last executing test programs: 9m16.83291092s ago: executing program 3 (id=243): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf) 9m13.764881884s ago: executing program 3 (id=252): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x5) 9m12.72362746s ago: executing program 3 (id=255): pipe(0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) r1 = dup2(r0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0xcb) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r8 = dup2(r7, r7) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 9m5.029412521s ago: executing program 3 (id=270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 9m2.974346951s ago: executing program 3 (id=275): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 9m2.622419366s ago: executing program 3 (id=277): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x1ff, 0xffff, 0x2c080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYRES64=r3, @ANYRES16=r3, @ANYRES32, @ANYBLOB="000000000000000000000900000000ce44da87e37d945c1b88efa29d309e02bb3481cc72103314444a2576d53754953721f38059ff877f1f8ab8aab4d064002d534da6c26acb01f1e27634c365491d5089427d41e7867364bbdb25365d5356d3051c7d822d79127a8c1a336422c4cdb840906a681a4a0100998000000000feae1d2512227df1c7058045fb388c97df566d3b42cea03fec4f5fb9bb3cb0214b5f55d75d6b5ebbf0491f4728d697e8f86d6a3b2995972fcfb75d030b0baf5aa719000000000000000000000000000556e9fb3b67e2f92d44d6bcbfc3ea149017127a036ccff6e2b56a0a898071e4b7d5e68e8876e5ec50c514"], 0x50) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000680005002abd700000000000020002000000000004000b00c5c14938e0bbc8d076fc0debe5bc18b4a7793b1bf0c3abd53918ce44bccb2380212da42ab3762006edeb320b251b64505934a06f1ea1dacf044280e9b27c1688b992fed9741c958b58a88395689b9ce5a55c5d17cdf24f2b5e16dadc99162125f4714373376fb8fae5fcf79dd3175873a187a88cc6c357154a7e9078d7ce0a2cca67068111149f3643e96c1a936c99d4c2775608c4bc32174431d2e31171153962fe0354cb08618eeb1ce3d1913127c6086f391c5d3db6a76794434713780da3c37967206a"], 0x1c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 8m47.12120075s ago: executing program 32 (id=277): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x1ff, 0xffff, 0x2c080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYRES64=r3, @ANYRES16=r3, @ANYRES32, @ANYBLOB="000000000000000000000900000000ce44da87e37d945c1b88efa29d309e02bb3481cc72103314444a2576d53754953721f38059ff877f1f8ab8aab4d064002d534da6c26acb01f1e27634c365491d5089427d41e7867364bbdb25365d5356d3051c7d822d79127a8c1a336422c4cdb840906a681a4a0100998000000000feae1d2512227df1c7058045fb388c97df566d3b42cea03fec4f5fb9bb3cb0214b5f55d75d6b5ebbf0491f4728d697e8f86d6a3b2995972fcfb75d030b0baf5aa719000000000000000000000000000556e9fb3b67e2f92d44d6bcbfc3ea149017127a036ccff6e2b56a0a898071e4b7d5e68e8876e5ec50c514"], 0x50) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000680005002abd700000000000020002000000000004000b00c5c14938e0bbc8d076fc0debe5bc18b4a7793b1bf0c3abd53918ce44bccb2380212da42ab3762006edeb320b251b64505934a06f1ea1dacf044280e9b27c1688b992fed9741c958b58a88395689b9ce5a55c5d17cdf24f2b5e16dadc99162125f4714373376fb8fae5fcf79dd3175873a187a88cc6c357154a7e9078d7ce0a2cca67068111149f3643e96c1a936c99d4c2775608c4bc32174431d2e31171153962fe0354cb08618eeb1ce3d1913127c6086f391c5d3db6a76794434713780da3c37967206a"], 0x1c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 3m10.385177298s ago: executing program 5 (id=1059): chdir(&(0x7f0000000480)='./cgroup\x00') getgroups(0x1, &(0x7f0000000080)=[0xee00]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0xcb) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 3m5.665756286s ago: executing program 5 (id=1071): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000000000000002000000200000000"], 0x0, 0x1a, 0x0, 0x1, 0x8, 0x0, @void, @value}, 0x28) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) 2m56.105114815s ago: executing program 5 (id=1101): chdir(&(0x7f0000000480)='./cgroup\x00') getgroups(0x1, &(0x7f0000000080)=[0xee00]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m51.987318894s ago: executing program 5 (id=1110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fsopen(0x0, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) writev(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000340)="15", 0x1}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0xfc3}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) copy_file_range(r5, &(0x7f0000000140)=0x8, r2, 0x0, 0x1000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) 2m36.649362466s ago: executing program 33 (id=1110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fsopen(0x0, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) writev(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000340)="15", 0x1}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0xfc3}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) copy_file_range(r5, &(0x7f0000000140)=0x8, r2, 0x0, 0x1000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) 15.094775672s ago: executing program 0 (id=1493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1d}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 14.332595233s ago: executing program 0 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7fbc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0x7, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket(0x15, 0x5, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000040)={@broadcast, @multicast1}) r6 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) 14.289365524s ago: executing program 6 (id=1495): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x2200c840) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 13.305682718s ago: executing program 0 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 11.956049598s ago: executing program 0 (id=1500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x87}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(0x0, 0x1d) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd244a", 0x83}], 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 10.552198798s ago: executing program 4 (id=1504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) pipe2$watch_queue(0x0, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 10.135259194s ago: executing program 0 (id=1507): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, 0x0) 10.063554295s ago: executing program 0 (id=1508): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a4ec000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x33) 9.856813068s ago: executing program 6 (id=1509): socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000"], 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) capget(0x0, 0x0) 9.509148043s ago: executing program 4 (id=1511): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 9.321578325s ago: executing program 2 (id=1512): chdir(&(0x7f0000000480)='./cgroup\x00') getgroups(0x1, &(0x7f0000000080)=[0xee00]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 8.584137306s ago: executing program 6 (id=1514): timer_create(0x0, 0x0, 0x0) socket(0x24, 0x80805, 0x4) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 7.004861299s ago: executing program 1 (id=1515): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$kcm(0x11, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) 6.716172483s ago: executing program 6 (id=1516): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.638729194s ago: executing program 1 (id=1517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x87}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(0x0, 0x1d) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd244a", 0x83}], 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6.429225117s ago: executing program 6 (id=1518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000340)=0x6) 6.088174232s ago: executing program 6 (id=1519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x2200c840) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 6.087520482s ago: executing program 1 (id=1520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r4, 0x100847c0, 0xfffffffc, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 5.692857438s ago: executing program 2 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.598048384s ago: executing program 1 (id=1522): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) 4.535516285s ago: executing program 2 (id=1523): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x80, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$NL80211_CMD_STOP_NAN(r5, 0x0, 0x50) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.320699308s ago: executing program 1 (id=1524): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(0x0, 0x3ff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.199785794s ago: executing program 4 (id=1525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7fbc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0x7, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket(0x15, 0x5, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000040)={@broadcast, @multicast1}) r6 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000100)='rw\x00', 0x0, 0xffffffffffffff9c) 3.097327386s ago: executing program 2 (id=1526): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x80, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98", 0xe0}, {&(0x7f0000001080)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f808d3907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901ba7b32c2f8b64909bc77cebdb3d1fe42679c0bad81bbc987e4dc146cabce802cfbb1bd48bdfa1788a9cd0e2c10d97bfd158374cf6166d1d1fe69de0d7af1f82a10852bf4f191d4405d2d8f11a2d2b8316b0b82f13b666efdf680525e32fd01b43af093ff773f7f6b0ae0dab56f6e7bbebb2cd23bb5e6204ad488f6943ceae409f980b034e00", 0xbe}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497", 0x9b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c", 0x46}, {&(0x7f0000000840)="b1f56ee2", 0x4}, {&(0x7f0000000e80)="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", 0x152}], 0x3}}], 0x2, 0xc0) sendmsg$NL80211_CMD_STOP_NAN(r5, 0x0, 0x50) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.044687106s ago: executing program 1 (id=1527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffdfe060000000000065b67"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004f00)=""/209, 0xd1}, {&(0x7f0000000600)=""/261, 0x105}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f0000000000)=""/244, 0xf4}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x5, 0x20, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x7fff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0xfffffffffffffff8, 0x3, 0xffffff7ffffeffff, 0xffffffffffff0001, 0x4, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008e0000008e000000060000000000000003000085ffffffff070000000500000091"], 0x0, 0xae, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)="fa", 0x1, 0x800, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES16=r7, @ANYRES16=r5, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 575.153032ms ago: executing program 4 (id=1528): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xcf6, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 558.035732ms ago: executing program 2 (id=1529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000340)=0x6) 773.72µs ago: executing program 2 (id=1530): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000000008", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 0s ago: executing program 4 (id=1531): chdir(&(0x7f0000000480)='./cgroup\x00') getgroups(0x1, &(0x7f0000000080)=[0xee00]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 initial count (10 ns). Using initial count to start timer. [ 292.916627][ T6454] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 292.924310][ T6454] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.526'. [ 292.980899][ T6463] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 293.040717][ T6463] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 293.427895][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 293.615820][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'. [ 295.143931][ T6500] fuse: Bad value for 'fd' [ 296.311873][ T6505] fuse: Unknown parameter 'fd00000000000000000000' [ 297.969858][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.544'. [ 298.555904][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.565059][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.572599][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.752494][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 300.392254][ T6570] fuse: Bad value for 'fd' [ 302.229162][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.239394][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.246957][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.341665][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 303.523342][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 307.078688][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 308.717235][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 310.743063][ T6694] blktrace: Concurrent blktraces are not allowed on loop0 [ 311.580126][ T6708] input: syz1 as /devices/virtual/input/input8 [ 312.176894][ T6728] ipt_ECN: cannot use operation on non-tcp rule [ 313.099447][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.108315][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.115791][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.378815][ T4253] Bluetooth: hci5: command 0x0406 tx timeout [ 316.700264][ T1324] Bluetooth: hci5: command 0x0405 tx timeout [ 316.983777][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254191][ T6764] blktrace: Concurrent blktraces are not allowed on loop0 [ 318.624942][ T6773] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 318.780140][ T6774] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 320.135624][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 322.703855][ T6799] blktrace: Concurrent blktraces are not allowed on loop0 [ 322.874917][ T5916] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 322.970134][ T6804] overlayfs: missing 'workdir' [ 323.074431][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 323.181740][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 323.325165][ T5916] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 323.433797][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.629102][ T5916] usb 3-1: config 0 descriptor?? [ 324.561164][ T6801] udc-core: couldn't find an available UDC or it's busy [ 324.578753][ T6801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 324.594983][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 324.874889][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 324.930532][ T5916] usb 3-1: Cannot set autoneg [ 324.937715][ T5916] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 324.955999][ T5916] usb 3-1: USB disconnect, device number 9 [ 325.025398][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.063033][ T21] usb 2-1: config 0 has no interfaces? [ 325.494984][ T21] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 325.540680][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.871416][ T21] usb 2-1: config 0 descriptor?? [ 326.307003][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 326.402943][ T6817] device team_slave_0 entered promiscuous mode [ 326.409592][ T6817] device team_slave_1 entered promiscuous mode [ 326.435135][ T6817] device macvtap1 entered promiscuous mode [ 326.443115][ T6817] device team0 entered promiscuous mode [ 326.457295][ T6817] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 326.546550][ T4246] usb 2-1: USB disconnect, device number 4 [ 328.222541][ T6857] netlink: 5 bytes leftover after parsing attributes in process `syz.1.627'. [ 328.375556][ T6857] netlink: 5 bytes leftover after parsing attributes in process `syz.1.627'. [ 328.438326][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.626'. [ 332.280058][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.639'. [ 333.000671][ T6893] loop5: detected capacity change from 0 to 40427 [ 333.255322][ T6893] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 333.522337][ T6893] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 334.380258][ T6893] F2FS-fs (loop5): Found nat_bits in checkpoint [ 335.716508][ T6946] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 337.053982][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 337.083130][ T6953] device bond_slave_0 entered promiscuous mode [ 337.089768][ T6953] device bond_slave_1 entered promiscuous mode [ 337.366467][ T6953] device bond_slave_0 left promiscuous mode [ 337.372450][ T6953] device bond_slave_1 left promiscuous mode [ 343.353768][ T7000] orangefs_mount: mount request failed with -4 [ 356.943738][ T7085] orangefs_mount: mount request failed with -4 [ 361.682920][ T5916] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 361.727832][ T7136] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 362.073515][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.123260][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.218065][ T5916] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.299149][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.480884][ T5916] usb 2-1: config 0 descriptor?? [ 364.092856][ T5916] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 364.144873][ T5916] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 364.156069][ T7151] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 364.380678][ T5916] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 364.700935][ T5916] usb 2-1: USB disconnect, device number 5 [ 367.217240][ T7176] hub 8-0:1.0: USB hub found [ 367.222118][ T7176] hub 8-0:1.0: 1 port detected [ 369.524425][ T7193] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 374.663625][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 376.337110][ T7259] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 378.321517][ T7276] orangefs_mount: mount request failed with -4 [ 378.419358][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709232][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.740'. [ 378.899675][ T7289] sd 0:0:1:0: device reset [ 379.872256][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 379.881396][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 382.428742][ T7315] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 383.477416][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 384.696101][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 385.967177][ T5916] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 386.648967][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 386.658415][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 388.241366][ T7360] orangefs_mount: mount request failed with -4 [ 388.607110][ T5916] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.626162][ T5916] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.667364][ T5916] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.781475][ T7366] netlink: 248 bytes leftover after parsing attributes in process `syz.4.762'. [ 388.793706][ T7366] unsupported nlmsg_type 40 [ 389.525283][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.575027][ T5916] usb 6-1: can't set config #27, error -71 [ 389.835464][ T5916] usb 6-1: USB disconnect, device number 2 [ 392.463426][ T4253] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 393.393110][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.775'. [ 393.561000][ T4253] usb 3-1: Using ep0 maxpacket: 16 [ 393.912012][ T4253] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 393.987776][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.033761][ T7404] orangefs_mount: mount request failed with -4 [ 394.267045][ T4253] usb 3-1: Product: syz [ 394.272749][ T4253] usb 3-1: Manufacturer: syz [ 394.278580][ T4253] usb 3-1: SerialNumber: syz [ 394.296201][ T4253] usb 3-1: config 0 descriptor?? [ 396.483010][ T4253] usb_8dev 3-1:0.0 can0: sending command message failed [ 396.704454][ T4253] usb_8dev 3-1:0.0 can0: can't get firmware version [ 396.940104][ T7426] hub 8-0:1.0: USB hub found [ 397.066398][ T7426] hub 8-0:1.0: 1 port detected [ 398.651854][ T4253] usb_8dev: probe of 3-1:0.0 failed with error -22 [ 398.814218][ T4253] usb 3-1: USB disconnect, device number 10 [ 401.202173][ T7456] orangefs_mount: mount request failed with -4 [ 406.711098][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.711197][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.711247][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.711314][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.711367][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.711425][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.711491][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.711545][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.715615][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.730320][ T7505] device batadv_slave_0 entered promiscuous mode [ 408.013202][ T7509] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.804'. [ 415.098960][ T7551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.144661][ T7550] orangefs_mount: mount request failed with -4 [ 416.087373][ T7558] fuse: Bad value for 'fd' [ 416.323385][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 417.830861][ T7571] loop1: detected capacity change from 0 to 40427 [ 417.958794][ T7571] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 417.987183][ T7571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 418.345760][ T7571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 419.070363][ T7571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 419.159826][ T7571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.988737][ T7591] trusted_key: encrypted_key: insufficient parameters specified [ 422.106655][ T7604] fuse: Bad value for 'fd' [ 423.122680][ T7619] blktrace: Concurrent blktraces are not allowed on loop4 [ 424.189700][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.834'. [ 425.417552][ T7646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 426.192498][ T7646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.200797][ T7646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.784625][ T7654] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.841'. [ 427.558054][ T7641] loop4: detected capacity change from 0 to 40427 [ 427.584530][ T7641] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 427.623013][ T7641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 427.841337][ T7641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 428.108264][ T7641] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 428.139110][ T7641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 428.250206][ T7671] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 431.462857][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 433.740592][ T7707] fuse: Bad value for 'fd' [ 434.882721][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 434.892029][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.857'. [ 436.685970][ T7727] hub 8-0:1.0: USB hub found [ 436.690973][ T7727] hub 8-0:1.0: 1 port detected [ 438.382740][ T7750] fuse: Bad value for 'fd' [ 439.030736][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'. [ 439.850343][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.749211][ T7792] hub 8-0:1.0: USB hub found [ 442.754236][ T7792] hub 8-0:1.0: 1 port detected [ 443.534248][ T7795] orangefs_mount: mount request failed with -4 [ 443.801351][ T7801] fuse: Bad value for 'fd' [ 446.742014][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.883'. [ 448.213843][ T7832] blktrace: Concurrent blktraces are not allowed on loop10 [ 448.494542][ T7834] hub 8-0:1.0: USB hub found [ 448.499711][ T7834] hub 8-0:1.0: 1 port detected [ 448.813954][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 448.822876][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 449.199554][ T7846] fuse: Bad value for 'fd' [ 450.190227][ T7860] fuse: Unknown parameter 'fd00000000000000000000' [ 451.419548][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 452.991236][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 452.991532][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 456.413111][ T7910] fuse: Unknown parameter 'fd00000000000000000000' [ 456.527692][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.907'. [ 458.947777][ T7934] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 462.487720][ T7955] hub 8-0:1.0: USB hub found [ 462.493031][ T7955] hub 8-0:1.0: 1 port detected [ 462.795304][ T7960] fuse: Unknown parameter 'fd00000000000000000000' [ 465.300773][ T7981] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 469.826988][ T8005] hub 8-0:1.0: USB hub found [ 469.832275][ T8005] hub 8-0:1.0: 1 port detected [ 471.288174][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 472.904570][ T8037] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 476.258523][ T8057] hub 8-0:1.0: USB hub found [ 476.266798][ T8057] hub 8-0:1.0: 1 port detected [ 478.677892][ T8078] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 481.536071][ T8107] hub 8-0:1.0: USB hub found [ 481.541101][ T8107] hub 8-0:1.0: 1 port detected [ 485.019558][ T8127] orangefs_mount: mount request failed with -4 [ 485.445779][ T8134] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 489.806413][ T8162] hub 8-0:1.0: USB hub found [ 489.811275][ T8162] hub 8-0:1.0: 1 port detected [ 493.366566][ T8179] orangefs_mount: mount request failed with -4 [ 494.522276][ T8189] blktrace: Concurrent blktraces are not allowed on loop0 [ 495.057237][ T8198] netlink: 1504 bytes leftover after parsing attributes in process `syz.2.983'. [ 495.359938][ T8204] blktrace: Concurrent blktraces are not allowed on loop10 [ 498.682099][ T8223] orangefs_mount: mount request failed with -4 [ 500.553099][ T8248] netlink: 1504 bytes leftover after parsing attributes in process `syz.5.996'. [ 501.084507][ T8256] blktrace: Concurrent blktraces are not allowed on loop4 [ 501.549332][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.567251][ T8270] hub 8-0:1.0: USB hub found [ 502.573018][ T8270] hub 8-0:1.0: 1 port detected [ 503.662617][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 503.671757][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 504.708162][ T8295] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 506.924481][ T8310] blktrace: Concurrent blktraces are not allowed on loop8 [ 507.102719][ T8308] orangefs_mount: mount request failed with -4 [ 507.600100][ T8305] netlink: 1504 bytes leftover after parsing attributes in process `syz.2.1008'. [ 510.864487][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 510.873424][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 511.088491][ T8344] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 514.728745][ T8381] hub 8-0:1.0: USB hub found [ 514.734444][ T8381] hub 8-0:1.0: 1 port detected [ 516.657366][ T8397] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 519.863472][ T8427] hub 8-0:1.0: USB hub found [ 519.868461][ T8427] hub 8-0:1.0: 1 port detected [ 521.177148][ T8436] orangefs_mount: mount request failed with -4 [ 522.787309][ T8429] loop2: detected capacity change from 0 to 40427 [ 523.683029][ T8464] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1051'. [ 524.390158][ T8472] hub 8-0:1.0: USB hub found [ 524.396190][ T8472] hub 8-0:1.0: 1 port detected [ 525.252851][ T8482] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 529.807098][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.853264][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.999816][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.423428][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.523237][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.602303][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.612294][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.622868][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.948538][ T8527] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 532.144527][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 533.984762][ T8561] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1079'. [ 534.015609][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.096206][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.670788][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.769743][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.844193][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.075011][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.745990][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.796685][ T8562] device batadv_slave_0 entered promiscuous mode [ 538.272917][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 538.622790][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 539.576918][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1093'. [ 540.676807][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 540.685940][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'. [ 541.095225][ T5916] usb 5-1: config 0 has no interfaces? [ 541.290319][ T8627] fuse: Bad value for 'fd' [ 541.373032][ T5916] usb 5-1: string descriptor 0 read error: -71 [ 541.392763][ T5916] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 541.436679][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.629332][ T5916] usb 5-1: config 0 descriptor?? [ 541.652637][ T5916] usb 5-1: can't set config #0, error -71 [ 541.669384][ T5916] usb 5-1: USB disconnect, device number 5 [ 543.359310][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 543.971729][ T8655] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1105'. [ 544.904557][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 545.754225][ T8677] fuse: Bad value for 'fd' [ 546.046799][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 546.055876][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 547.786981][ T8690] overlayfs: unrecognized mount option "verity=on" or missing value [ 549.034230][ T8699] hub 8-0:1.0: USB hub found [ 549.039087][ T8699] hub 8-0:1.0: 1 port detected [ 551.102091][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 552.761984][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 556.511838][ T8735] syz.0.1127 uses obsolete (PF_INET,SOCK_PACKET) [ 557.013477][ T8747] fuse: Bad value for 'fd' [ 558.921624][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 559.884190][ T8774] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1133'. [ 561.386320][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 562.334074][ T8802] overlayfs: unrecognized mount option "dirsync" or missing value [ 562.691727][ T4216] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 562.723762][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.311524][ T4216] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 563.320270][ T4216] usb 5-1: config 0 has no interface number 0 [ 563.387644][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.432767][ T8819] fuse: Bad value for 'fd' [ 563.652675][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.847545][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.848024][ T4216] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 563.867349][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.875619][ T4216] usb 5-1: Product: syz [ 563.879890][ T4216] usb 5-1: Manufacturer: syz [ 563.884697][ T4216] usb 5-1: SerialNumber: syz [ 563.893694][ T4216] usb 5-1: config 0 descriptor?? [ 563.961766][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.191458][ T4216] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 564.325408][ T4216] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 564.543137][ T8818] chnl_net:caif_netlink_parms(): no params data found [ 564.561890][ T4216] dib0700: firmware download failed at 7 with -22 [ 564.730738][ T1324] usb 5-1: USB disconnect, device number 6 [ 565.512317][ T8859] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 566.147707][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 566.291734][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.299068][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.344219][ T8818] device bridge_slave_0 entered promiscuous mode [ 566.352932][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.360076][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.368639][ T8818] device bridge_slave_1 entered promiscuous mode [ 567.192120][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.601298][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 567.609764][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 567.667209][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.066398][ T8818] team0: Port device team_slave_0 added [ 568.152918][ T8818] team0: Port device team_slave_1 added [ 568.243927][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 568.975479][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.011097][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.088920][ T8889] fuse: Bad value for 'fd' [ 569.091997][ T8818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.111939][ T154] IPVS: stopping master sync thread 7136 ... [ 569.112978][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.229115][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.262622][ T8818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.681086][ T4216] Bluetooth: hci5: command 0x1001 tx timeout [ 569.681217][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 570.268456][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.279091][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.289706][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.300368][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.312372][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.328203][ T8895] device batadv_slave_0 entered promiscuous mode [ 570.445518][ T4218] Bluetooth: hci3: command 0x040f tx timeout [ 571.388318][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1157'. [ 571.616514][ T8818] device hsr_slave_0 entered promiscuous mode [ 571.665038][ T8909] tmpfs: Unknown parameter 'usrquota' [ 571.694542][ T8818] device hsr_slave_1 entered promiscuous mode [ 571.766691][ T4218] Bluetooth: hci5: command 0x1009 tx timeout [ 571.786419][ T154] device hsr_slave_0 left promiscuous mode [ 571.811266][ T154] device hsr_slave_1 left promiscuous mode [ 571.861775][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.910905][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.985110][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.992901][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.014138][ T154] device bridge_slave_1 left promiscuous mode [ 572.032738][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.052800][ T154] device bridge_slave_0 left promiscuous mode [ 572.064015][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.103478][ T154] device veth1_macvtap left promiscuous mode [ 572.117557][ T154] device veth0_macvtap left promiscuous mode [ 572.130373][ T154] device veth1_vlan left promiscuous mode [ 572.136923][ T154] device veth0_vlan left promiscuous mode [ 572.202784][ T8915] block nbd1: shutting down sockets [ 572.896587][ T154] team0 (unregistering): Port device team_slave_1 removed [ 572.927814][ T154] team0 (unregistering): Port device team_slave_0 removed [ 572.962958][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.991511][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.041534][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 573.279409][ T154] bond0 (unregistering): Released all slaves [ 573.846215][ T8818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.879950][ T8818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.901318][ T8818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.962808][ T8818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.331559][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.182759][ T8818] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.263961][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.311361][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.366471][ T8950] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 575.486655][ T8959] fuse: Bad value for 'fd' [ 575.552105][ T8953] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 575.658312][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.673640][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.696132][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.703387][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.745628][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.771513][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.800495][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.807641][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.937590][ T8955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.946071][ T4283] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 575.971768][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 576.071048][ T8950] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 576.091047][ T8950] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 576.191220][ T8950] bond1 (unregistering): Released all slaves [ 576.339130][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 576.351294][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.392615][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.433565][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.505134][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.591580][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.684026][ T8974] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 577.350940][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.488087][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.509473][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 577.597739][ T8818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.688014][ T8818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.721793][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1166'. [ 577.780033][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.856056][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 578.165087][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.261533][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.312889][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.390259][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.660576][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 578.930472][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 579.034352][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.060688][ T13] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 579.070698][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.080450][ T4218] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 579.086474][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.095239][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.129819][ T13] usb 5-1: config 0 descriptor?? [ 579.441505][ T4218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.467113][ T4218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.580718][ T4218] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 579.589794][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.630465][ T4218] usb 3-1: SerialNumber: syz [ 579.801948][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 579.831863][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.886821][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.916819][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.935527][ T4218] usb 3-1: 0:2 : does not exist [ 579.957652][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.991243][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.049483][ T8818] device veth0_vlan entered promiscuous mode [ 580.067130][ T8818] device veth1_vlan entered promiscuous mode [ 580.087918][ T4218] usb 3-1: USB disconnect, device number 11 [ 580.184577][ T9017] netlink: 'syz.1.1174': attribute type 72 has an invalid length. [ 580.226408][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 580.248444][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 580.281299][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.330911][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.376374][ T8818] device veth0_macvtap entered promiscuous mode [ 580.424427][ T8818] device veth1_macvtap entered promiscuous mode [ 580.570516][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.585005][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.660479][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.003311][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.075339][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.139377][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.177114][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.187718][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.210315][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.230302][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.256207][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.305947][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.317335][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.341592][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 581.350635][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1175'. [ 581.365082][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.379084][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.389003][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.415098][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.431155][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.461957][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.522684][ T8818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.554993][ T8818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.585797][ T8818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.620379][ T8818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.860688][ T13] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 582.109234][ T13] asix: probe of 5-1:0.0 failed with error -71 [ 582.142137][ T13] usb 5-1: USB disconnect, device number 7 [ 582.308120][ T8860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.375390][ T8860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.522428][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 582.543443][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.604210][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.684605][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 582.813320][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 583.683354][ T9065] netlink: 'syz.0.1185': attribute type 72 has an invalid length. [ 584.210192][ T9053] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 584.329882][ T9088] ax25_connect(): syz.2.1189 uses autobind, please contact jreuter@yaina.de [ 584.356790][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.417260][ T9088] bond0: (slave rose0): Enslaving as an active interface with an up link [ 584.492966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 584.500311][ T9053] usb 5-1: Using ep0 maxpacket: 8 [ 584.660709][ T9053] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.689643][ T9053] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.859022][ T9053] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.880092][ T9053] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.971754][ T9053] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.080583][ T9109] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 585.090533][ T9109] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.589321][ T9053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.884163][ T9053] usb 5-1: GET_CAPABILITIES returned 0 [ 585.891778][ T9053] usbtmc 5-1:16.0: can't read capabilities [ 586.130141][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 586.142289][ T9078] usbtmc 5-1:16.0: Unable to send data, error -71 [ 586.158655][ T9053] usb 5-1: USB disconnect, device number 8 [ 586.387812][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1196'. [ 586.543577][ T9129] blktrace: Concurrent blktraces are not allowed on loop4 [ 588.710229][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1201'. [ 595.051624][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1220'. [ 596.978417][ T9249] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1226'. [ 597.176715][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 600.325473][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 601.986905][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1239'. [ 602.036416][ T9312] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1238'. [ 605.634504][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1247'. [ 608.106995][ T9387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.275151][ T9402] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 613.308610][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 615.283804][ T9438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.488308][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.499105][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.509299][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.519909][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.930033][ T9514] device veth0_to_bond entered promiscuous mode [ 620.971466][ T9514] device veth0_to_bond left promiscuous mode [ 621.553927][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1282'. [ 621.616732][ T9533] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 622.234553][ T9531] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 624.494803][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.473883][ T9591] hub 8-0:1.0: USB hub found [ 628.480899][ T9591] hub 8-0:1.0: 1 port detected [ 634.823947][ T9660] hub 8-0:1.0: USB hub found [ 634.829583][ T9660] hub 8-0:1.0: 1 port detected [ 637.444115][ T9681] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1319'. [ 638.722418][ T9703] hub 8-0:1.0: USB hub found [ 638.727767][ T9703] hub 8-0:1.0: 1 port detected [ 642.076404][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 642.706938][ T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 643.226997][ T13] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 643.238107][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.027076][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.036154][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.044911][ T13] usb 2-1: Product: syz [ 644.156578][ T9755] hub 8-0:1.0: USB hub found [ 644.162168][ T9755] hub 8-0:1.0: 1 port detected [ 644.269981][ T13] usb 2-1: can't set config #1, error -71 [ 644.408892][ T13] usb 2-1: USB disconnect, device number 6 [ 645.050374][ T9765] netlink: 'syz.0.1344': attribute type 2 has an invalid length. [ 645.075190][ T9765] netlink: 'syz.0.1344': attribute type 2 has an invalid length. [ 646.056897][ T9774] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 648.136619][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 648.406842][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 648.559197][ T13] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 648.578914][ T13] usb 2-1: config 179 has no interface number 0 [ 648.606578][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 648.654427][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 648.709177][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.812962][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 648.886814][ T13] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 648.994273][ T13] usb 2-1: config 179 interface 65 has no altsetting 0 [ 649.033875][ T13] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 649.042618][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 649.061529][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.107097][ T9796] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.191972][ T13] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 649.385311][ T4246] usb 2-1: USB disconnect, device number 7 [ 649.404102][ T4246] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 652.550707][ T9858] binder: 9845:9858 ioctl 4018620d 0 returned -22 [ 653.346267][ T9866] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 653.806840][ T9880] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 655.687591][ T9893] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1370'. [ 657.966365][ T26] audit: type=1107 audit(1749240758.279:2): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 658.301047][ T9899] hub 8-0:1.0: USB hub found [ 658.308202][ T9899] hub 8-0:1.0: 1 port detected [ 658.812206][ T9905] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 659.288368][ T9908] device bond1 entered promiscuous mode [ 659.300825][ T9908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 659.362086][ T9920] device ip6gretap1 entered promiscuous mode [ 659.384804][ T9920] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 659.397208][ T4585] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 659.412128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 659.566275][ T9923] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 659.587361][ T4585] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 659.780039][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 659.789135][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 662.616637][ T9956] fuse: Bad value for 'fd' [ 662.891198][ T9953] overlayfs: unrecognized mount option "verity=on" or missing value [ 663.009848][ T9972] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1390'. [ 663.556722][ T9978] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 664.404931][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 664.413983][ T9986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 664.649908][ T9998] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 664.806062][T10002] device bond1 entered promiscuous mode [ 664.850274][T10002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.942663][ T9998] device ip6gretap1 entered promiscuous mode [ 664.956236][ T9998] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 664.996766][ T4560] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 665.009633][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 665.145811][ T4283] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 666.728174][T10021] fuse: Bad value for 'fd' [ 666.925996][T10026] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1401'. [ 667.854237][T10034] device netdevsim0 entered promiscuous mode [ 667.871425][T10034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 668.843875][T10048] vivid-001: disconnect [ 668.922474][T10043] vivid-001: reconnect [ 669.236670][T10057] futex_wake_op: syz.0.1410 tries to shift op by -1; fix this program [ 671.987570][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1409'. [ 672.125772][T10070] fuse: Bad value for 'fd' [ 674.617953][T10112] ======================================================= [ 674.617953][T10112] WARNING: The mand mount option has been deprecated and [ 674.617953][T10112] and is ignored by this kernel. Remove the mand [ 674.617953][T10112] option from the mount to silence this warning. [ 674.617953][T10112] ======================================================= [ 674.787934][T10118] fuse: Unknown parameter '0xffffffffffffffff' [ 675.110354][T10125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.618183][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 677.001839][T10160] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1432'. [ 679.863625][T10181] fuse: Unknown parameter '0xffffffffffffffff' [ 679.984861][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1437'. [ 680.966048][T10203] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 681.761074][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 682.046546][T10209] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1445'. [ 683.587653][T10226] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 683.776459][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.787132][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.810922][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.855948][T10227] device batadv_slave_0 entered promiscuous mode [ 686.255489][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.426742][T10240] fuse: Unknown parameter '0xffffffffffffffff' [ 688.484388][ T5916] Bluetooth: hci3: command 0x0406 tx timeout [ 688.641005][T10256] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1459'. [ 691.029236][T10273] overlayfs: unrecognized mount option "verity=on" or missing value [ 691.090059][T10274] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 693.569917][T10292] fuse: Unknown parameter '0xffffffffffffffff' [ 695.563869][ T4216] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 696.094588][ T4216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.186083][ T4216] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.594169][ T4216] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 696.609127][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 696.681210][ T4216] usb 3-1: SerialNumber: syz [ 696.988048][ T4216] usb 3-1: 0:2 : does not exist [ 697.422050][ T4216] usb 3-1: USB disconnect, device number 12 [ 697.834103][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 698.263707][T10342] hub 8-0:1.0: USB hub found [ 698.270843][T10342] hub 8-0:1.0: 1 port detected [ 698.839276][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.985581][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.048020][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.335109][ T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 699.362153][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 699.417418][ T13] usb 2-1: SerialNumber: syz [ 699.715285][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 699.739813][T10351] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 699.790096][ T13] usb 2-1: 0:2 : does not exist [ 699.861228][T10357] fuse: Unknown parameter '0xffffffffffffffff' [ 699.864647][ T13] usb 2-1: USB disconnect, device number 8 [ 699.945194][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.406857][T10375] fuse: Unknown parameter '00000000000000000000' [ 703.529608][ T4253] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 703.611476][T10392] hub 8-0:1.0: USB hub found [ 703.612680][T10392] hub 8-0:1.0: 1 port detected [ 704.053736][ T4253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.084189][ T4253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.213731][ T4253] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.247010][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.320656][ T4253] usb 5-1: SerialNumber: syz [ 704.742163][ T4253] usb 5-1: 0:2 : does not exist [ 704.933467][ T4253] usb 5-1: USB disconnect, device number 9 [ 705.093857][T10402] binder: 10397:10402 ioctl 4018620d 0 returned -22 [ 705.611054][T10407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 705.666613][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.700856][T10410] fuse: Unknown parameter '0xffffffffffffffff' [ 705.737219][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 707.359988][T10428] fuse: Unknown parameter '00000000000000000000' [ 707.642438][T10438] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 708.197388][T10452] ax25_connect(): syz.4.1511 uses autobind, please contact jreuter@yaina.de [ 708.343084][T10454] binder: 10445:10454 ioctl 4018620d 0 returned -22 [ 709.858145][ T4246] Bluetooth: hci5: command 0x1003 tx timeout [ 709.865105][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 711.016748][T10476] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 711.913408][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 711.928156][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 714.190150][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 714.199141][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'. [ 714.334916][ T4246] Bluetooth: hci5: command 0x1009 tx timeout [ 714.747390][T10527] hub 8-0:1.0: USB hub found [ 714.752328][T10527] hub 8-0:1.0: 1 port detected [ 715.749487][T10531] binder: 10521:10531 ioctl 4018620d 0 returned -22 [ 717.160563][T10534] input: syz1 as /devices/virtual/input/input11 [ 717.529241][ T4253] [ 717.531699][ T4253] ====================================================== [ 717.538744][ T4253] WARNING: possible circular locking dependency detected [ 717.545792][ T4253] 5.15.185-syzkaller #0 Not tainted [ 717.551124][ T4253] ------------------------------------------------------ [ 717.558766][ T4253] kworker/1:9/4253 is trying to acquire lock: [ 717.564854][ T4253] ffff888065d88c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 717.575944][ T4253] [ 717.575944][ T4253] but task is already holding lock: [ 717.583320][ T4253] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 717.593733][ T4253] [ 717.593733][ T4253] which lock already depends on the new lock. [ 717.593733][ T4253] [ 717.604146][ T4253] [ 717.604146][ T4253] the existing dependency chain (in reverse order) is: [ 717.613272][ T4253] [ 717.613272][ T4253] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 717.621285][ T4253] __mutex_lock_common+0x1eb/0x2390 [ 717.627028][ T4253] mutex_lock_nested+0x17/0x20 [ 717.632335][ T4253] rfkill_register+0x33/0x8a0 [ 717.637550][ T4253] hci_register_dev+0x452/0x970 [ 717.642939][ T4253] vhci_create_device+0x32c/0x5c0 [ 717.648498][ T4253] vhci_write+0x391/0x450 [ 717.653369][ T4253] vfs_write+0x712/0xd00 [ 717.658143][ T4253] ksys_write+0x14d/0x250 [ 717.663095][ T4253] do_syscall_64+0x4c/0xa0 [ 717.668050][ T4253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 717.674573][ T4253] [ 717.674573][ T4253] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 717.682416][ T4253] __mutex_lock_common+0x1eb/0x2390 [ 717.688157][ T4253] mutex_lock_nested+0x17/0x20 [ 717.693464][ T4253] vhci_send_frame+0x88/0x100 [ 717.698690][ T4253] hci_send_frame+0x1a9/0x2e0 [ 717.703996][ T4253] hci_tx_work+0x9f9/0x1710 [ 717.709034][ T4253] process_one_work+0x863/0x1000 [ 717.714503][ T4253] worker_thread+0xaa8/0x12a0 [ 717.719715][ T4253] kthread+0x436/0x520 [ 717.724311][ T4253] ret_from_fork+0x1f/0x30 [ 717.729346][ T4253] [ 717.729346][ T4253] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 717.738570][ T4253] __flush_work+0xdd/0x1b0 [ 717.744010][ T4253] hci_dev_do_close+0x1e7/0x1030 [ 717.749491][ T4253] hci_unregister_dev+0x2d7/0x580 [ 717.755065][ T4253] vhci_release+0x73/0xc0 [ 717.759937][ T4253] __fput+0x234/0x930 [ 717.764451][ T4253] task_work_run+0x125/0x1a0 [ 717.769755][ T4253] do_exit+0x616/0x20a0 [ 717.774455][ T4253] do_group_exit+0x12e/0x300 [ 717.779597][ T4253] get_signal+0x6ca/0x12c0 [ 717.784543][ T4253] arch_do_signal_or_restart+0xc1/0x1300 [ 717.790721][ T4253] exit_to_user_mode_loop+0x9e/0x130 [ 717.796551][ T4253] exit_to_user_mode_prepare+0xb1/0x140 [ 717.802650][ T4253] syscall_exit_to_user_mode+0x16/0x40 [ 717.808670][ T4253] do_syscall_64+0x58/0xa0 [ 717.813646][ T4253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 717.820090][ T4253] [ 717.820090][ T4253] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 717.827750][ T4253] __mutex_lock_common+0x1eb/0x2390 [ 717.833488][ T4253] mutex_lock_nested+0x17/0x20 [ 717.838908][ T4253] bg_scan_update+0x44/0x3b0 [ 717.844050][ T4253] process_one_work+0x863/0x1000 [ 717.849526][ T4253] worker_thread+0xaa8/0x12a0 [ 717.855324][ T4253] kthread+0x436/0x520 [ 717.859935][ T4253] ret_from_fork+0x1f/0x30 [ 717.864895][ T4253] [ 717.864895][ T4253] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 717.874728][ T4253] __lock_acquire+0x2c33/0x7c60 [ 717.880120][ T4253] lock_acquire+0x197/0x3f0 [ 717.885158][ T4253] __flush_work+0xdd/0x1b0 [ 717.890106][ T4253] __cancel_work_timer+0x3ac/0x520 [ 717.895753][ T4253] hci_request_cancel_all+0xcc/0x300 [ 717.901576][ T4253] hci_dev_do_close+0x4e/0x1030 [ 717.906968][ T4253] hci_rfkill_set_block+0x10a/0x190 [ 717.912701][ T4253] rfkill_set_block+0x1c6/0x420 [ 717.918088][ T4253] rfkill_epo+0x75/0x170 [ 717.923070][ T4253] rfkill_op_handler+0x76/0x220 [ 717.928452][ T4253] process_one_work+0x863/0x1000 [ 717.933924][ T4253] worker_thread+0xaa8/0x12a0 [ 717.939139][ T4253] kthread+0x436/0x520 [ 717.943739][ T4253] ret_from_fork+0x1f/0x30 [ 717.948693][ T4253] [ 717.948693][ T4253] other info that might help us debug this: [ 717.948693][ T4253] [ 717.959014][ T4253] Chain exists of: [ 717.959014][ T4253] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 717.959014][ T4253] [ 717.974849][ T4253] Possible unsafe locking scenario: [ 717.974849][ T4253] [ 717.982311][ T4253] CPU0 CPU1 [ 717.987682][ T4253] ---- ---- [ 717.993053][ T4253] lock(rfkill_global_mutex); [ 717.997818][ T4253] lock(&data->open_mutex); [ 718.004931][ T4253] lock(rfkill_global_mutex); [ 718.012225][ T4253] lock((work_completion)(&hdev->bg_scan_update)); [ 718.018824][ T4253] [ 718.018824][ T4253] *** DEADLOCK *** [ 718.018824][ T4253] [ 718.026974][ T4253] 3 locks held by kworker/1:9/4253: [ 718.032188][ T4253] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 718.042573][ T4253] #1: ffffc9000322fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 718.052967][ T4253] #2: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 718.062483][ T4253] [ 718.062483][ T4253] stack backtrace: [ 718.068396][ T4253] CPU: 1 PID: 4253 Comm: kworker/1:9 Not tainted 5.15.185-syzkaller #0 [ 718.076664][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.086734][ T4253] Workqueue: events rfkill_op_handler [ 718.092140][ T4253] Call Trace: [ 718.095425][ T4253] [ 718.098364][ T4253] dump_stack_lvl+0x168/0x230 [ 718.103054][ T4253] ? load_image+0x3b0/0x3b0 [ 718.107567][ T4253] ? show_regs_print_info+0x20/0x20 [ 718.112817][ T4253] ? print_circular_bug+0x12b/0x1a0 [ 718.118030][ T4253] check_noncircular+0x274/0x310 [ 718.122983][ T4253] ? add_chain_block+0x940/0x940 [ 718.127928][ T4253] ? lockdep_lock+0xdc/0x1e0 [ 718.132527][ T4253] ? __lock_acquire+0x12d9/0x7c60 [ 718.137556][ T4253] ? lockdep_lock+0x1e0/0x1e0 [ 718.142229][ T4253] ? mark_lock+0x94/0x320 [ 718.146556][ T4253] __lock_acquire+0x2c33/0x7c60 [ 718.151437][ T4253] ? verify_lock_unused+0x140/0x140 [ 718.156641][ T4253] ? verify_lock_unused+0x140/0x140 [ 718.161834][ T4253] ? ret_from_fork+0x1e/0x30 [ 718.166428][ T4253] lock_acquire+0x197/0x3f0 [ 718.170934][ T4253] ? __flush_work+0xc1/0x1b0 [ 718.175519][ T4253] ? __lock_acquire+0x7c60/0x7c60 [ 718.180550][ T4253] ? read_lock_is_recursive+0x10/0x10 [ 718.185922][ T4253] ? start_flush_work+0x776/0x820 [ 718.190939][ T4253] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 718.196830][ T4253] __flush_work+0xdd/0x1b0 [ 718.201240][ T4253] ? __flush_work+0xc1/0x1b0 [ 718.205823][ T4253] ? flush_work+0x20/0x20 [ 718.210143][ T4253] ? try_to_grab_pending+0xf3/0x7e0 [ 718.215334][ T4253] ? lockdep_hardirqs_off+0x70/0x100 [ 718.220659][ T4253] ? mark_lock+0x94/0x320 [ 718.224984][ T4253] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 718.230962][ T4253] ? lock_chain_count+0x20/0x20 [ 718.235893][ T4253] ? lockdep_hardirqs_off+0x70/0x100 [ 718.241170][ T4253] ? mark_lock+0x94/0x320 [ 718.245494][ T4253] ? __cancel_work_timer+0x331/0x520 [ 718.250771][ T4253] __cancel_work_timer+0x3ac/0x520 [ 718.255874][ T4253] ? cancel_work_sync+0x20/0x20 [ 718.260718][ T4253] ? __cancel_work+0x1f4/0x2d0 [ 718.265478][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 718.270672][ T4253] ? __cancel_work+0x26f/0x2d0 [ 718.275428][ T4253] ? cancel_work+0x20/0x20 [ 718.279837][ T4253] hci_request_cancel_all+0xcc/0x300 [ 718.285210][ T4253] hci_dev_do_close+0x4e/0x1030 [ 718.290056][ T4253] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 718.295944][ T4253] ? _raw_spin_unlock+0x40/0x40 [ 718.300788][ T4253] ? kobject_uevent_env+0x371/0x890 [ 718.306069][ T4253] hci_rfkill_set_block+0x10a/0x190 [ 718.311261][ T4253] ? rcu_lock_release+0x20/0x20 [ 718.316111][ T4253] rfkill_set_block+0x1c6/0x420 [ 718.320966][ T4253] rfkill_epo+0x75/0x170 [ 718.325201][ T4253] rfkill_op_handler+0x76/0x220 [ 718.330042][ T4253] process_one_work+0x863/0x1000 [ 718.334978][ T4253] ? worker_detach_from_pool+0x240/0x240 [ 718.340607][ T4253] ? lockdep_hardirqs_off+0x70/0x100 [ 718.345886][ T4253] ? _raw_spin_lock_irq+0xab/0xe0 [ 718.350909][ T4253] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 718.356277][ T4253] ? wq_worker_running+0x97/0x170 [ 718.361302][ T4253] worker_thread+0xaa8/0x12a0 [ 718.365989][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 718.371185][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 718.376375][ T4253] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 718.382270][ T4253] kthread+0x436/0x520 [ 718.386333][ T4253] ? rcu_lock_release+0x20/0x20 [ 718.391349][ T4253] ? kthread_blkcg+0xd0/0xd0 [ 718.395934][ T4253] ret_from_fork+0x1f/0x30 [ 718.400351][ T4253]