T6864] should_fail_ex+0x414/0x560 [ 188.674987][ T6864] should_failslab+0xa8/0x100 [ 188.675015][ T6864] __kvmalloc_node_noprof+0x175/0x920 [ 188.675041][ T6864] ? vmemdup_user+0x2b/0xd0 [ 188.675072][ T6864] vmemdup_user+0x2b/0xd0 [ 188.675120][ T6864] path_setxattrat+0x244/0x3a0 [ 188.675151][ T6864] ? __pfx_path_setxattrat+0x10/0x10 [ 188.675169][ T6864] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 188.675231][ T6864] ? ksys_write+0x22a/0x250 [ 188.675255][ T6864] ? __pfx_ksys_write+0x10/0x10 [ 188.675281][ T6864] __x64_sys_setxattr+0xbc/0xe0 [ 188.675315][ T6864] do_syscall_64+0xfa/0xf80 [ 188.675342][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.675363][ T6864] ? clear_bhb_loop+0x60/0xb0 [ 188.675389][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.675410][ T6864] RIP: 0033:0x7fa8a5d8f749 [ 188.675429][ T6864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.675447][ T6864] RSP: 002b:00007fa8a6c19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 188.675470][ T6864] RAX: ffffffffffffffda RBX: 00007fa8a5fe5fa0 RCX: 00007fa8a5d8f749 [ 188.675485][ T6864] RDX: 0000200000002cc0 RSI: 0000200000002b80 RDI: 0000200000000140 [ 188.675500][ T6864] RBP: 00007fa8a6c19090 R08: 0000000000000003 R09: 0000000000000000 [ 188.675513][ T6864] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 188.675526][ T6864] R13: 00007fa8a5fe6038 R14: 00007fa8a5fe5fa0 R15: 00007ffe473a58b8 [ 188.675564][ T6864] [ 189.462853][ T5909] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 189.521390][ T5909] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 189.556574][ T6788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.710920][ T6788] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 189.736952][ T6788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.761386][ T6788] usb 2-1: Product: syz [ 189.782350][ T6788] usb 2-1: Manufacturer: syz [ 189.792528][ T6788] usb 2-1: SerialNumber: syz [ 189.812020][ T6788] usb 2-1: config 0 descriptor?? [ 189.825263][ T6788] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 190.969503][ T5909] usb 4-1: USB disconnect, device number 9 [ 191.608641][ T6883] FAULT_INJECTION: forcing a failure. [ 191.608641][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 191.628067][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.2.242 Not tainted syzkaller #0 PREEMPT(full) [ 191.628097][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.628111][ T6883] Call Trace: [ 191.628120][ T6883] [ 191.628130][ T6883] dump_stack_lvl+0x189/0x250 [ 191.628170][ T6883] ? __pfx____ratelimit+0x10/0x10 [ 191.628195][ T6883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.628221][ T6883] ? __pfx__printk+0x10/0x10 [ 191.628260][ T6883] ? __pfx___might_resched+0x10/0x10 [ 191.628291][ T6883] should_fail_ex+0x414/0x560 [ 191.628323][ T6883] should_failslab+0xa8/0x100 [ 191.628352][ T6883] __kmalloc_noprof+0xdf/0x800 [ 191.628373][ T6883] ? kfree+0x4d/0x660 [ 191.628402][ T6883] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.628433][ T6883] tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.628458][ T6883] ? tomoyo_domain+0xd8/0x130 [ 191.628485][ T6883] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 191.628515][ T6883] tomoyo_path_number_perm+0x1e8/0x5a0 [ 191.628548][ T6883] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.628595][ T6883] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 191.628646][ T6883] ? __fget_files+0x2a/0x420 [ 191.628680][ T6883] ? __fget_files+0x3a0/0x420 [ 191.628707][ T6883] ? __fget_files+0x2a/0x420 [ 191.628740][ T6883] security_file_ioctl+0xcb/0x2d0 [ 191.628770][ T6883] __se_sys_ioctl+0x47/0x170 [ 191.628795][ T6883] do_syscall_64+0xfa/0xf80 [ 191.628822][ T6883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.628844][ T6883] ? clear_bhb_loop+0x60/0xb0 [ 191.628871][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.628892][ T6883] RIP: 0033:0x7fd91cb8f749 [ 191.628912][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.628931][ T6883] RSP: 002b:00007fd91d94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.628954][ T6883] RAX: ffffffffffffffda RBX: 00007fd91cde5fa0 RCX: 00007fd91cb8f749 [ 191.628970][ T6883] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 191.628984][ T6883] RBP: 00007fd91d94d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.628998][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.629010][ T6883] R13: 00007fd91cde6038 R14: 00007fd91cde5fa0 R15: 00007ffddae94968 [ 191.629047][ T6883] [ 191.629057][ T6883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.170335][ T6041] usb 2-1: USB disconnect, device number 10 [ 192.274436][ T6891] loop3: detected capacity change from 0 to 2048 [ 192.324137][ T6891] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.345822][ T6891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.933164][ T6904] fuse: Bad value for 'fd' [ 194.390113][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 194.401560][ T6912] fuse: Bad value for 'fd' [ 194.680835][ T6916] hub 9-0:1.0: USB hub found [ 194.686639][ T6916] hub 9-0:1.0: 1 port detected [ 195.295612][ T6905] loop2: detected capacity change from 0 to 32768 [ 195.319555][ T6905] (syz.2.247,6905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.356049][ T6905] (syz.2.247,6905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.466471][ T6121] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 195.475731][ T6905] JBD2: Ignoring recovery information on journal [ 195.515315][ T6926] netlink: 'syz.4.252': attribute type 10 has an invalid length. [ 195.616403][ T6121] usb 2-1: Using ep0 maxpacket: 32 [ 195.633275][ T6121] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.643005][ T6905] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 195.659755][ T6121] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 195.688068][ T6121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.700443][ T6905] (syz.2.247,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 195.706470][ T6121] usb 2-1: Product: syz [ 195.743396][ T6121] usb 2-1: Manufacturer: syz [ 195.753855][ T6121] usb 2-1: SerialNumber: syz [ 195.817719][ T6121] usb 2-1: config 0 descriptor?? [ 196.009645][ T6929] loop3: detected capacity change from 0 to 32768 [ 196.024974][ T6929] (syz.3.255,6929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 196.042023][ T6929] (syz.3.255,6929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 196.100607][ T6929] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2' [ 196.113756][ T6929] JBD2: Ignoring recovery information on journal [ 196.248141][ T6929] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 196.265715][ T6929] (syz.3.255,6929,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 196.330349][ T6929] (syz.3.255,6929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 196.346158][ T6929] (syz.3.255,6929,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 196.359208][ T6929] (syz.3.255,6929,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 196.367735][ T6929] (syz.3.255,6929,1):ocfs2_quota_read:201 ERROR: status = -5 [ 196.375236][ T6929] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 3 [ 196.386243][ T6929] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 196.395870][ T6929] (syz.3.255,6929,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 196.405783][ T6929] (syz.3.255,6929,1):ocfs2_symlink:1894 ERROR: status = -5 [ 196.413363][ T6929] (syz.3.255,6929,1):ocfs2_symlink:2080 ERROR: status = -5 [ 196.610060][ T5836] ocfs2: Unmounting device (7,2) on (node local) [ 197.027659][ T6121] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 197.034622][ T6121] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 197.151429][ T6918] loop0: detected capacity change from 0 to 32768 [ 197.198852][ T6938] fuse: Unknown parameter '&d' [ 197.233278][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 197.244013][ T6918] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 197.326501][ T6918] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.413003][ T6918] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms [ 197.455767][ T6568] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 197.470156][ T6568] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 197.649573][ T6568] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 179ms [ 197.690527][ T6568] gfs2: fsid=syz:syz.0: jid=0: Done [ 197.706837][ T6918] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 197.744592][ T6918] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 197.945549][ T6955] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 198.006180][ T6955] netlink: 'syz.3.261': attribute type 13 has an invalid length. [ 198.043791][ T6952] loop2: detected capacity change from 0 to 2048 [ 198.052201][ T6955] netlink: 'syz.3.261': attribute type 17 has an invalid length. [ 198.122297][ T6957] loop3: detected capacity change from 0 to 512 [ 198.134969][ T6952] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.158073][ T6952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.319712][ T6026] usb 2-1: USB disconnect, device number 11 [ 198.395943][ T6957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 198.416988][ T6957] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.909369][ T6964] misc userio: Invalid payload size [ 198.944214][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.279078][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 199.529303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.251177][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 200.261950][ T6972] fuse: Bad value for 'fd' [ 200.518465][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 201.707857][ T6982] loop1: detected capacity change from 0 to 512 [ 201.739483][ T6988] fuse: Unknown parameter '&d' [ 201.844001][ T6982] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.267: ea_inode with extended attributes [ 201.991817][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 202.011853][ T6982] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 202.058437][ T6982] EXT4-fs (loop1): 1 orphan inode deleted [ 202.104231][ T6982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.563974][ T7001] loop3: detected capacity change from 0 to 32768 [ 202.574088][ T7001] (syz.3.272,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.591826][ T7001] (syz.3.272,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.614413][ T7001] JBD2: Ignoring recovery information on journal [ 202.629709][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.682088][ T7001] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 202.701609][ T7001] (syz.3.272,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 202.734913][ T7001] (syz.3.272,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 202.748338][ T7001] (syz.3.272,7001,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 202.760754][ T7001] (syz.3.272,7001,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 202.769164][ T7001] (syz.3.272,7001,0):ocfs2_quota_read:201 ERROR: status = -5 [ 202.776590][ T7001] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 3 [ 202.785620][ T7001] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 202.796246][ T7001] (syz.3.272,7001,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 202.804070][ T7001] (syz.3.272,7001,0):ocfs2_symlink:1894 ERROR: status = -5 [ 202.811400][ T7001] (syz.3.272,7001,0):ocfs2_symlink:2080 ERROR: status = -5 [ 202.857206][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 202.871892][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.881088][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.883966][ T5888] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 202.901342][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.941360][ T5888] usb 3-1: Product: syz [ 203.016024][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 203.052483][ T5888] usb 3-1: Manufacturer: syz [ 203.057765][ T5888] usb 3-1: SerialNumber: syz [ 203.065370][ T5888] usb 3-1: config 0 descriptor?? [ 203.087065][ T7005] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[7005] [ 204.600003][ T5888] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 204.612949][ T5888] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 204.746529][ T6041] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.987067][ T6041] usb 4-1: Using ep0 maxpacket: 32 [ 205.048601][ T6041] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.088180][ T6041] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 205.123524][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.139227][ T6041] usb 4-1: Product: syz [ 205.139545][ T7022] MTD: Couldn't look up '/dev/sg0': -15 [ 205.143570][ T6041] usb 4-1: Manufacturer: syz [ 205.164376][ T6041] usb 4-1: SerialNumber: syz [ 205.184132][ T6041] usb 4-1: config 0 descriptor?? [ 205.711246][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 205.721678][ T7030] fuse: Bad value for 'fd' [ 206.481214][ T6041] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 206.488675][ T6041] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 207.426062][ T6594] usb 3-1: USB disconnect, device number 6 [ 208.295372][ T7041] loop2: detected capacity change from 0 to 32768 [ 208.389892][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 209.001449][ T10] usb 4-1: USB disconnect, device number 10 [ 209.047233][ T7041] (syz.2.285,7041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.060936][ T7041] (syz.2.285,7041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.119825][ T7041] JBD2: Ignoring recovery information on journal [ 209.207545][ T7041] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 209.228096][ T7041] (syz.2.285,7041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 209.259942][ T7041] (syz.2.285,7041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 209.273265][ T7041] (syz.2.285,7041,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 209.285928][ T7041] (syz.2.285,7041,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 209.294338][ T7041] (syz.2.285,7041,0):ocfs2_quota_read:201 ERROR: status = -5 [ 209.301806][ T7041] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 3 [ 209.310865][ T7041] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 209.320307][ T7041] (syz.2.285,7041,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 209.328066][ T7041] (syz.2.285,7041,0):ocfs2_symlink:1894 ERROR: status = -5 [ 209.335286][ T7041] (syz.2.285,7041,0):ocfs2_symlink:2080 ERROR: status = -5 [ 209.430501][ T5836] ocfs2: Unmounting device (7,2) on (node local) [ 209.469041][ T7052] FAULT_INJECTION: forcing a failure. [ 209.469041][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.667599][ T7052] CPU: 1 UID: 0 PID: 7052 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 209.667632][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.667647][ T7052] Call Trace: [ 209.667655][ T7052] [ 209.667663][ T7052] dump_stack_lvl+0x189/0x250 [ 209.667686][ T7052] ? __pfx____ratelimit+0x10/0x10 [ 209.667703][ T7052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.667721][ T7052] ? __pfx__printk+0x10/0x10 [ 209.667759][ T7052] should_fail_ex+0x414/0x560 [ 209.667780][ T7052] _copy_to_user+0x31/0xb0 [ 209.667803][ T7052] simple_read_from_buffer+0xe1/0x170 [ 209.667825][ T7052] proc_fail_nth_read+0x1b3/0x220 [ 209.667844][ T7052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.667862][ T7052] ? rw_verify_area+0x2a6/0x4d0 [ 209.667875][ T7052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.667892][ T7052] vfs_read+0x200/0xa30 [ 209.667912][ T7052] ? __pfx_vfs_read+0x10/0x10 [ 209.667923][ T7052] ? __sys_bpf+0x7bd/0x860 [ 209.667946][ T7052] ? __pfx___sys_bpf+0x10/0x10 [ 209.667978][ T7052] ksys_read+0x145/0x250 [ 209.667994][ T7052] ? __pfx_ksys_read+0x10/0x10 [ 209.668010][ T7052] ? do_syscall_64+0xbe/0xf80 [ 209.668030][ T7052] do_syscall_64+0xfa/0xf80 [ 209.668047][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.668062][ T7052] ? clear_bhb_loop+0x60/0xb0 [ 209.668080][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.668095][ T7052] RIP: 0033:0x7fa8a5d8e15c [ 209.668108][ T7052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.668120][ T7052] RSP: 002b:00007fa8a6c19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.668136][ T7052] RAX: ffffffffffffffda RBX: 00007fa8a5fe5fa0 RCX: 00007fa8a5d8e15c [ 209.668147][ T7052] RDX: 000000000000000f RSI: 00007fa8a6c190a0 RDI: 0000000000000005 [ 209.668156][ T7052] RBP: 00007fa8a6c19090 R08: 0000000000000000 R09: 0000000000000000 [ 209.668165][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.668174][ T7052] R13: 00007fa8a5fe6038 R14: 00007fa8a5fe5fa0 R15: 00007ffe473a58b8 [ 209.668198][ T7052] [ 210.487028][ T7033] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 211.554457][ T7033] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.616871][ T7033] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.645030][ T7033] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.673529][ T7033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.708521][ T7033] usb 3-1: Product: syz [ 211.855293][ T7033] usb 3-1: Manufacturer: syz [ 211.860246][ T7033] usb 3-1: SerialNumber: syz [ 211.992814][ T7071] ubi31: attaching mtd0 [ 212.006062][ T7071] ubi31: scanning is finished [ 212.162330][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 212.169102][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 212.177796][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 212.193192][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 212.199502][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 213.664428][ T7071] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 214.167160][ T6594] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 214.179263][ T7083] input: syz1 as /devices/virtual/input/input6 [ 214.347328][ T6594] usb 1-1: Using ep0 maxpacket: 32 [ 214.367488][ T6594] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.389435][ T6594] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 214.444941][ T6594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.460922][ T6594] usb 1-1: Product: syz [ 214.478233][ T6594] usb 1-1: Manufacturer: syz [ 214.494577][ T6594] usb 1-1: SerialNumber: syz [ 214.516510][ T6594] usb 1-1: config 0 descriptor?? [ 214.847644][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 215.016226][ T7033] usb 3-1: 0:2 : does not exist [ 215.532305][ T6594] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 215.539407][ T6594] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 215.557944][ T6594] usb 1-1: USB disconnect, device number 7 [ 215.604908][ T7033] usb 3-1: USB disconnect, device number 7 [ 215.848736][ T7099] loop1: detected capacity change from 0 to 2048 [ 215.911101][ T7099] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 215.922428][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.145114][ T7099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.218228][ T7112] loop2: detected capacity change from 0 to 128 [ 216.261772][ T7112] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 216.633867][ T7112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.795426][ T7112] ext2 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.965935][ T7119] syz_tun: entered promiscuous mode [ 217.017209][ T7119] syz_tun: left promiscuous mode [ 217.071769][ T7112] overlayfs: upper fs needs to support d_type. [ 217.131619][ T7126] loop0: detected capacity change from 0 to 128 [ 217.135115][ T7124] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 217.873024][ T7129] loop4: detected capacity change from 0 to 131072 [ 217.919008][ T7129] F2FS-fs (loop4): invalid crc value [ 218.005903][ T7129] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.016360][ T30] audit: type=1804 audit(1764350503.412:5): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.302" name="/newroot/58/file0/file1" dev="loop2" ino=13 res=1 errno=0 [ 218.055734][ T7129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 218.915024][ T7138] loop0: detected capacity change from 0 to 1024 [ 219.168413][ T7138] syz.0.312: attempt to access beyond end of device [ 219.168413][ T7138] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.240134][ T7138] Buffer I/O error on dev loop0, logical block 2889, async page read [ 219.256448][ T6026] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 219.273010][ T7146] ubi31: attaching mtd0 [ 219.287267][ T7146] ubi31: scanning is finished [ 219.526556][ T6026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.750053][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.761228][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.787106][ T7137] syz.0.312: attempt to access beyond end of device [ 219.787106][ T7137] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.805811][ T7137] Buffer I/O error on dev loop0, logical block 2889, async page read [ 219.815554][ T7138] syz.0.312: attempt to access beyond end of device [ 219.815554][ T7138] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.829810][ T7138] Buffer I/O error on dev loop0, logical block 2889, async page read [ 219.838207][ T7137] syz.0.312: attempt to access beyond end of device [ 219.838207][ T7137] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.852809][ T7137] Buffer I/O error on dev loop0, logical block 2889, async page read [ 219.863760][ T7138] syz.0.312: attempt to access beyond end of device [ 219.863760][ T7138] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.877665][ T7138] Buffer I/O error on dev loop0, logical block 2889, async page read [ 219.884687][ T6026] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.886000][ T7137] syz.0.312: attempt to access beyond end of device [ 219.886000][ T7137] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 219.930299][ T6378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.941889][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.986451][ T7137] Buffer I/O error on dev loop0, logical block 2889, async page read [ 220.035640][ T7146] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 220.172386][ T6026] usb 5-1: Product: syz [ 220.176760][ T7152] syz.0.312: attempt to access beyond end of device [ 220.176760][ T7152] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 220.182922][ T6026] usb 5-1: Manufacturer: syz [ 220.215898][ T6026] usb 5-1: SerialNumber: syz [ 220.252706][ T7152] Buffer I/O error on dev loop0, logical block 2889, async page read [ 220.286791][ T7138] syz.0.312: attempt to access beyond end of device [ 220.286791][ T7138] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 220.335335][ T7138] Buffer I/O error on dev loop0, logical block 2889, async page read [ 220.352210][ T6378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.366821][ T7137] syz.0.312: attempt to access beyond end of device [ 220.366821][ T7137] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 220.411890][ T7137] Buffer I/O error on dev loop0, logical block 2889, async page read [ 220.432991][ T7138] syz.0.312: attempt to access beyond end of device [ 220.432991][ T7138] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 220.471838][ T7138] Buffer I/O error on dev loop0, logical block 2889, async page read [ 220.593093][ T6378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.608454][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 221.778750][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.792667][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.805434][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.815196][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.015929][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.661655][ T6026] usb 5-1: 0:2 : does not exist [ 222.752490][ T6378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.796934][ T6026] usb 5-1: USB disconnect, device number 14 [ 222.971857][ T7174] loop0: detected capacity change from 0 to 64 [ 223.105628][ T30] audit: type=1800 audit(1764350508.562:6): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 223.529329][ T6378] bridge_slave_1: left allmulticast mode [ 223.543085][ T6378] bridge_slave_1: left promiscuous mode [ 223.560831][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.621145][ T6378] bridge_slave_0: left allmulticast mode [ 223.640954][ T6378] bridge_slave_0: left promiscuous mode [ 223.664299][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.883235][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.909327][ T7170] loop4: detected capacity change from 0 to 131072 [ 223.959208][ T7170] F2FS-fs (loop4): invalid crc value [ 224.066605][ T7170] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 224.086560][ T7170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 224.158324][ T5837] Bluetooth: hci4: command tx timeout [ 225.131121][ T7208] ubi31: attaching mtd0 [ 225.147091][ T7208] ubi31: scanning is finished [ 225.678041][ T6026] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 225.812629][ T7208] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 225.848554][ T6026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.862539][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.903221][ T6026] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.107035][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.115097][ T6026] usb 5-1: Product: syz [ 226.126977][ T7214] loop3: detected capacity change from 0 to 2048 [ 226.148587][ T6026] usb 5-1: Manufacturer: syz [ 226.153240][ T6026] usb 5-1: SerialNumber: syz [ 226.236429][ T5837] Bluetooth: hci4: command tx timeout [ 226.336890][ T7218] FAULT_INJECTION: forcing a failure. [ 226.336890][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 226.392392][ T7214] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 226.406421][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(full) [ 226.406451][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.406465][ T7218] Call Trace: [ 226.406473][ T7218] [ 226.406493][ T7218] dump_stack_lvl+0x189/0x250 [ 226.406528][ T7218] ? __pfx____ratelimit+0x10/0x10 [ 226.406551][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.406577][ T7218] ? __pfx__printk+0x10/0x10 [ 226.406611][ T7218] ? __pfx___might_resched+0x10/0x10 [ 226.406634][ T7218] ? fs_reclaim_acquire+0x7d/0x100 [ 226.406663][ T7218] should_fail_ex+0x414/0x560 [ 226.406693][ T7218] should_failslab+0xa8/0x100 [ 226.406721][ T7218] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 226.406755][ T7218] ? __alloc_skb+0x255/0x430 [ 226.406778][ T7218] ? napi_skb_cache_get+0x4a5/0x780 [ 226.406800][ T7218] ? napi_skb_cache_get+0x151/0x780 [ 226.406829][ T7218] __alloc_skb+0x255/0x430 [ 226.406855][ T7218] ? __pfx___alloc_skb+0x10/0x10 [ 226.406881][ T7218] ? netlink_autobind+0xdb/0x300 [ 226.406912][ T7218] ? netlink_autobind+0x2c2/0x300 [ 226.406947][ T7218] netlink_sendmsg+0x5c6/0xb30 [ 226.406975][ T7218] ? aa_sk_perm+0x15f/0x920 [ 226.407014][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.407047][ T7218] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 226.407092][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.407120][ T7218] sock_sendmsg_nosec+0x18f/0x1d0 [ 226.407158][ T7218] ____sys_sendmsg+0x577/0x880 [ 226.407196][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.407233][ T7218] ? import_iovec+0x74/0xa0 [ 226.407269][ T7218] ___sys_sendmsg+0x21f/0x2a0 [ 226.407300][ T7218] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.407336][ T7218] ? rcu_read_lock_any_held+0xb3/0x120 [ 226.407394][ T7218] ? __fget_files+0x2a/0x420 [ 226.407421][ T7218] ? __fget_files+0x3a0/0x420 [ 226.407460][ T7218] __x64_sys_sendmsg+0x19b/0x260 [ 226.407499][ T7218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.407538][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 226.407564][ T7218] ? do_syscall_64+0xbe/0xf80 [ 226.407592][ T7218] do_syscall_64+0xfa/0xf80 [ 226.407618][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.407640][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 226.407666][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.407687][ T7218] RIP: 0033:0x7f7f7458f749 [ 226.407707][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.407727][ T7218] RSP: 002b:00007f7f727d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.407749][ T7218] RAX: ffffffffffffffda RBX: 00007f7f747e6090 RCX: 00007f7f7458f749 [ 226.407765][ T7218] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 226.407779][ T7218] RBP: 00007f7f727d5090 R08: 0000000000000000 R09: 0000000000000000 [ 226.407793][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.407805][ T7218] R13: 00007f7f747e6128 R14: 00007f7f747e6090 R15: 00007ffe03010d98 [ 226.407838][ T7218] [ 226.741730][ T7214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.149595][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.218141][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.240261][ T6378] bond0 (unregistering): Released all slaves [ 228.316508][ T5837] Bluetooth: hci4: command tx timeout [ 228.946829][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 229.575540][ T6026] usb 5-1: 0:2 : does not exist [ 229.624880][ T6026] usb 5-1: USB disconnect, device number 15 [ 229.841359][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.157374][ T7233] loop1: detected capacity change from 0 to 1024 [ 230.232223][ T7233] EXT4-fs: Ignoring removed bh option [ 230.384438][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.396793][ T52] Bluetooth: hci4: command tx timeout [ 230.759574][ T7233] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.336: Allocating blocks 497-513 which overlap fs metadata [ 230.776191][ T7233] EXT4-fs (loop1): Remounting filesystem read-only [ 230.858041][ T52] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 231.423880][ T6378] hsr_slave_0: left promiscuous mode [ 231.465864][ T6378] hsr_slave_1: left promiscuous mode [ 231.483267][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.502388][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.585001][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.604433][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.665733][ T6378] veth1_macvtap: left promiscuous mode [ 231.684900][ T6378] veth0_macvtap: left promiscuous mode [ 231.700520][ T7267] fuse: Unknown parameter '&d' [ 231.702104][ T6378] veth1_vlan: left promiscuous mode [ 231.716697][ T6378] veth0_vlan: left promiscuous mode [ 232.094770][ T7231] EXT4-fs (loop1): pa ffff888030a64658: logic 131104, phys. 177, len 21 [ 232.440751][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.927411][ T30] audit: type=1400 audit(1764350520.402:7): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7277 comm="syz.0.344" [ 235.917677][ T6026] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 235.940128][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.036648][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 236.089774][ T6026] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.101015][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 236.108155][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.115768][ T6026] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.126620][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 236.139806][ T6026] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.149149][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.166874][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.176869][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.185067][ T6026] usb 4-1: Product: syz [ 236.190217][ T10] usb 1-1: Product: syz [ 236.201458][ T6026] usb 4-1: Manufacturer: syz [ 236.206087][ T6026] usb 4-1: SerialNumber: syz [ 236.211395][ T10] usb 1-1: Manufacturer: syz [ 236.216149][ T10] usb 1-1: SerialNumber: syz [ 236.238784][ T10] usb 1-1: config 0 descriptor?? [ 236.387951][ T52] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 236.938964][ T10] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 237.153065][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 237.190977][ T10] usb 1-1: USB disconnect, device number 8 [ 237.741640][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 238.616082][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.623716][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.633525][ T7166] bridge_slave_0: entered allmulticast mode [ 238.643753][ T7166] bridge_slave_0: entered promiscuous mode [ 238.685906][ T7320] loop4: detected capacity change from 0 to 512 [ 238.767725][ T6026] usb 4-1: 0:2 : does not exist [ 238.782575][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.794169][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.806155][ T7320] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 238.838854][ T6026] usb 4-1: USB disconnect, device number 11 [ 238.860928][ T7166] bridge_slave_1: entered allmulticast mode [ 238.903534][ T7166] bridge_slave_1: entered promiscuous mode [ 238.916062][ T7320] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.012354][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.028997][ T869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 239.094241][ T7320] EXT4-fs (loop4): mount failed [ 239.402965][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 240.076789][ T869] usb 1-1: Using ep0 maxpacket: 32 [ 240.099834][ T869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.109100][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.161263][ T869] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.209664][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.232512][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.271597][ T869] usb 1-1: Product: syz [ 240.287987][ T869] usb 1-1: Manufacturer: syz [ 240.292646][ T869] usb 1-1: SerialNumber: syz [ 240.311753][ T869] usb 1-1: config 0 descriptor?? [ 240.369270][ T52] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 240.433587][ T7166] team0: Port device team_slave_0 added [ 240.484317][ T7166] team0: Port device team_slave_1 added [ 240.786519][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.793521][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.893887][ T7350] netlink: 148 bytes leftover after parsing attributes in process `syz.0.356'. [ 240.903283][ T7350] netlink: 56 bytes leftover after parsing attributes in process `syz.0.356'. [ 240.912377][ T7350] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 241.088324][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.158130][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 241.416689][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 241.484117][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.530510][ T869] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 241.538460][ T869] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 241.557266][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.563894][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 241.585509][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.607077][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.644678][ T10] usb 5-1: Product: syz [ 241.660040][ T10] usb 5-1: Manufacturer: syz [ 241.670142][ T10] usb 5-1: SerialNumber: syz [ 241.687035][ T10] usb 5-1: config 0 descriptor?? [ 241.870615][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.866701][ T10] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 242.914413][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 243.826647][ T7363] netlink: 148 bytes leftover after parsing attributes in process `syz.4.361'. [ 243.837088][ T7363] netlink: 56 bytes leftover after parsing attributes in process `syz.4.361'. [ 243.846043][ T7363] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 243.873054][ T6121] usb 1-1: USB disconnect, device number 9 [ 245.198704][ T7166] hsr_slave_0: entered promiscuous mode [ 245.247688][ T7166] hsr_slave_1: entered promiscuous mode [ 245.286785][ T7166] debugfs: 'hsr0' already exists in 'hsr' [ 245.316117][ T7166] Cannot create hsr debugfs directory [ 245.332428][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.0.363'. [ 245.363410][ T7370] netlink: 156 bytes leftover after parsing attributes in process `syz.0.363'. [ 245.438213][ T7370] netlink: 'syz.0.363': attribute type 13 has an invalid length. [ 245.487571][ T7370] netlink: 'syz.0.363': attribute type 17 has an invalid length. [ 245.635809][ T7377] loop0: detected capacity change from 0 to 512 [ 245.797858][ T869] usb 5-1: USB disconnect, device number 16 [ 245.851159][ T7377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 245.924016][ T7377] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.154376][ T7370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.018809][ T7386] loop4: detected capacity change from 0 to 2048 [ 247.108732][ T7386] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 247.171843][ T7386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.186143][ T7372] loop3: detected capacity change from 0 to 32768 [ 247.275063][ T7372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.365 (7372) [ 247.633232][ T7372] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.698615][ T7372] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 247.766065][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 247.875348][ T7395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.368'. [ 247.934375][ T7395] netlink: 156 bytes leftover after parsing attributes in process `syz.1.368'. [ 247.967305][ T7166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.005568][ T7166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.014221][ T7403] netlink: 'syz.1.368': attribute type 13 has an invalid length. [ 248.022488][ T7403] netlink: 'syz.1.368': attribute type 17 has an invalid length. [ 248.078885][ T7372] BTRFS info (device loop3): enabling ssd optimizations [ 248.086019][ T7372] BTRFS info (device loop3): turning on async discard [ 248.093300][ T7372] BTRFS info (device loop3): enabling free space tree [ 248.246481][ T7410] loop0: detected capacity change from 0 to 256 [ 248.930270][ T7410] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 248.968758][ T7395] loop1: detected capacity change from 0 to 512 [ 248.996285][ T7403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.172280][ T7166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.243626][ T7166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.257889][ T7395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 249.315272][ T52] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 249.363930][ T7395] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.554498][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.093683][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 250.204233][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.266824][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.796699][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.886807][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 250.998025][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.245507][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.252833][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.266831][ T5888] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 251.287691][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.315218][ T5888] usb 4-1: Product: syz [ 251.328282][ T5888] usb 4-1: Manufacturer: syz [ 251.337173][ T6594] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 251.402077][ T5888] usb 4-1: SerialNumber: syz [ 251.434001][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.441295][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.447052][ T5888] usb 4-1: config 0 descriptor?? [ 251.509104][ T6594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.542024][ T6594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.574366][ T6594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.597159][ T6594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.629412][ T6594] usb 2-1: Product: syz [ 251.633642][ T6594] usb 2-1: Manufacturer: syz [ 251.649441][ T6594] usb 2-1: SerialNumber: syz [ 251.908854][ T7166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.546947][ T7456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.372'. [ 252.556047][ T7456] netlink: 56 bytes leftover after parsing attributes in process `syz.3.372'. [ 252.566186][ T7456] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 252.951825][ T5888] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 252.962069][ T5888] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 254.178534][ T6121] usb 4-1: USB disconnect, device number 12 [ 254.632225][ T7463] loop4: detected capacity change from 0 to 32768 [ 254.661541][ T7463] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.810340][ T7463] XFS (loop4): Ending clean mount [ 254.847321][ T52] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 254.979272][ T6594] usb 2-1: 0:2 : does not exist [ 255.027597][ T6594] usb 2-1: USB disconnect, device number 12 [ 255.042343][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.179914][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.247137][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 255.264111][ T7463] veth1_macvtap: left promiscuous mode [ 256.956118][ T7499] fuse: Bad value for 'fd' [ 258.180966][ T7508] fuse: Bad value for 'fd' [ 258.765961][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.748176][ T7166] veth0_vlan: entered promiscuous mode [ 259.805308][ T7166] veth1_vlan: entered promiscuous mode [ 259.899773][ T7166] veth0_macvtap: entered promiscuous mode [ 259.928893][ T7166] veth1_macvtap: entered promiscuous mode [ 259.985165][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.089322][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.830390][ T7531] loop3: detected capacity change from 0 to 2048 [ 260.950531][ T7531] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 260.970100][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.990471][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.050765][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.082674][ T7531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.279323][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.296899][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.456425][ T6026] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 263.586395][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 263.604309][ T6026] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.625080][ T6026] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 263.634507][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.692694][ T6026] usb 2-1: Product: syz [ 263.704714][ T6026] usb 2-1: Manufacturer: syz [ 263.723354][ T6026] usb 2-1: SerialNumber: syz [ 263.773340][ T6026] usb 2-1: config 0 descriptor?? [ 263.785048][ T52] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 263.841032][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.856763][ T5940] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 263.888436][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.039531][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.402104][ T7553] netlink: 148 bytes leftover after parsing attributes in process `syz.1.388'. [ 264.411766][ T7553] netlink: 56 bytes leftover after parsing attributes in process `syz.1.388'. [ 264.420869][ T7553] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 264.796955][ T6026] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 264.876424][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.344541][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.354773][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.489304][ T6026] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 265.578816][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.646273][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.655772][ T5940] usb 1-1: Product: syz [ 265.661780][ T5940] usb 1-1: Manufacturer: syz [ 265.669508][ T5940] usb 1-1: SerialNumber: syz [ 266.325961][ T7567] fuse: Bad value for 'fd' [ 266.820370][ T5888] usb 2-1: USB disconnect, device number 13 [ 269.040538][ T5940] usb 1-1: 0:2 : does not exist [ 269.087316][ T7588] ref_ctr_offset mismatch. inode: 0x1e8 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x1000 [ 269.206255][ T7588] uprobe: syz.4.398:7588 failed to unregister, leaking uprobe [ 269.334699][ T7577] loop5: detected capacity change from 0 to 131072 [ 269.334699][ T7590] loop0: detected capacity change from 0 to 32768 [ 269.357951][ T5940] usb 1-1: USB disconnect, device number 10 [ 269.385529][ T7577] F2FS-fs (loop5): invalid crc value [ 269.438694][ T7590] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.500631][ T7577] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 269.510682][ T7577] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 269.636950][ T7590] XFS (loop0): Ending clean mount [ 270.134613][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.527817][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 273.526947][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 273.657225][ T7590] veth1_macvtap: left promiscuous mode [ 273.996178][ T7627] fuse: Unknown parameter '&d' [ 274.219059][ T5828] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.377402][ T52] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 275.421730][ T7641] loop4: detected capacity change from 0 to 2048 [ 275.829552][ T7641] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 275.855153][ T7652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.410'. [ 275.867280][ T7652] netlink: 156 bytes leftover after parsing attributes in process `syz.3.410'. [ 275.900237][ T7652] netlink: 'syz.3.410': attribute type 13 has an invalid length. [ 275.992253][ T7641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.043284][ T7652] netlink: 'syz.3.410': attribute type 17 has an invalid length. [ 276.058093][ T7656] loop3: detected capacity change from 0 to 512 [ 276.346090][ T7652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.354704][ T7656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 276.420257][ T7656] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.505932][ T7662] loop0: detected capacity change from 0 to 128 [ 277.078764][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.279984][ T7662] bond1: option ad_select: invalid value (7) [ 277.383107][ T7662] bond1 (unregistering): Released all slaves [ 277.763569][ T5828] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 277.785910][ T5828] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 277.859245][ T7668] loop1: detected capacity change from 0 to 32768 [ 277.860490][ T7666] loop5: detected capacity change from 0 to 32768 [ 277.906653][ T7668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.413 (7668) [ 277.973311][ T7666] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 16a7475e-bd94-4873-900a-4bbbceb02154 [ 277.987315][ T7668] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.011066][ T7666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.412 (7666) [ 278.035155][ T7668] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 278.072371][ T7675] loop4: detected capacity change from 0 to 1024 [ 278.136653][ T7666] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.226077][ T7666] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 278.357739][ T50] hfsplus: b-tree write err: -5, ino 4 [ 278.422796][ T7668] BTRFS info (device loop1): turning off barriers [ 278.459773][ T7668] BTRFS info (device loop1): enabling free space tree [ 278.500997][ T7668] BTRFS info (device loop1): use zstd compression, level 3 [ 278.747394][ T7666] BTRFS info (device loop5): turning off barriers [ 278.786523][ T7666] BTRFS info (device loop5): enabling free space tree [ 278.793364][ T7666] BTRFS info (device loop5): use zstd compression, level 3 [ 278.944133][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 279.636056][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.759942][ T7719] overlayfs: failed to resolve './bus': -2 [ 280.241300][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.278909][ T7166] BTRFS info (device loop5): last unmount of filesystem 16a7475e-bd94-4873-900a-4bbbceb02154 [ 280.394276][ T5824] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.585846][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.018184][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.055727][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.065690][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.082155][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.091974][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.101725][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.135919][ T7740] fuse: Bad value for 'fd' [ 281.568514][ T6594] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 281.768856][ T6594] usb 4-1: Using ep0 maxpacket: 32 [ 281.801803][ T6594] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.826145][ T6594] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 281.862750][ T6594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.891957][ T6594] usb 4-1: Product: syz [ 281.913972][ T6594] usb 4-1: Manufacturer: syz [ 281.931547][ T6594] usb 4-1: SerialNumber: syz [ 281.985329][ T6594] usb 4-1: config 0 descriptor?? [ 282.093174][ T7754] loop1: detected capacity change from 0 to 32768 [ 282.102810][ T7754] (syz.1.420,7754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.117453][ T7754] (syz.1.420,7754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.158255][ T7754] JBD2: Ignoring recovery information on journal [ 282.224462][ T7754] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 282.240919][ T7754] (syz.1.420,7754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 282.319202][ T7754] (syz.1.420,7754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 282.332965][ T7754] (syz.1.420,7754,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 282.345788][ T7754] (syz.1.420,7754,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 282.354337][ T7754] (syz.1.420,7754,1):ocfs2_quota_read:201 ERROR: status = -5 [ 282.363629][ T7754] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 3 [ 282.372908][ T7754] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 282.382825][ T7754] (syz.1.420,7754,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 282.390660][ T7754] (syz.1.420,7754,1):ocfs2_symlink:1894 ERROR: status = -5 [ 282.398319][ T7754] (syz.1.420,7754,1):ocfs2_symlink:2080 ERROR: status = -5 [ 282.744506][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 282.751187][ T6124] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.926360][ T6124] usb 5-1: Using ep0 maxpacket: 32 [ 282.946574][ T6124] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.988778][ T6124] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 283.021576][ T6124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.061976][ T6124] usb 5-1: Product: syz [ 283.084527][ T6124] usb 5-1: Manufacturer: syz [ 283.108693][ T6124] usb 5-1: SerialNumber: syz [ 283.126651][ T6594] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 283.133679][ T6594] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 283.168135][ T6124] usb 5-1: config 0 descriptor?? [ 283.199906][ T52] Bluetooth: hci1: command tx timeout [ 283.302900][ T7773] loop1: detected capacity change from 0 to 1024 [ 283.517843][ T3440] hfsplus: b-tree write err: -5, ino 4 [ 284.381711][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.685795][ T6124] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 284.698885][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.706417][ T6124] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 284.790139][ T7786] GUP no longer grows the stack in syz.5.429 (7786): 200000002000-200000005000 (200000001000) [ 284.800829][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.5.429 Not tainted syzkaller #0 PREEMPT(full) [ 284.800861][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.800887][ T7786] Call Trace: [ 284.800897][ T7786] [ 284.800907][ T7786] dump_stack_lvl+0x189/0x250 [ 284.800945][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.800972][ T7786] ? __pfx__printk+0x10/0x10 [ 284.801001][ T7786] ? find_vma+0xe7/0x160 [ 284.801049][ T7786] __get_user_pages+0x2465/0x29f0 [ 284.801103][ T7786] ? __gup_longterm_locked+0x307/0x1660 [ 284.801130][ T7786] ? down_read_killable+0x1bc/0x350 [ 284.801160][ T7786] __gup_longterm_locked+0x3dc/0x1660 [ 284.801190][ T7786] ? try_grab_folio_fast+0x3e9/0x6a0 [ 284.801230][ T7786] gup_fast_fallback+0x1d6b/0x22d0 [ 284.801282][ T7786] ? __pfx_gup_fast_fallback+0x10/0x10 [ 284.801311][ T7786] ? rcu_is_watching+0x15/0xb0 [ 284.801334][ T7786] ? trace_kmalloc+0x1f/0xb0 [ 284.801348][ T7786] ? is_valid_gup_args+0x11f/0x200 [ 284.801374][ T7786] ? pin_user_pages_fast+0x4d/0xb0 [ 284.801400][ T7786] get_vaddr_frames+0x86/0x210 [ 284.801423][ T7786] vb2_create_framevec+0x58/0xd0 [ 284.801450][ T7786] vb2_vmalloc_get_userptr+0x108/0x450 [ 284.801473][ T7786] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 284.801492][ T7786] __buf_prepare+0xf49/0x4730 [ 284.801526][ T7786] ? __pfx___buf_prepare+0x10/0x10 [ 284.801544][ T7786] ? is_bpf_text_address+0x26/0x2b0 [ 284.801579][ T7786] ? is_bpf_text_address+0x292/0x2b0 [ 284.801606][ T7786] ? is_bpf_text_address+0x26/0x2b0 [ 284.801636][ T7786] ? kernel_text_address+0xa5/0xe0 [ 284.801672][ T7786] ? __lock_acquire+0x6b6/0x2cf0 [ 284.801773][ T7786] vb2_core_prepare_buf+0xad/0x2c0 [ 284.801793][ T7786] __video_do_ioctl+0xa59/0xc10 [ 284.801828][ T7786] ? __pfx___video_do_ioctl+0x10/0x10 [ 284.801859][ T7786] video_usercopy+0x82a/0x13f0 [ 284.801886][ T7786] ? __pfx___video_do_ioctl+0x10/0x10 [ 284.801905][ T7786] ? __pfx_video_usercopy+0x10/0x10 [ 284.801938][ T7786] ? __fget_files+0x3a0/0x420 [ 284.801966][ T7786] v4l2_ioctl+0x18d/0x1e0 [ 284.801984][ T7786] ? __pfx_v4l2_ioctl+0x10/0x10 [ 284.802001][ T7786] __se_sys_ioctl+0xfc/0x170 [ 284.802022][ T7786] do_syscall_64+0xfa/0xf80 [ 284.802043][ T7786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.802061][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 284.802083][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.802100][ T7786] RIP: 0033:0x7f4b1598f749 [ 284.802117][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.802133][ T7786] RSP: 002b:00007f4b1684b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.802153][ T7786] RAX: ffffffffffffffda RBX: 00007f4b15be6180 RCX: 00007f4b1598f749 [ 284.802167][ T7786] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000006 [ 284.802179][ T7786] RBP: 00007f4b15a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.802189][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.802200][ T7786] R13: 00007f4b15be6218 R14: 00007f4b15be6180 R15: 00007fff384436b8 [ 284.802234][ T7786] [ 284.806662][ T52] Bluetooth: hci4: unexpected cc 0x0c5b length: 5 > 1 [ 284.820700][ T50] bond0 (unregistering): Released all slaves [ 285.277981][ T52] Bluetooth: hci1: command tx timeout [ 285.400256][ T50] tipc: Disabling bearer [ 285.429548][ T9] usb 4-1: USB disconnect, device number 13 [ 285.440388][ T50] tipc: Left network mode [ 285.737276][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 286.206194][ T7807] fuse: Bad value for 'fd' [ 286.828031][ T7803] exFAT-fs (loop1): unable to read boot sector [ 286.856625][ T7803] exFAT-fs (loop1): failed to read boot sector [ 286.938947][ T6124] usb 5-1: USB disconnect, device number 17 [ 287.074295][ T7803] exFAT-fs (loop1): failed to recognize exfat type [ 287.356769][ T52] Bluetooth: hci1: command tx timeout [ 287.614992][ T7793] loop5: detected capacity change from 0 to 32768 [ 287.638785][ T7793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.430 (7793) [ 287.657882][ T7793] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.673990][ T7793] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 287.901197][ T50] hsr_slave_0: left promiscuous mode [ 287.945684][ T50] hsr_slave_1: left promiscuous mode [ 287.984761][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.012704][ T7793] BTRFS info (device loop5): turning off barriers [ 288.022242][ T7793] BTRFS info (device loop5): enabling free space tree [ 288.030705][ T7793] BTRFS info (device loop5): use zstd compression, level 3 [ 288.032936][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.078598][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.139192][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.237409][ T50] veth0_macvtap: left promiscuous mode [ 288.243436][ T50] veth1_vlan: left promiscuous mode [ 288.250113][ T50] veth0_vlan: left promiscuous mode [ 288.546169][ T7166] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.789850][ T7847] loop3: detected capacity change from 0 to 1024 [ 288.925564][ T4884] hfsplus: b-tree write err: -5, ino 4 [ 289.391804][ T52] Bluetooth: hci0: unexpected cc 0x0c5b length: 5 > 1 [ 289.399172][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 289.436764][ T7033] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 289.446802][ T52] Bluetooth: hci1: command tx timeout [ 289.607070][ T7033] usb 4-1: Using ep0 maxpacket: 32 [ 289.628429][ T7033] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.639286][ T7033] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 289.694408][ T7033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.713504][ T7033] usb 4-1: Product: syz [ 289.723786][ T7033] usb 4-1: Manufacturer: syz [ 289.735848][ T7033] usb 4-1: SerialNumber: syz [ 289.752924][ T7033] usb 4-1: config 0 descriptor?? [ 290.439974][ T7861] netlink: 148 bytes leftover after parsing attributes in process `syz.3.438'. [ 290.450550][ T7861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.438'. [ 290.460209][ T7861] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 291.038525][ T7033] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 291.045517][ T7033] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 291.396475][ T6788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 291.417888][ T50] team0 (unregistering): Port device team_slave_1 removed [ 291.472484][ T50] team0 (unregistering): Port device team_slave_0 removed [ 291.563567][ T6788] usb 6-1: Using ep0 maxpacket: 32 [ 291.584588][ T6788] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.595516][ T6788] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.621654][ T6788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.638657][ T6788] usb 6-1: Product: syz [ 291.643635][ T6788] usb 6-1: Manufacturer: syz [ 291.651859][ T6788] usb 6-1: SerialNumber: syz [ 291.690481][ T6788] usb 6-1: config 0 descriptor?? [ 292.618504][ T9] usb 4-1: USB disconnect, device number 14 [ 292.741023][ T6788] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 292.776788][ T6788] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 292.963939][ T52] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 293.165093][ T7877] fuse: Bad value for 'fd' [ 294.543999][ T7885] loop3: detected capacity change from 0 to 2048 [ 294.666177][ T7885] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 294.745297][ T7892] loop4: detected capacity change from 0 to 1024 [ 294.750056][ T7885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.872965][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.885315][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.899746][ T7738] bridge_slave_0: entered allmulticast mode [ 294.915054][ T7738] bridge_slave_0: entered promiscuous mode [ 295.022882][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.198702][ T5910] usb 6-1: USB disconnect, device number 2 [ 295.243489][ T6195] hfsplus: b-tree write err: -5, ino 4 [ 295.276770][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.339553][ T7738] bridge_slave_1: entered allmulticast mode [ 295.374652][ T7738] bridge_slave_1: entered promiscuous mode [ 297.683002][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.735340][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.027322][ T7738] team0: Port device team_slave_0 added [ 298.060392][ T7738] team0: Port device team_slave_1 added [ 298.189409][ T7912] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 298.414060][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.425543][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.614611][ T7916] fuse: Bad value for 'fd' [ 299.213346][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.471365][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.498170][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.626443][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.921107][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.455'. [ 300.517933][ T7925] loop3: detected capacity change from 0 to 1024 [ 300.774318][ T3466] hfsplus: b-tree write err: -5, ino 4 [ 300.791462][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 300.858850][ T7738] hsr_slave_0: entered promiscuous mode [ 300.887830][ T7738] hsr_slave_1: entered promiscuous mode [ 300.914131][ T7738] debugfs: 'hsr0' already exists in 'hsr' [ 300.948021][ T7738] Cannot create hsr debugfs directory [ 301.028686][ T6788] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.180070][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 301.188742][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 301.199751][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 301.216447][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.216610][ T6788] usb 6-1: Using ep0 maxpacket: 32 [ 301.237803][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.242517][ T6788] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 301.257990][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 301.268656][ T6788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.280793][ T6788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.291108][ T6788] usb 6-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 301.298093][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.302497][ T6788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.321210][ T6788] usb 6-1: config 0 descriptor?? [ 301.339278][ T6788] hub 6-1:0.0: USB hub found [ 301.346419][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 301.355299][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.358275][ T5888] usb 2-1: config 0 descriptor?? [ 301.375165][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.396953][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.406030][ T5888] hub 2-1:0.0: USB hub found [ 301.408151][ T10] usb 4-1: Product: syz [ 301.414977][ T10] usb 4-1: Manufacturer: syz [ 301.420718][ T10] usb 4-1: SerialNumber: syz [ 301.436264][ T10] usb 4-1: config 0 descriptor?? [ 301.558714][ T7934] FAULT_INJECTION: forcing a failure. [ 301.558714][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 301.581603][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.5.458 Not tainted syzkaller #0 PREEMPT(full) [ 301.581638][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.581652][ T7934] Call Trace: [ 301.581660][ T7934] [ 301.581670][ T7934] dump_stack_lvl+0x189/0x250 [ 301.581700][ T7934] ? __pfx____ratelimit+0x10/0x10 [ 301.581724][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.581751][ T7934] ? __pfx__printk+0x10/0x10 [ 301.581784][ T7934] ? __pfx___might_resched+0x10/0x10 [ 301.581809][ T7934] ? fs_reclaim_acquire+0x7d/0x100 [ 301.581838][ T7934] should_fail_ex+0x414/0x560 [ 301.581869][ T7934] should_failslab+0xa8/0x100 [ 301.581898][ T7934] kmem_cache_alloc_noprof+0x88/0x710 [ 301.581930][ T7934] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 301.581957][ T7934] ? getname_flags+0xb8/0x540 [ 301.581981][ T7934] ? __pfx_vfs_write+0x10/0x10 [ 301.582005][ T7934] getname_flags+0xb8/0x540 [ 301.582037][ T7934] do_sys_openat2+0xbc/0x200 [ 301.582071][ T7934] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.582105][ T7934] ? ksys_write+0x22a/0x250 [ 301.582128][ T7934] ? __pfx_ksys_write+0x10/0x10 [ 301.582152][ T7934] __x64_sys_openat+0x138/0x170 [ 301.582189][ T7934] do_syscall_64+0xfa/0xf80 [ 301.582216][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.582238][ T7934] ? clear_bhb_loop+0x60/0xb0 [ 301.582264][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.582285][ T7934] RIP: 0033:0x7f4b1598df90 [ 301.582305][ T7934] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 301.582324][ T7934] RSP: 002b:00007f4b1688cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 301.582347][ T7934] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b1598df90 [ 301.582363][ T7934] RDX: 0000000000000000 RSI: 00007f4b1688cc10 RDI: 00000000ffffff9c [ 301.582377][ T7934] RBP: 00007f4b1688cc10 R08: 0000000000000000 R09: 0000000000000000 [ 301.582390][ T7934] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 301.582404][ T7934] R13: 00007f4b15be6038 R14: 00007f4b15be5fa0 R15: 00007fff384436b8 [ 301.582439][ T7934] [ 301.641030][ T7738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.933491][ T6788] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 302.027323][ T7738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.101974][ T7738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.118029][ T6788] usb 6-1: USB disconnect, device number 3 [ 302.127108][ T5888] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 302.174846][ T7738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.465295][ T7958] loop4: detected capacity change from 0 to 32768 [ 302.474943][ T7958] (syz.4.461,7958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.483516][ T10] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 302.489638][ T5888] usb 2-1: USB disconnect, device number 14 [ 302.501344][ T7958] (syz.4.461,7958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.581094][ T7958] JBD2: Ignoring recovery information on journal [ 302.593437][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 302.637570][ T7958] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 302.650550][ T7958] (syz.4.461,7958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 302.679329][ T7958] (syz.4.461,7958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 302.699165][ T7958] (syz.4.461,7958,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 302.711651][ T7958] (syz.4.461,7958,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 302.720474][ T7958] (syz.4.461,7958,1):ocfs2_quota_read:201 ERROR: status = -5 [ 302.727929][ T7958] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 3 [ 302.738868][ T7958] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 302.748352][ T7958] (syz.4.461,7958,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 302.756107][ T7958] (syz.4.461,7958,1):ocfs2_symlink:1894 ERROR: status = -5 [ 302.763738][ T7958] (syz.4.461,7958,1):ocfs2_symlink:2080 ERROR: status = -5 [ 303.072195][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 303.087068][ T6124] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 303.380072][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.529087][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.567368][ T7983] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 303.578759][ T7982] IPVS: stopping backup sync thread 7983 ... [ 303.632205][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.639515][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.787047][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.794365][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.836682][ T6124] usb 6-1: Using ep0 maxpacket: 32 [ 303.861450][ T6124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 303.886845][ T6124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.931201][ T6124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.981065][ T6124] usb 6-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 304.018131][ T6124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.107940][ T6124] usb 6-1: config 0 descriptor?? [ 304.156115][ T6124] hub 6-1:0.0: USB hub found [ 304.464396][ T7993] fuse: Bad value for 'fd' [ 305.244135][ T7033] usb 4-1: USB disconnect, device number 15 [ 305.325951][ T6124] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 305.398620][ T52] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 305.449699][ T6124] usb 6-1: USB disconnect, device number 4 [ 305.742583][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.847568][ T6026] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 306.011448][ T6026] usb 4-1: Using ep0 maxpacket: 8 [ 306.039533][ T6026] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 306.056832][ T6026] usb 4-1: config 2 has no interface number 0 [ 306.063059][ T6026] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 306.065274][ T8020] loop5: detected capacity change from 0 to 1024 [ 306.079936][ T6026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.134509][ T6026] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected [ 306.171221][ T6026] earthmate ttyUSB0: required endpoint is missing [ 306.298631][ T6036] hfsplus: b-tree write err: -5, ino 4 [ 306.783345][ T6124] usb 4-1: USB disconnect, device number 16 [ 306.969755][ T6124] cypress_m8 4-1:2.169: device disconnected [ 307.237172][ T8011] loop4: detected capacity change from 0 to 32768 [ 307.250193][ T8011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.467 (8011) [ 307.396366][ T8011] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.427921][ T8011] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 307.459419][ T7738] veth0_vlan: entered promiscuous mode [ 307.471338][ T8011] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 307.476759][ T6788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 307.505088][ T7738] veth1_vlan: entered promiscuous mode [ 307.638235][ T7738] veth0_macvtap: entered promiscuous mode [ 307.650817][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.5.472'. [ 307.678467][ T6788] usb 2-1: Using ep0 maxpacket: 16 [ 307.689227][ T6788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.703370][ T7738] veth1_macvtap: entered promiscuous mode [ 307.712594][ T6788] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 307.736386][ T6788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.765718][ T6788] usb 2-1: config 0 descriptor?? [ 307.904234][ T8011] BTRFS info (device loop4): rebuilding free space tree [ 307.990442][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.060038][ T8011] BTRFS info (device loop4): disabling free space tree [ 308.074594][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.100785][ T8011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.126799][ T8011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.155218][ T6378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.183578][ T8011] BTRFS info (device loop4): enabling ssd optimizations [ 308.193683][ T6378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.208660][ T8011] BTRFS info (device loop4): enabling disk space caching [ 308.215769][ T8011] BTRFS info (device loop4): force clearing of disk cache [ 308.250008][ T6378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.277892][ T8011] BTRFS info (device loop4): enabling auto defrag [ 308.278883][ T6378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.300837][ T8011] BTRFS info (device loop4): max_inline set to 0 [ 308.310418][ T6788] mcp2221 0003:04D8:00DD.0002: collection stack underflow [ 308.338902][ T8011] FAULT_INJECTION: forcing a failure. [ 308.338902][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.341162][ T6788] mcp2221 0003:04D8:00DD.0002: item 0 4 0 12 parsing failed [ 308.360458][ T6788] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 308.370366][ T6788] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22 [ 308.405096][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.4.467 Not tainted syzkaller #0 PREEMPT(full) [ 308.405121][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.405132][ T8011] Call Trace: [ 308.405140][ T8011] [ 308.405149][ T8011] dump_stack_lvl+0x189/0x250 [ 308.405181][ T8011] ? __pfx____ratelimit+0x10/0x10 [ 308.405203][ T8011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.405226][ T8011] ? __pfx__printk+0x10/0x10 [ 308.405252][ T8011] ? __might_fault+0xb0/0x130 [ 308.405291][ T8011] should_fail_ex+0x414/0x560 [ 308.405318][ T8011] _copy_from_user+0x2d/0xb0 [ 308.405346][ T8011] __keyctl_dh_compute+0x16a/0xca0 [ 308.405367][ T8011] ? __lock_acquire+0x6b6/0x2cf0 [ 308.405390][ T8011] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 308.405442][ T8011] keyctl_dh_compute+0x109/0x160 [ 308.405459][ T8011] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 308.405485][ T8011] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 308.405502][ T8011] ? vfs_write+0x956/0xb30 [ 308.405532][ T8011] __se_sys_keyctl+0x423/0x910 [ 308.405559][ T8011] ? __pfx___se_sys_keyctl+0x10/0x10 [ 308.405587][ T8011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.405619][ T8011] ? __fget_files+0x3a0/0x420 [ 308.405677][ T8011] ? fput+0xa0/0xd0 [ 308.405702][ T8011] ? ksys_write+0x22a/0x250 [ 308.405721][ T8011] ? __pfx_ksys_write+0x10/0x10 [ 308.405743][ T8011] ? do_syscall_64+0xbe/0xf80 [ 308.405767][ T8011] ? __x64_sys_keyctl+0x20/0xc0 [ 308.405795][ T8011] do_syscall_64+0xfa/0xf80 [ 308.405820][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.405840][ T8011] ? clear_bhb_loop+0x60/0xb0 [ 308.405865][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.405885][ T8011] RIP: 0033:0x7f789178f749 [ 308.405904][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.405930][ T8011] RSP: 002b:00007f78925d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 308.405953][ T8011] RAX: ffffffffffffffda RBX: 00007f78919e5fa0 RCX: 00007f789178f749 [ 308.405967][ T8011] RDX: 0000200000000240 RSI: 0000200000000140 RDI: 0000000000000017 [ 308.405980][ T8011] RBP: 00007f78925d1090 R08: 0000000000000000 R09: 0000000000000000 [ 308.405991][ T8011] R10: 0000000000000045 R11: 0000000000000246 R12: 0000000000000001 [ 308.406002][ T8011] R13: 00007f78919e6038 R14: 00007f78919e5fa0 R15: 00007fff687eda28 [ 308.406031][ T8011] [ 308.703558][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.432812][ T8035] loop5: detected capacity change from 0 to 32768 [ 309.484358][ T8035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.472 (8035) [ 309.600655][ T8035] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.656490][ T8035] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 309.665098][ T8035] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 309.805058][ T8079] loop3: detected capacity change from 0 to 2048 [ 309.883508][ T8035] BTRFS info (device loop5): rebuilding free space tree [ 309.973004][ T8035] BTRFS info (device loop5): disabling free space tree [ 310.011876][ T8035] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 310.037085][ T8079] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 310.066068][ T8035] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 310.092348][ T8035] BTRFS info (device loop5): enabling ssd optimizations [ 310.110251][ T8035] BTRFS info (device loop5): enabling disk space caching [ 310.131754][ T8079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.170902][ T8035] BTRFS info (device loop5): force clearing of disk cache [ 310.182874][ T8035] BTRFS info (device loop5): enabling auto defrag [ 310.189565][ T8035] BTRFS info (device loop5): max_inline set to 0 [ 310.221349][ T8032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.234060][ T8032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 310.469156][ T8032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.510192][ T8032] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 310.533429][ T7166] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.665657][ T8032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.681499][ T8032] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 310.707549][ T8032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 310.713768][ T8032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 310.737141][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 310.789923][ T8032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 311.073865][ T8032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.097704][ T8032] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 311.391256][ T8111] fuse: Bad value for 'fd' [ 311.876810][ T8032] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.171597][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.181552][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.336498][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.356113][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.440111][ T6026] usb 2-1: USB disconnect, device number 15 [ 312.477754][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 312.719980][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 312.726234][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 312.740249][ T5837] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 312.818569][ T8120] loop5: detected capacity change from 0 to 1024 [ 313.021139][ T8130] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 313.040093][ T8127] IPVS: stopping backup sync thread 8130 ... [ 313.075170][ T8128] netlink: 68 bytes leftover after parsing attributes in process `syz.6.419'. [ 313.105491][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'. [ 313.123144][ T50] hfsplus: b-tree write err: -5, ino 4 [ 313.124158][ T8128] netlink: 156 bytes leftover after parsing attributes in process `syz.6.419'. [ 313.129421][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.148696][ T8128] netlink: 'syz.6.419': attribute type 13 has an invalid length. [ 313.157320][ T8128] netlink: 'syz.6.419': attribute type 17 has an invalid length. [ 313.264548][ T8135] loop6: detected capacity change from 0 to 512 [ 313.403098][ T8135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 313.446752][ T8135] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.522351][ T8128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.762858][ T8133] netlink: 136 bytes leftover after parsing attributes in process `syz.3.482'. [ 313.833883][ T8145] loop5: detected capacity change from 0 to 32768 [ 313.843505][ T8145] (syz.5.484,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 313.848893][ T8133] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 313.873505][ T8145] (syz.5.484,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 313.910827][ T8145] JBD2: Ignoring recovery information on journal [ 313.993762][ T8149] loop4: detected capacity change from 0 to 256 [ 314.007902][ T8145] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 314.021301][ T8145] (syz.5.484,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 314.049830][ T8145] (syz.5.484,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 314.065925][ T8145] (syz.5.484,8145,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 314.078985][ T8145] (syz.5.484,8145,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 314.087437][ T8145] (syz.5.484,8145,0):ocfs2_quota_read:201 ERROR: status = -5 [ 314.094857][ T8145] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 3 [ 314.105722][ T8145] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 314.115277][ T8145] (syz.5.484,8145,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 314.123109][ T8145] (syz.5.484,8145,0):ocfs2_symlink:1894 ERROR: status = -5 [ 314.130477][ T8145] (syz.5.484,8145,0):ocfs2_symlink:2080 ERROR: status = -5 [ 314.169869][ T7738] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 314.303214][ T7166] ocfs2: Unmounting device (7,5) on (node local) [ 314.598259][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 314.883094][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 314.889311][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.029623][ T8170] fuse: Bad value for 'fd' [ 315.476769][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.844362][ T8175] loop3: detected capacity change from 0 to 1024 [ 315.859023][ T8177] loop1: detected capacity change from 0 to 1024 [ 315.906695][ T8177] ext4: Unknown parameter 'fsmagic' [ 315.958256][ T34] hfsplus: b-tree write err: -5, ino 4 [ 316.177605][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 317.256568][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.556501][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.577714][ T6026] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 317.607765][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.646463][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.661466][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.671752][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.792028][ T9] usb 5-1: Product: syz [ 317.796395][ T9] usb 5-1: Manufacturer: syz [ 317.801039][ T9] usb 5-1: SerialNumber: syz [ 317.806777][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 317.816857][ T6026] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 317.824987][ T6026] usb 2-1: config 0 has no interface number 0 [ 317.831456][ T6026] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.843809][ T6026] usb 2-1: config 0 interface 85 has no altsetting 0 [ 317.853559][ T6026] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 317.864108][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.883510][ T6026] usb 2-1: Product: syz [ 317.890781][ T6026] usb 2-1: Manufacturer: syz [ 317.895854][ T6026] usb 2-1: SerialNumber: syz [ 317.896384][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.974742][ T6026] usb 2-1: config 0 descriptor?? [ 317.980097][ T8197] loop3: detected capacity change from 0 to 164 [ 317.997351][ T8197] iso9660: Unknown parameter '0xffffffffffffffff' [ 318.237738][ T8198] loop6: detected capacity change from 0 to 32768 [ 318.320835][ T8198] (syz.6.498,8198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.334904][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 318.340427][ T8198] (syz.6.498,8198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.383198][ T8198] JBD2: Ignoring recovery information on journal [ 318.441250][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 318.648077][ T8198] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 318.710512][ T8198] (syz.6.498,8198,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 318.952892][ T6026] appletouch 2-1:0.85: Geyser mode initialized. [ 318.962088][ T5888] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 318.972285][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.980600][ T5888] usb 6-1: Product: syz [ 318.984828][ T5888] usb 6-1: Manufacturer: syz [ 318.989930][ T5888] usb 6-1: SerialNumber: syz [ 318.997516][ T5888] usb 6-1: config 0 descriptor?? [ 319.002140][ T8198] (syz.6.498,8198,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 319.019608][ T8198] (syz.6.498,8198,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 319.032166][ T8198] (syz.6.498,8198,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 319.041309][ T8198] (syz.6.498,8198,0):ocfs2_quota_read:201 ERROR: status = -5 [ 319.048934][ T8198] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 3 [ 319.062487][ T8198] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 319.072124][ T8198] (syz.6.498,8198,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 319.080055][ T8198] (syz.6.498,8198,0):ocfs2_symlink:1894 ERROR: status = -5 [ 319.087465][ T8198] (syz.6.498,8198,0):ocfs2_symlink:2080 ERROR: status = -5 [ 319.109449][ T6026] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input7 [ 319.182250][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 319.213856][ T6026] usb 2-1: USB disconnect, device number 16 [ 319.213881][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 319.284502][ T7738] ocfs2: Unmounting device (7,6) on (node local) [ 319.309152][ T6026] appletouch 2-1:0.85: input: appletouch disconnected [ 319.610611][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.641577][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.837201][ T6124] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 320.079388][ T9] usb 5-1: 0:2 : does not exist [ 320.208290][ T9] usb 5-1: USB disconnect, device number 18 [ 320.385266][ T5888] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 320.392472][ T5888] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 320.433911][ T6124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 320.471888][ T6124] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 320.521089][ T6124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 320.692118][ T8225] fuse: Bad value for 'fd' [ 321.323060][ T6124] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 321.399938][ T6124] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 321.459645][ T6124] usb 4-1: Manufacturer: syz [ 321.533629][ T6124] usb 4-1: config 0 descriptor?? [ 321.574023][ T5837] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1 [ 321.583488][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 321.639055][ T6124] smsusb:smsusb_probe: board id=9, interface number 0 [ 321.650545][ T6124] smsusb:smsusb_probe: Device initialized with return code -19 [ 321.765293][ T10] usb 6-1: USB disconnect, device number 5 [ 321.836956][ T5888] usb 4-1: USB disconnect, device number 17 [ 322.232343][ T8244] loop4: detected capacity change from 0 to 2048 [ 322.420370][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.475759][ T8254] loop5: detected capacity change from 0 to 32768 [ 322.484915][ T8254] (syz.5.511,8254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 322.499949][ T8254] (syz.5.511,8254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 322.614069][ T8254] JBD2: Ignoring recovery information on journal [ 322.645848][ T8244] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.691311][ T8254] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 322.718778][ T8254] (syz.5.511,8254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 322.786581][ T8254] (syz.5.511,8254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 322.800231][ T8254] (syz.5.511,8254,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 322.814397][ T8254] (syz.5.511,8254,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 322.823205][ T8254] (syz.5.511,8254,1):ocfs2_quota_read:201 ERROR: status = -5 [ 322.830711][ T8254] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 3 [ 322.840174][ T8254] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 322.849809][ T8254] (syz.5.511,8254,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 322.857953][ T8254] (syz.5.511,8254,1):ocfs2_symlink:1894 ERROR: status = -5 [ 322.865220][ T8254] (syz.5.511,8254,1):ocfs2_symlink:2080 ERROR: status = -5 [ 322.975456][ T8244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.079591][ T7166] ocfs2: Unmounting device (7,5) on (node local) [ 323.723650][ T8267] netlink: 44 bytes leftover after parsing attributes in process `syz.5.514'. [ 323.794571][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 324.029376][ T10] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 324.086384][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.146515][ T10] usb 7-1: config 0 has no interfaces? [ 324.164331][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 324.235614][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.277765][ T10] usb 7-1: config 0 descriptor?? [ 324.445199][ T8281] fuse: Unknown parameter '&d' [ 324.533690][ T7033] usb 7-1: USB disconnect, device number 2 [ 324.943034][ T5837] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1 [ 324.950446][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 325.192008][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.518'. [ 325.214384][ T8296] fuse: Bad value for 'fd' [ 326.096829][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 326.276399][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 326.301689][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.342541][ T5896] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 326.417847][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.449795][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 326.458020][ T8305] loop3: detected capacity change from 0 to 32768 [ 326.464069][ T5896] usb 5-1: Product: syz [ 326.478967][ T8305] (syz.3.524,8305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.494023][ T8305] (syz.3.524,8305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.509443][ T5896] usb 5-1: Manufacturer: syz [ 326.514169][ T5896] usb 5-1: SerialNumber: syz [ 326.553077][ T8305] JBD2: Ignoring recovery information on journal [ 326.599621][ T8305] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 326.618773][ T8305] (syz.3.524,8305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 326.664146][ T8305] (syz.3.524,8305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 326.677551][ T8305] (syz.3.524,8305,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 326.690005][ T8305] (syz.3.524,8305,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 326.699855][ T8305] (syz.3.524,8305,0):ocfs2_quota_read:201 ERROR: status = -5 [ 326.707377][ T8305] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 3 [ 326.716618][ T8305] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 326.726029][ T8305] (syz.3.524,8305,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 326.733931][ T8305] (syz.3.524,8305,0):ocfs2_symlink:1894 ERROR: status = -5 [ 326.741299][ T8305] (syz.3.524,8305,0):ocfs2_symlink:2080 ERROR: status = -5 [ 326.766150][ T5896] usb 5-1: config 0 descriptor?? [ 327.026442][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 327.157397][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 327.462336][ T8319] netlink: 148 bytes leftover after parsing attributes in process `syz.4.520'. [ 327.471803][ T8319] netlink: 56 bytes leftover after parsing attributes in process `syz.4.520'. [ 327.480754][ T8319] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 327.557648][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 327.632019][ T5909] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 327.656660][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.664716][ T5909] usb 7-1: Product: syz [ 327.677996][ T5909] usb 7-1: Manufacturer: syz [ 327.682658][ T5909] usb 7-1: SerialNumber: syz [ 327.737148][ T5909] usb 7-1: config 0 descriptor?? [ 327.837377][ T5896] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 327.871983][ T5896] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 328.951764][ T5909] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 328.961465][ T6124] usb 5-1: USB disconnect, device number 19 [ 330.019315][ T5909] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 330.310816][ T5909] usb 7-1: USB disconnect, device number 3 [ 330.329674][ T8327] syz.1.527 (8327) used greatest stack depth: 18176 bytes left [ 330.350279][ T8343] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 330.352834][ T8340] IPVS: stopping backup sync thread 8343 ... [ 330.451242][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 330.719672][ T8340] netlink: 136 bytes leftover after parsing attributes in process `syz.3.530'. [ 330.976512][ T8356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.532'. [ 331.006475][ T8356] fuse: Bad value for 'fd' [ 331.418475][ T8340] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 331.736938][ T8362] loop6: detected capacity change from 0 to 16 [ 331.819647][ T8362] erofs (device loop6): mounted with root inode @ nid 36. [ 331.868929][ T8362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.876621][ T8362] IPv6: NLM_F_CREATE should be set when creating new route [ 331.971511][ T5834] IPVS: starting estimator thread 0... [ 331.996603][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.534'. [ 332.008005][ T5837] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 332.098546][ T8367] IPVS: using max 24 ests per chain, 57600 per kthread [ 332.856485][ T6124] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 333.505691][ T6788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 333.805548][ T6788] usb 7-1: Using ep0 maxpacket: 32 [ 333.829506][ T6788] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 333.848777][ T6788] usb 7-1: config 0 has no interface number 0 [ 333.854949][ T6788] usb 7-1: config 0 interface 12 has no altsetting 0 [ 334.826736][ T6124] usb 6-1: Using ep0 maxpacket: 32 [ 334.849674][ T6788] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 334.888105][ T6124] usb 6-1: config 0 interface 0 has no altsetting 0 [ 334.937332][ T6124] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 334.943862][ T6788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.946684][ T6124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.988846][ T6124] usb 6-1: Product: syz [ 335.014532][ T6788] usb 7-1: Product: syz [ 335.028440][ T6788] usb 7-1: Manufacturer: syz [ 335.029760][ T6124] usb 6-1: Manufacturer: syz [ 335.046536][ T6788] usb 7-1: SerialNumber: syz [ 335.050692][ T6124] usb 6-1: SerialNumber: syz [ 335.056659][ T8400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.543'. [ 335.073684][ T6788] usb 7-1: config 0 descriptor?? [ 335.091395][ T8400] netlink: 'syz.4.543': attribute type 13 has an invalid length. [ 335.091464][ T6124] usb 6-1: config 0 descriptor?? [ 335.116999][ T8400] netlink: 'syz.4.543': attribute type 17 has an invalid length. [ 335.154183][ T8401] loop4: detected capacity change from 0 to 512 [ 335.179993][ T8400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.263239][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 335.286772][ T869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 335.376541][ T8401] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.403814][ T6788] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 335.486497][ T6788] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 335.561653][ T6788] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 335.623049][ T6788] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 335.665658][ T8410] netlink: 148 bytes leftover after parsing attributes in process `syz.5.541'. [ 335.674909][ T8410] netlink: 56 bytes leftover after parsing attributes in process `syz.5.541'. [ 335.684303][ T8410] netlink: 'syz.5.541': attribute type 1 has an invalid length. [ 335.722875][ T6788] usb 7-1: USB disconnect, device number 4 [ 335.946776][ T869] usb 4-1: Using ep0 maxpacket: 32 [ 335.968225][ T869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 336.076214][ T869] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 336.145917][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.546'. [ 336.163839][ T8420] fuse: Bad value for 'fd' [ 336.756872][ T6124] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 336.763816][ T6124] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 336.776345][ T869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.784390][ T869] usb 4-1: Product: syz [ 336.887847][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 336.938648][ T6124] usb 6-1: USB disconnect, device number 6 [ 336.954147][ T869] usb 4-1: Manufacturer: syz [ 337.012431][ T869] usb 4-1: SerialNumber: syz [ 337.046964][ T869] usb 4-1: config 0 descriptor?? [ 337.070348][ T8424] loop5: detected capacity change from 0 to 164 [ 337.104362][ T8427] loop1: detected capacity change from 0 to 16 [ 337.137967][ T8427] erofs (device loop1): mounted with root inode @ nid 36. [ 337.183128][ T8424] iso9660: Unknown parameter '0xffffffffffffffff' [ 337.214051][ T8427] FAULT_INJECTION: forcing a failure. [ 337.214051][ T8427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.283220][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.1.550 Not tainted syzkaller #0 PREEMPT(full) [ 337.283250][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.283267][ T8427] Call Trace: [ 337.283276][ T8427] [ 337.283286][ T8427] dump_stack_lvl+0x189/0x250 [ 337.283318][ T8427] ? __pfx____ratelimit+0x10/0x10 [ 337.283342][ T8427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.283384][ T8427] ? __pfx__printk+0x10/0x10 [ 337.283431][ T8427] should_fail_ex+0x414/0x560 [ 337.283460][ T8427] strncpy_from_user+0x36/0x2c0 [ 337.283483][ T8427] getname_flags+0xf3/0x540 [ 337.283515][ T8427] path_listxattrat+0xd4/0x3a0 [ 337.283539][ T8427] ? __pfx_path_listxattrat+0x10/0x10 [ 337.283564][ T8427] ? do_syscall_64+0xbe/0xf80 [ 337.283594][ T8427] do_syscall_64+0xfa/0xf80 [ 337.283620][ T8427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.283642][ T8427] ? clear_bhb_loop+0x60/0xb0 [ 337.283668][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.283690][ T8427] RIP: 0033:0x7f7f7458f749 [ 337.283717][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.283737][ T8427] RSP: 002b:00007f7f727f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 337.283759][ T8427] RAX: ffffffffffffffda RBX: 00007f7f747e5fa0 RCX: 00007f7f7458f749 [ 337.283775][ T8427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 337.283789][ T8427] RBP: 00007f7f727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 337.283802][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.283815][ T8427] R13: 00007f7f747e6038 R14: 00007f7f747e5fa0 R15: 00007ffe03010d98 [ 337.283850][ T8427] [ 338.106977][ T869] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 338.156814][ T869] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 338.187377][ T5837] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 443.316262][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 443.323306][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8399/2:b..l [ 443.331816][ C0] rcu: (detected by 0, t=10502 jiffies, g=29281, q=1197 ncpus=2) [ 443.339672][ C0] task:syz.3.544 state:R running task stack:25064 pid:8399 tgid:8398 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 443.354363][ C0] Call Trace: [ 443.357677][ C0] [ 443.360637][ C0] __schedule+0x14bc/0x5000 [ 443.365196][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 443.370697][ C0] ? __pfx___schedule+0x10/0x10 [ 443.375580][ C0] ? do_raw_spin_lock+0x121/0x290 [ 443.380640][ C0] ? inode_add_bytes+0x38/0x140 [ 443.385633][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 443.390953][ C0] preempt_schedule_irq+0xb5/0x150 [ 443.396095][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 443.401850][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 443.406825][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 443.412680][ C0] irqentry_exit+0x5d8/0x660 [ 443.417340][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.423393][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 443.428710][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 74 97 de 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 443.448371][ C0] RSP: 0018:ffffc9000ac97520 EFLAGS: 00000206 [ 443.454481][ C0] RAX: 411c18607dc3fb00 RBX: 0000000000000000 RCX: 411c18607dc3fb00 [ 443.462477][ C0] RDX: 00000000f01822d0 RSI: ffffffff8d969d83 RDI: ffffffff8bc018e0 [ 443.470479][ C0] RBP: ffffffff81fb2380 R08: ffffffff81fb2380 R09: ffffffff8df419e0 [ 443.478481][ C0] R10: ffffc9000ac97720 R11: fffff52001592ee7 R12: 0000000000000002 [ 443.486483][ C0] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246 [ 443.494486][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 443.499718][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 443.504968][ C0] filemap_map_pages+0x184/0x1fd0 [ 443.510020][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 443.515243][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 443.520228][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 443.525191][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 443.530425][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 443.535932][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 443.541427][ C0] ? do_pte_missing+0x11a9/0x3330 [ 443.546480][ C0] do_pte_missing+0x20b0/0x3330 [ 443.551372][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 443.556350][ C0] handle_mm_fault+0x1b26/0x32b0 [ 443.561323][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 443.566836][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 443.571833][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 443.577172][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 443.582310][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 443.587647][ C0] ? __get_user_pages+0x51e/0x29f0 [ 443.592798][ C0] __get_user_pages+0x1650/0x29f0 [ 443.597891][ C0] populate_vma_page_range+0x29f/0x3a0 [ 443.603386][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 443.609405][ C0] ? down_read+0x274/0x2e0 [ 443.613854][ C0] ? __mm_populate+0x160/0x380 [ 443.618736][ C0] __mm_populate+0x24c/0x380 [ 443.623388][ C0] ? __pfx___mm_populate+0x10/0x10 [ 443.628654][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 443.633302][ C0] ? __se_sys_futex+0x36f/0x400 [ 443.638198][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 443.643356][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 443.648245][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 443.653044][ C0] do_syscall_64+0xfa/0xf80 [ 443.657580][ C0] ? rcu_is_watching+0x15/0xb0 [ 443.662369][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.668477][ C0] ? clear_bhb_loop+0x60/0xb0 [ 443.673181][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.679102][ C0] RIP: 0033:0x7f11d4f8f749 [ 443.683545][ C0] RSP: 002b:00007f11d5eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 443.691981][ C0] RAX: ffffffffffffffda RBX: 00007f11d51e5fa0 RCX: 00007f11d4f8f749 [ 443.699984][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 443.708071][ C0] RBP: 00007f11d5013f91 R08: ffffffffffffffff R09: 0000000000000000 [ 443.716068][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 443.724058][ C0] R13: 00007f11d51e6038 R14: 00007f11d51e5fa0 R15: 00007fffa474a5f8 [ 443.732078][ C0] [ 443.735122][ C0] rcu: rcu_preempt kthread starved for 10416 jiffies! g29281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 443.746341][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 443.756337][ C0] rcu: RCU grace-period kthread stack dump: [ 443.762248][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 443.775783][ C0] Call Trace: [ 443.779084][ C0] [ 443.782043][ C0] __schedule+0x14bc/0x5000 [ 443.786599][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 443.791822][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 443.797736][ C0] ? __pfx___schedule+0x10/0x10 [ 443.802622][ C0] ? schedule+0x91/0x360 [ 443.806895][ C0] schedule+0x165/0x360 [ 443.811075][ C0] schedule_timeout+0x12b/0x270 [ 443.815959][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 443.821366][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 443.827282][ C0] ? __pfx_process_timeout+0x10/0x10 [ 443.832604][ C0] ? prepare_to_swait_event+0x341/0x380 [ 443.838186][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 443.843085][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 443.848315][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 443.854496][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 443.859802][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 443.865043][ C0] rcu_gp_kthread+0x99/0x390 [ 443.869676][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 443.874896][ C0] ? __kthread_parkme+0x7b/0x200 [ 443.879873][ C0] ? __kthread_parkme+0x1a1/0x200 [ 443.884935][ C0] kthread+0x711/0x8a0 [ 443.889041][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 443.894268][ C0] ? __pfx_kthread+0x10/0x10 [ 443.898890][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.904112][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 443.909331][ C0] ? __pfx_kthread+0x10/0x10 [ 443.913948][ C0] ret_from_fork+0x599/0xb30 [ 443.918566][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 443.923709][ C0] ? __switch_to_asm+0x39/0x70 [ 443.928503][ C0] ? __switch_to_asm+0x33/0x70 [ 443.933293][ C0] ? __pfx_kthread+0x10/0x10 [ 443.937916][ C0] ret_from_fork_asm+0x1a/0x30 [ 443.942732][ C0] [ 443.945770][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 443.952131][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 443.961086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.971159][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 443.976907][ C0] Code: 93 ef 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f0 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 443.996536][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 444.002628][ C0] RAX: 7663b68acdc53600 RBX: ffffffff8197913a RCX: 7663b68acdc53600 [ 444.010621][ C0] RDX: 0000000000000001 RSI: ffffffff8d783537 RDI: ffffffff8bc018e0 [ 444.018614][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 444.026610][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f813370 [ 444.034634][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 444.042642][ C0] FS: 0000000000000000(0000) GS:ffff888125e4f000(0000) knlGS:0000000000000000 [ 444.051612][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.058235][ C0] CR2: 0000560d10202a38 CR3: 0000000032330000 CR4: 00000000003526f0 [ 444.066326][ C0] Call Trace: [ 444.069653][ C0] [ 444.072709][ C0] default_idle+0x13/0x20 [ 444.077096][ C0] default_idle_call+0x73/0xb0 [ 444.081905][ C0] do_idle+0x1ea/0x520 [ 444.086006][ C0] ? irqentry_exit+0x5ba/0x660 [ 444.090801][ C0] ? __pfx_do_idle+0x10/0x10 [ 444.095438][ C0] cpu_startup_entry+0x44/0x60 [ 444.100232][ C0] rest_init+0x2de/0x300 [ 444.104508][ C0] start_kernel+0x3a7/0x400 [ 444.109045][ C0] x86_64_start_reservations+0x24/0x30 [ 444.114529][ C0] x86_64_start_kernel+0x143/0x1c0 [ 444.119662][ C0] common_startup_64+0x13e/0x147 [ 444.124646][ C0] [ 444.979424][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.301649][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.446625][ T8451] usb 4-1: USB disconnect, device number 18 SYZFAIL: failed to send rpc fd=3 want=184 sent=0 n=-1 (errno 32: Broken pipe) [ 446.786118][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.795408][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.804822][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.814205][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.822184][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.032232][ T6195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.867246][ T6195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.953085][ T6195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.045696][ T6195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.190621][ T6195] bridge_slave_1: left allmulticast mode [ 448.198622][ T6195] bridge_slave_1: left promiscuous mode [ 448.204475][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.217553][ T6195] bridge_slave_0: left allmulticast mode [ 448.223259][ T6195] bridge_slave_0: left promiscuous mode [ 448.230523][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.691665][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.707332][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.718584][ T6195] bond0 (unregistering): Released all slaves [ 449.011212][ T6195] hsr_slave_0: left promiscuous mode [ 449.024541][ T6195] hsr_slave_1: left promiscuous mode [ 449.032814][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.041261][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.049897][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.057429][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.084453][ T6195] veth1_macvtap: left promiscuous mode [ 449.094819][ T6195] veth0_macvtap: left promiscuous mode [ 449.103221][ T6195] veth1_vlan: left promiscuous mode [ 449.110808][ T6195] veth0_vlan: left promiscuous mode [ 449.633475][ T6195] team0 (unregistering): Port device team_slave_1 removed [ 449.672724][ T6195] team0 (unregistering): Port device team_slave_0 removed [ 450.437524][ T6195] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.513058][ T6195] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.602339][ T6195] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.695119][ T6195] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.913740][ T6195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.993438][ T6195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.061930][ T6195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.157363][ T6195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.348709][ T6195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.450655][ T6195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.515022][ T6195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.603799][ T6195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.785091][ T6195] bridge_slave_1: left allmulticast mode [ 451.791676][ T6195] bridge_slave_1: left promiscuous mode [ 451.797995][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.810308][ T6195] bridge_slave_0: left allmulticast mode [ 451.818375][ T6195] bridge_slave_0: left promiscuous mode [ 451.824228][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.841085][ T6195] bridge_slave_1: left allmulticast mode [ 451.850708][ T6195] bridge_slave_1: left promiscuous mode [ 451.857551][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.868899][ T6195] bridge_slave_0: left allmulticast mode [ 451.874680][ T6195] bridge_slave_0: left promiscuous mode [ 451.880934][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.303006][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.314762][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.325168][ T6195] bond0 (unregistering): Released all slaves [ 452.593750][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.604713][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.615058][ T6195] bond0 (unregistering): Released all slaves [ 452.945446][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.958875][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.969030][ T6195] bond0 (unregistering): Released all slaves