last executing test programs: 15m22.500155873s ago: executing program 32 (id=958): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe}, 0x18) (async) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000180)=ANY=[], 0x7f) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63616368653d667363616368652c0036a48b28540a02e12e783b93a3cc53f8eda2bcbe0281e33f13ced8d517d90b96e7da607edff8c0cbd65ac986383b8475689a871da46277bf15aa258b4fe619df149df8bae0b1f09ce26cf724bfb8bd9436f9a421c9e179456e98"]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63616368653d667363616368652c0036a48b28540a02e12e783b93a3cc53f8eda2bcbe0281e33f13ced8d517d90b96e7da607edff8c0cbd65ac986383b8475689a871da46277bf15aa258b4fe619df149df8bae0b1f09ce26cf724bfb8bd9436f9a421c9e179456e98"]) dup(r6) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_open_procfs(0x0, &(0x7f0000005cc0)='net/hci\x00') (async) syz_open_procfs(0x0, &(0x7f0000005cc0)='net/hci\x00') timer_create(0x3, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_setup(0x7, &(0x7f00000001c0)) (async) io_setup(0x7, &(0x7f00000001c0)) preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x4000000000, 0xa8001) (async) syz_open_dev$video4linux(0x0, 0x4000000000, 0xa8001) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f0000000200)=0x5) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) (async) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6120, &(0x7f0000000380)={"1b00", 0x7, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["000067590900047a0000f100", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) 14m4.495684438s ago: executing program 33 (id=1310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fadvise64(r0, 0x0, 0x401, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xfb, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x41, 0x6, 0x2, 0x45, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="06208566e60969d689a5c07de95d2d152a801a71b658a21a7d98e14c36d364a6ca87e6fbc9"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000540)="df", 0x1, 0x400bcff, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x2012, r3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x200) recvmsg$kcm(r5, &(0x7f0000001840)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000001740)=[{&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f00000001c0)}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/83, 0x53}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000001600)=""/245, 0xf5}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000001700)=""/6, 0x6}], 0x9, &(0x7f0000001800)=""/35, 0x23}, 0x10102) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 12m42.290242259s ago: executing program 34 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000004400802c00018014000300000000000000000000000000000000ffffac1414001400018008000100ac141432080002007f0000013c0002802c9665e4f00001801400030000000000000000000000ffffe000000200000000000000000000000000000c000280050001000000000008000740000140"], 0xa8}, 0x1, 0xfffff000}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x80000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x42, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @time, 0x2}) read$FUSE(r3, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xe62f}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xba}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x66a39a5c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xb4, 0x2, 0x6, 0x205, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000040}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000007c0), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) 12m24.703035236s ago: executing program 35 (id=1620): unshare(0x4020400) fcntl$setsig(0xffffffffffffffff, 0xa, 0xea) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 12m24.222422729s ago: executing program 36 (id=1624): syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x28aac000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x40, 0x81, 0x0, 0x3, 0x5}, 0xe) (async, rerun: 64) sendto$inet6(r4, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r4, 0x1) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) (async) readv(r4, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0x35, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r9, 0x0, r11}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, r9, 0x0, r6}) 10m46.68169771s ago: executing program 37 (id=1906): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffc67) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x1, 0x80007, 0x1}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) 10m45.167696063s ago: executing program 38 (id=1914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r5) ioctl$EVIOCRMFF(r5, 0x4004550f, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf2574000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000060c0), &(0x7f0000006100)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x3}}, 0x20) 10m42.52114272s ago: executing program 39 (id=1925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="000000001600"/19, @ANYRES32, @ANYBLOB="0000000000000000248bf504c9a7b967460edf3202b6c5d847ffffffff7f0c8236aad755f0bbbc50abde0d31cd4bcedefc0e074e0071c804000000a09c8f0c24f103ce905bc2a2c9393ba986a3f78d3ba2bb547504c3e9aaced7242aeedf763e2d737b4c011e8bf5218b06734b3e5b247da4f9bca40000476968bcd7b6384bba0d90dc8055f8f14c040a57", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000ac0)=""/4096) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x1b) close(r5) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x40, 0x0, 0xfffffffe, 0x6, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x68, 0x0, 0xc, 0x4, 0x0, @private=0xa, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x4a, [@dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @multicast2, @remote, @local]}, @rr={0x7, 0xf, 0xaf, [@loopback, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0xf, [{@private=0xa010101, 0x1}, {@private=0xa010102, 0x3ff}, {@rand_addr=0x64010101, 0x62a7}, {@loopback, 0x8}, {@remote, 0x9}, {@multicast1, 0x7}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @ldst={0x1, 0x1, 0x4, 0x0, 0x9, 0x2, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0xfff, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x8, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r5, r5, r5], &(0x7f00000006c0)=[{0x5, 0x2, 0xb, 0x5}, {0x0, 0x3, 0xa, 0x6}, {0x2, 0x1, 0xa, 0x8}, {0x2, 0x3, 0x2, 0x5}, {0x0, 0x2, 0xe, 0x4}, {0x1, 0x3, 0xa, 0x2}, {0x4, 0x4, 0xe, 0x8}, {0x2, 0x4, 0xf, 0xc}], 0x10, 0x2, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x8000, 0x0, 0x4], [0x0, 0x8, 0xffffff7c], [0x0, 0xad, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xa, 0xa, 0x38345241, 0x0, [r11], [0x1100]}) 10m40.137111884s ago: executing program 40 (id=1932): add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000280)="0100000000f61c4e6b7bc991e731c1a7a7908d092bde0d11b40b510aef", 0x1d, r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind(r1, &(0x7f0000000000)=@ethernet={0x306, @remote}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f00), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000002000)={0x0, 0x300, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x3c, r4, 0x1, 0x6e8, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x24040041) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r7 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r6, 0xffff, &(0x7f0000000740)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r7, 0x80069f7, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r7, 0x80069f7, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}, {@nfs_export_on}]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000004) (async) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000004) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udplite6\x00') preadv(r14, &(0x7f0000000100)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x40, r13, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc00000075501e4b0fdb93e0ae008d70d5082facb1e4b8f33dbc36843c44525221afb0fb37a24a9e21964c3ed61730fcd836336c", @ANYRES16=r10, @ANYBLOB="04002dbd7000ffdbdf252600000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff030000630000002e001501727cac2102d53502385aacb4cd6bccbe05dc47700ca8ed90c421d9ac33b34e6cb216598c93bd419aee5d00000400440006006600f80000000400cc0020004c0013ac0f0011ac0f0001ac0f0005ac0f0003ac0f0013ac0f0005ac0f00060066001c00000014004c000fac0f0008ac0f0012ac0f000fac0f0008004a0006ac0f000400af000a00340001010101010100000a00340002020202020200000a003400010101010101000028002a002d010c0013f7ffffffffffffffc2000700100000000900ff070000027206030303030303"], 0xfc}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc00000075501e4b0fdb93e0ae008d70d5082facb1e4b8f33dbc36843c44525221afb0fb37a24a9e21964c3ed61730fcd836336c", @ANYRES16=r10, @ANYBLOB="04002dbd7000ffdbdf252600000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff030000630000002e001501727cac2102d53502385aacb4cd6bccbe05dc47700ca8ed90c421d9ac33b34e6cb216598c93bd419aee5d00000400440006006600f80000000400cc0020004c0013ac0f0011ac0f0001ac0f0005ac0f0003ac0f0013ac0f0005ac0f00060066001c00000014004c000fac0f0008ac0f0012ac0f000fac0f0008004a0006ac0f000400af000a00340001010101010100000a00340002020202020200000a003400010101010101000028002a002d010c0013f7ffffffffffffffc2000700100000000900ff070000027206030303030303"], 0xfc}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030100000000000000001a000000070021006161000005009200000000000cf7218004000080fbffff7fd4cc8b0edd47ffe8223136eb0884746bb043c83bd601d35dea5800"], 0x30}}, 0x0) 9m2.535660834s ago: executing program 41 (id=2163): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x5) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) readv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/124, 0x7c}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xcbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$cgroup_type(r3, &(0x7f0000000100), 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 8m9.797831818s ago: executing program 42 (id=2380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000001700)=""/188, 0xbc}], 0x1, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc8, 0x54, 0x9b, 0x40, 0x2c7c, 0x30e, 0x8128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x18, 0xd4, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 8m8.665330265s ago: executing program 43 (id=2338): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000192e8ae0c586e00001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000000900020073797a180a0000000b000000000000000000000900010073797a30000000000c0005400000000000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1c, 0x0, 0x200, 0x7f, 0x0, r3, 0x0, '\x00', r8, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) pipe2$9p(&(0x7f0000000140), 0x0) (async) dup(r2) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000192e8ae0c586e00001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000000900020073797a180a0000000b000000000000000000000900010073797a30000000000c0005400000000000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1c, 0x0, 0x200, 0x7f, 0x0, r3, 0x0, '\x00', r8, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async) 7m18.408070787s ago: executing program 44 (id=2541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/228, 0xe4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x290c1c22) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) sigaltstack(&(0x7f00000000c0)={0xfffffffffffffffc}, &(0x7f0000000040)={0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r7, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000408010100000000000000000000b66bd4b9024000000000050003003a00000009ae38e0bc2ba23b76d09606866492fc3c2a31bb64662347826e070a7a6970b68d1ad7f61bfd995216e8486b5673d5c6b2ca345fead9adc5ec0856309e6176784feadb93d2550982de5b1dd0c70a3fb838dd6fc2fff6dc336e2a0d1f85f34911d290892e9d1a6ae7a00f836b725e0a76e847055d5d60a85917317ff0fb9fa14dc327625f5367b08670996d8632df7439123f501c4dcd53e2fb8f4e5b802385952080f4059930fe5eaa004143c7379020"], 0x24}}, 0x0) close_range(r5, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$pppoe(0x18, 0x1, 0x0) 7m16.967123726s ago: executing program 45 (id=2553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x168, 0x0, 0x0, 0xa, 0x310, 0x250, 0x250, 0x310, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x80ffffffffffffff, 0x28e}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_batadv\x00', {0x1000, 0x0, 0x0, 0x1, 0x1000, 0x1, 0x4, 0x20}, {0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 6m49.665462746s ago: executing program 46 (id=2628): openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 6m45.779320016s ago: executing program 47 (id=2643): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000002c0)='security.SMACK64MMAP\x00', &(0x7f0000000300)={'nicvf0\x00'}, 0x8, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) migrate_pages(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000800)={0x20, r6, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000000)={0x8, r6}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000007480)=0xffffffffffffffc8) socket$packet(0x11, 0x0, 0x300) 6m41.945676982s ago: executing program 48 (id=2653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x12d042, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000580)={0x3, 0x14, 0x0, 0x200017, 0x0, 0xa9}) (async) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000580)={0x3, 0x14, 0x0, 0x200017, 0x0, 0xa9}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16=r0], 0x44}}, 0xc0c4) 4m54.489687544s ago: executing program 49 (id=3002): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioperm(0x0, 0x6, 0x10000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf3", 0x40, 0x0) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000140)) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000008000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='contention_end\x00', r3}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x149041, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000c7da658b020000060000000000000000080061"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="feb37fa91b9a1da0f359edba025eecd599cf8da81997f4148e7f4b06d601a09394fd998a44e201b6bf480d9a62bb857890aecd56402633dd20193905d35b148332340b3aac0791b5dfbfe56ed7b8ccb2798bb9d1a693711cfa33051253d3dff4bef105000000000000005f9250daea9e7b78d7d871cbed628a6da153bef11f506d91a8524dc5a87e10ce5cb7cfab2953270f9c13993633b83d7ef0968f81dc65c73a5f52f329b07d77cda7", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) write$rfkill(r4, &(0x7f0000000280)={0x0, 0x2, 0x2}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20140600600001439170535156895347d51393f0e786c713"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1}, 0x40) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000180)=0x101) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) 4m49.560059523s ago: executing program 7 (id=3015): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) (fail_nth: 7) 4m49.13520672s ago: executing program 7 (id=3017): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x100, 0x6, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_sample={0xc8, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "7540328a81220054530cf364b2f8e60d08f4dc7a7effbe542223f345298387fce82240545da41cb94fc557f62451c4a93857bce1276206966ac89b36ef3e65570c5012a660fa112d4e78564af7dfb9fcb7954c944397c5d7a418ee87ea0c90afe50a6232ebe5bba0986bc2f4097e684ddccd6c75dc203b2d7dbf481d62265992c648a0149139e17ffe53d02a31f0d25166d2defb4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x16c}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioprio_get$pid(0x2, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x283}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x50}}, 0x4004010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x9) 4m48.292046025s ago: executing program 7 (id=3025): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4002000) (async) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)="380101", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 4m47.330452379s ago: executing program 50 (id=3025): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4002000) (async) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)="380101", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 4m20.068146807s ago: executing program 51 (id=3079): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x1a8, 0x250, 0xffffffff, 0x1a8, 0x250, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, &(0x7f0000000740), {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x56}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e20}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x2, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @empty, @gre_key=0x2, @icmp_id=0x64}}}}, {{@ip={@multicast2, @loopback, 0xffffff00, 0x0, 'ipvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x22}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xe, @local, @dev={0xac, 0x14, 0x14, 0x12}, @port=0x4e22, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x1c0, 0x1f8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vlan0\x00', {0xf33, 0xfff, 0x10, 0x1, 0x2, 0x4, 0xfffffff0, 0x40, 0x78}, {0x4e18827c}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast2, @private=0xa010101, @port=0x4e22, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000034d, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) clock_getres(0x4, &(0x7f0000000180)) write$cgroup_devices(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="05e17fac6fb087bef24ba0834acb7317d843b826340fd737a85c965a6fc9d4e13ac0442d02", @ANYRES32=r3], 0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r7 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0xe, 0x1, {0x22, 0xe0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x0, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xe6, 0x7, 0x9}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x1, 0x8, 0x9, 0x9, 0x1}, 0x29, &(0x7f00000002c0)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x1, 0x6, 0xfffa, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x6, 0xe}, @wireless={0xb, 0x10, 0x1, 0x5, 0x10, 0x51, 0x6, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x30, 0x0, 0x3, 0x3}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x449}}, {0x92, &(0x7f00000003c0)=@string={0x92, 0x3, "637892c60c39fb28dc974534a5a2dc6baadfb31b7f8b07931c062abd79a03005009e04f20a569dbd09102ef2189ba60615336865ec4e28696dfd4f99543be732b473e55d40d115f20fae598285b75a68e7903a92027d6f250c7c042ea77bb8658ca6ba7e9de7f2e19ef4730aa29df3deb4a58dd3a6b868a2991b2182722a640d1360d30e782bb50fb1768f4324640e52"}}, {0xe9, &(0x7f0000000480)=@string={0xe9, 0x3, "1ce697f49a27dad5ac922a44c03fa98929641b63f06d0103e72b81c08408941aa784be106477a52885d9a2e543f7879f9c7b9094fc1f6f4c8577c96337ecc1bc530df639500b4c004a5061199b202aa56945e78957e110a067ca1b91e2c952130fa19ebb99998f84dbe50c440972fc285ba8f97d6bec5d6f7b39139e521ef236babf20805c2409994314c36ebf0eae9c184aa4402356f342763d04cced4356a1e2719af87d8218a233dc57cf4163ec7db277917661719e061d912ea2ffe51e52c745b7fe85c064b925d6ac9f9bf7ddc569ff21ec105bcfd397faed6ab60244c2e714102453bdc7"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) dup2(r8, r9) 4m10.135620599s ago: executing program 52 (id=3100): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120001000000000904"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x4a, 0xff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000680)=""/184, 0xc2}, {&(0x7f0000000500)=""/138}], 0x10000000000001c7) 4m9.196796033s ago: executing program 53 (id=3104): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) (async) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000d80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={0x0, 0x0, r6}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50004}, 0x80) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0500000058"], 0xffdd) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x400, 0x9, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r12) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r16, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x40, r13, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x40}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r10, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 4m7.272778698s ago: executing program 6 (id=3109): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0xff, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x300, 0x0, 0x4, 0x8}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc601000070005000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a80002000000000000850806", 0xffffffffffffff9a, 0x20000020, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x10, 0x6, @link_local}, 0x14) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="04a142522d9776", 0x7}], 0x2) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000c4e8a79ce4eb41"], 0x7c}}, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'nr0\x00'}) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES64=r4], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x14801) 4m6.938637669s ago: executing program 54 (id=3110): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="02d5e10dfea20326d4f08abc3cab5c7d7fb05ad677f4310558babe391b4b9429fdb8e8e4e44acae1772f5459381acc6f95a116d0d164f0adbe5f13021fa8063cd608"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02e90000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02020000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="04f200000000000008000000", @ANYRES32=0xee01, @ANYBLOB="10000000000000002000000000000000"], 0x24, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getpeername$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000800)=0x10) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000200)=""/117, &(0x7f0000000080)=0x75) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000002440)={'#! ', '', [], 0xa, '\\'}, 0x5) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000300)='net/tcp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r5 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000000c0)=[r5, r5], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m3.584329657s ago: executing program 6 (id=3112): r0 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x4, 'I'}) 4m3.316038618s ago: executing program 6 (id=3113): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) (async) 4m0.221684235s ago: executing program 6 (id=3114): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000080)='./file1\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1218024, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESHEX=0x0]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003180)={0x2020}, 0x2020) 4m0.071746444s ago: executing program 6 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003800)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)="9583554208891f1625a3629693f2c4a9b2f60ae01ce1cc2995a7b69541a3901eb101fe9710b3e7ce0b668191af99b18f4b0ce3d3277f0254c9bd518cde3707ffa46dde3e5efc160f4ca11f767e854bcba9ca045ba23130ae8c0eb7e29db66a6d018d5625a82ba341f99e5cda0c8d7c2967ba78c1b315ec78a34f25c52698851d25a7dbc4da56aea40f9fbbe51e936dc9ebeffc7452ba59902af5d1e337c8edabd5408405a682dbc629faadf8441a7184666b35b51677c75420b5eca4f11fd8914b4a84f0d68ae9c6eaa9b94cac0aeeab6c6706e492a1e2f7503a8b619b", 0xef}, {&(0x7f00000016c0)="8835d86bd512c7b2cd33499c4d0a8812ea3bde03d15af57470ac213ace781753c132b17aea799c582b4fef8cea45b0", 0x2f}, {&(0x7f00000003c0)="fe0159a573e7ac1bd146165f7bb4f22b5996e382227eff54bb7bbb996ae3a330f1ef4137c51a3e0435c5401df489874b441851ee7a4d805c2012ea0762e31ee97a64f5b76b26f170e487c187ad4f011d84464a850f056e873544df37fb636de55fb8d1661b55eeefbafc2b2eb867a07af08fcd5cca0b9bff14521470bd7292e9167d45df4fd0569e736e165c6e8a05532ea31d50c2f35b77eb5e87516f5cb59f87fa7c53894a47f225e9a57004522397b5ed222d9b9484b0d89c945cc7c1fcacb1947c49b97bd4c11401d9a3ae62a880d76f3ec60eecb072", 0xd8}], 0x3, &(0x7f0000001580)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}], 0x20}}, {{&(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="9343fd3c1f2901a76ab30ca7b95af5c191d4e145ad54ae472de5af493f861740432560a17eb5d65f346ddc289a3c4884adf1c39aa2bb8212e9", 0x39}], 0x1, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, 0xffffffffffffffff]}}], 0xd0, 0x4000001}}], 0x2, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000003800)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)="9583554208891f1625a3629693f2c4a9b2f60ae01ce1cc2995a7b69541a3901eb101fe9710b3e7ce0b668191af99b18f4b0ce3d3277f0254c9bd518cde3707ffa46dde3e5efc160f4ca11f767e854bcba9ca045ba23130ae8c0eb7e29db66a6d018d5625a82ba341f99e5cda0c8d7c2967ba78c1b315ec78a34f25c52698851d25a7dbc4da56aea40f9fbbe51e936dc9ebeffc7452ba59902af5d1e337c8edabd5408405a682dbc629faadf8441a7184666b35b51677c75420b5eca4f11fd8914b4a84f0d68ae9c6eaa9b94cac0aeeab6c6706e492a1e2f7503a8b619b", 0xef}, {&(0x7f00000016c0)="8835d86bd512c7b2cd33499c4d0a8812ea3bde03d15af57470ac213ace781753c132b17aea799c582b4fef8cea45b0", 0x2f}, {&(0x7f00000003c0)="fe0159a573e7ac1bd146165f7bb4f22b5996e382227eff54bb7bbb996ae3a330f1ef4137c51a3e0435c5401df489874b441851ee7a4d805c2012ea0762e31ee97a64f5b76b26f170e487c187ad4f011d84464a850f056e873544df37fb636de55fb8d1661b55eeefbafc2b2eb867a07af08fcd5cca0b9bff14521470bd7292e9167d45df4fd0569e736e165c6e8a05532ea31d50c2f35b77eb5e87516f5cb59f87fa7c53894a47f225e9a57004522397b5ed222d9b9484b0d89c945cc7c1fcacb1947c49b97bd4c11401d9a3ae62a880d76f3ec60eecb072", 0xd8}], 0x3, &(0x7f0000001580)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}], 0x20}}, {{&(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="9343fd3c1f2901a76ab30ca7b95af5c191d4e145ad54ae472de5af493f861740432560a17eb5d65f346ddc289a3c4884adf1c39aa2bb8212e9", 0x39}], 0x1, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, 0xffffffffffffffff]}}], 0xd0, 0x4000001}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r5, 0x0, 0x0) (async) write$binfmt_script(r5, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYBLOB="1d35af6e1bdd455136a9a31064ded822dabbae12cbfcbb3671375477d30ef7672d4cb18933e04e396c8c0ddafacd3ed44ec045d3595cd0970b2bf3460b8ccabce214d10ab97ad0e81db9c79119a8d8f29fe2d99cca2b33bb1db9db4c6792f70e0ce8f3f9b1e267c5fea909bafadd457a02e72fea23d6b90835b9425f808d6b5b2103d3ffa7e0d95b8f0e1fffd026b4b356424dd510a4314ba6fe8cd53967026c9d36782e3670c9d98b1a2cbb4901810767d99f7e7a8a133ae37c41047dd1281317bf16ace8ab6bfdbae8b28dd58dfd1f776d1cf4a77fd762a6d991d7220df533da956c07bfea44f5057a6f31feeb137a52fe54cee8ba4b50dc728fdcc6db61432d2f4bd8756f1b3c9357b33d1cc024d608cba1943adcb01a88d1826d6d83e021ca1dc055dfad4bc77cf822b7728a99a19de44394d56af655a4b90a469fd0d1911fbeec7548be4feea8b605bfca42b7da5cd0465aeae32ce7ac27b271cb1c2589f35d104cf9338ab80f901cc90c1887f68a934338af4cef7b87c06a692b4fce28027eb0cb2e2d3a67b8d96355b7c1825fb5afdadec960ff15731182e1d7f242ea2b052b167ab04ddf5d041b6458d1e0ecda11545c5e889959fbcbb863e419e73f717023295da1b428723239c2a5264b7f451bce2e2790140d057d9d944fad693c19197f26b210e75cef3cfcd9f3d708014f1ec1d57672f01556d9f66b6e7d4aa7a28f9594763634fe8cf65092bedcd4cee74f94a167ee244337f9a74b3ba7f2e01d98bb3d06fea1eac16ca8278088cb967397b1165f4d8f3b9c5bac5d3f190c9eaaeb725a8a8d9545dbdb978d798eabc250e3d5c7dae30ab8f66c6428b322b7d50f0c3f6238303562904f371650a33fff45a16fdc49b56afbef6308f0d7037fb5433b1c7718fe855b07959a64376a231ce947520a27fec54693ac1f6fe2827e657486ba94599a491dcf3ba39c8aafe5e1cc04a1f642ae6b6a99395183f64fe0edd5ce0a053fc64e97020585b2412a93e926a05a46ff16aae9e1b592b94f11826d83181a750e01eca41c257d6ebb0360bf7f66ef90cae45c8e5a7b113641f643a537c84cf846404b7b3083953f6df084b180420e0f1f8a70187bcefacd64e7f0eb8dfefb7c4cd3ebde2ce9877cd838c6694d3a8d63bcdd6047c45344cb3576bba52bdf9f7000a34395b50c8dab4952945e9cffba5a14d5de71b76ab75e69dbd2d8f19cbb4b37f61f9e10a9a981e8d7f8c0a0b0a17a3ee94abd3413bda59a30c5091d06f64e89957ce7f3121b7b7a71a41d9986cff2e20f53291512db3a3508fb42dad6bd9bc877ec6dfd996ce9b29a5cda35bae1a5778582f54581ac6fb8af39d83edd519a29cc667bfbb6025d9b7e466a811806ba512e42d6576d6eb10110529668d76c88743a7e62c3440a4a7bd270381c5df7e4d50e1660b59e065460fded8cc5aa7c694018c3b99376e0690722e21eb78b24ab80df994747e8e77959542ff521a36b6bb1d3b2e24bb590a0f4af6735075c2c230d61e0f15cc97ed62a4275df83cd604073a43a4f83c02d38a23d770ac4edb515e3f1b99a6eac78fb2893f936ee3293309148d46a6808fd763a3ea9b927863d23395c395797b8f5e428dab716595ceda778e0d30c2adc3b3e2d65c639a1ce1d559c18d01943a06f5a95870f4f080ce05a8077542e05ac9f54c9e0ca4c26b09d977ed32fe2d962c11f0b6a6f6be7751c19d5ace712457c98fc12f7ae7f7aaeb99b5094c756de04a6da611a3389a69e901eb8d78a496bf2d1a61b252c3bddbbe194873980120fe2b4edccf937e4bed7f1517f1e2be69b593a900445deba9066a1be18ac835df2e4f9d7b9e70fb7ecc2906372ce769b4ccd9b29a3ec3e56967bea6b825bbd9397dd6fe0b1771cea4e22d23a24fa05fc16d9373ada8b02f446725d2b24cf3294cb95f66e2ee6e3aed311e5fb552e6ce91d04ebe5ebad447a79fc42b2bb01604f3962d6625d2a2a37b7220289f6253a65411e35cd1def440550e7bfaa85d828975f6ea771b4e80af219403f1df9dfae8625d04cb8ad29e6ab4ec366f52f5ee90b99bd0b092f9bb9bce8e2fcd58e9e71408c83e3aaf7042b0f1b88ef5b021f6a1b260221322dd801cb8671fc4331cc7cbb69fa7f204b0637cd107590722e0c019f5c462c07ae176806119a56aa0b73a77eab7bcc678728d46d9fa07d69d60114706748c8f3403d1e1d98e201cb8a7e277e13f5429555005290d0f27de292b4a5ce08bb7e9d39f683a72d03045ea600be80d8a227eab222af39484507a8483b5abb9b1d2d9837c717c79fc2dc9e43e889c60bacfffe9111049b3af8bc65dbee76b3d2047d453a1ba3651ee468f3866de4ac05c903ca11c5603193e3450fead716972fbff55f1093cec7d3b127334fbf28ab588ca649ae2cf3cfdfce55220eb37a1c329dcb754ca760d4dee2f4f73e03c9511496334547d955e14225053532c8f508f881680b84af1a856b092f673bd62b94f862404e97f311a39aa3c7995c01e5bf5bd85414a85b5540d9f1cf11ea823a064cfb9af6e879638eb7af32d47d3a5680e06d9bd8d2f693bbe2bbb95216be1459edff44dbebeebd99cb527d515f52d50683b9cfa3af8989f82f611135b91cfe10c0da619ac3653160620e978b982712ce628d90f3e3ea076e113a9686c77421f614d6ae31de1682a82e4081f44ac6457baa0583b9e6a0c9f05dcb5c2f34528ac3816d2d213279713ae10950ea4f43017c8974a9b4422eafae54661e6a0af0d42c7167f9cfea1288143a31dd4c028254f4414ffbd52f92dbc7e0c4caab517b9c97211e83b7239022d9d12095aff99f5302b4eaf8917071100d0345affc5b6c2e36272d4f85fbc9b46b6c2ab4b540636e8b039fd3f537a2e52be3d9c1c0790a880b90a891013e8e07a40440e6ff6fd48ed3c35705ca91a1364c70b385c173ee7be304c31792dcfe05af44d216bb7280da3a5c0f3271b4edba440ac895ae1edc0d3e0003da1aaae756996ebfd33f41bbbc5a56ede110b12b6c43fbb8b9a2ff3fa5be492ff5171bb757a60e8ea46d87dbe5893eddc9ee6ffd331b8a2f0b0b7372455871ed9ad9b938319ae3daadefe3d920927eff0b6717b5209e3de567f6ea0dc4d91fb15e5cd7f168f8f45b0e66a665ab6f4a9e00319701d927d716cf20348c4860a0404d8ce6342d15bf9d2aa699c72f6e9c9e63bed2c6f640be39131b1dde4b58cbb8b50a56d0a3a4f049559ad371045df61c8d5f19ca91871d935e0374690fc618aae982212a71c5fa39fbcf74f327baa95b1ddea89e63e586f83824033826a26af79d4ca4e682787276e9b78968f773646ccf9c41f68370b9733a52929e15d29d9d5eca65c59054e7d161f2b0049b691755188276ff28308a3ed0bec27cc10856f1e3c98915ba23f32e8d36dd56bf852be507c70daf733a62c7e1ba2c9b35d28983b9b5dd2d96ff6d08816b5e4878c81240914a63423060fbf510670be1eae16de09acecc491683add470ff1dfcdb2767afa44246de5f7a338be1d5dac85bbf45f8d0de471aa90768580b1ae77908f36524fa342db0258be01ccc5ef8238ab0dccabf95374401d74a0e23625f1f5ad4cd756df739067ff70a0fb45f8aa79e75c5f0eb7772a1decbb9fadf6186c95d5016137f1914fcf15289c4e44d4b108a48d92c13406eca7834051ca732c3563bdb8c63880dbeb4f386bd22724424b79f1fa1b4f2ca65f662ef9b6d287ab5002918727092956c4bf1732ea892dafc380f2c11a85656107da32c70713d40925050845f5bbc756bc0622bd779ef00255839c3494278e4c5125eb70c7983533b06d692e1bbf56da29771a0c703b7a0476c8679ccec5b3b32badc9f20ce355122c73c40ce4ef04bfa398c113b66776f3ec3bb25565cc6c0fa9e856e09d7f869b1bf519a9d0fe740dc7b35343773647e8c2dd279e0fffeb36c5f4a08668e0baf3818b609b0e831d74a58e23ebcb1050e7023f87a852bd244e9a2ff735219755bc43516e814c62283784bc8b6e2881b14edce29fe9164a0664d4211b1efb36b7d147a7f27e73cebe607640b366d1837c5100eaf0793426edfde6158e4d012bd45b62815963b2e130b94f77e7f83f9719de3c4c741c25bf3b4bfde10ebad2a7806cd24f3b8872f87fff573622a24a9964079b8f3bb7cfda8605ced38d5a1c03078691dcc9e3019dfbada4883172b47cb16f150d8732f3f855a3233ec597229f567a4e3d59dcee46fd13a5aea67ddf18df8cee4d09232b2187a61b45d8040c99d54c5fe48e60b5e23d46f6dd8e835ea912404e792db1e56c4c46e727aa23cb9dfc3c705f6e4ba714a61f59dbf45fe77f6169122fa23e94ab7fe2060db8f132db1230a4b4b60292a6e1823481d32ff34ee502320f55ce1e5a56a9d2253310feea2028ef5c28e228b98cd1672cef2cdbb1263a19f2b5cf1a6d2232a083c5545917b97e46be37c7d0039a8e55e5863f3847247ed549eda8727a585ac73c33779635bf7664115dd55427407b0b1309ab09177c417586ccce59b6ff5ca6da86746ccdb5a97b493801e040b66154f73f6f714055530093c6d5222e345b13d381f8554c180161b694be4c2d4f2a624a71a020403f2a0b30fe746253a7f4ede875bd81b321f481e6930edee27833ac3e034f930c9c3adffc292298342e9e6ce25e561b93ecc2bdb79739613c3675be01342a6f359262f4d7ec2d115ac7c1bd23ce01434c918decd63c872da96b137ad7217f68b9df0e6c671a1bcf0eb68b6a9b62609f79da01075bb936bc82681e5d2568ba5736d2f2f606ea28e203e052c607b3581d86b4b7c58a8db45237e1d7b0c46f8074b9febbbdde569a84f45224be5d1aa7c69e0367d043db2a0a9aa1ed1752aa6c0947748c68f3fa742f5a8c24ac262204e1b0f8b3e967f5309d081765ad6a416807e92eb6947bb27c28de4e9c76e344409b459bb7e45a0789c652d783c2fbcbb19f6f1a545dd5d2ba7d77694d1b70f54457a0bd116946c9716cd252ff3b108ac046e5cabd83cd9e52d954f8370739882f52aa933e0799df2ab083e1c326ae5502c2ccf2f1d034ea8b31c6ef69a4739856b9b5bfe0a04ea4da640e7e7d705391ad2a12c97fcae5f957b8a54f766942db3e093e063ef2fac7cffe0c45bd68f91ec109a1ca287a250d9e9308c94f3607593448436343425452814d88234a2eca679ac77effc6e767b9225fc219e7d579c5a26b96eaa37063d0f941768696b6817d0df6bba035773601e974513484125a739946397053d891e6233dac2bf3419b52fdb607eb02b6af371fadcf4ab7e962ceaa7fc1676564cc43827fc35ca481fd128c87bfc470f1c1f279f42ebdaecff67351e74ee58e65abbb26e1bdf26450251bfe5bc3e222a8260513285c3ef9d9b194f79e0c9f3606cbcf8ea38fc64d3e46a9096fa7fd93d1de7ef158f4def596a8a6ba4eeade64b864f336a880f141a41623b8a6f8dfcb21aeb3172e0c036c55e61123504c175b566de4d84a30e8fbb47c827e3aa568d62b1c1d50041caab29fb74f3a64e67487d0016e7ecac97e87407a21b879eab6582b3e7163ec1549d07dfccbaae7590cecad13fee6cbbae584bf06f92e5c3a95570a8a8fa007f801f12228e20c87c0bca781206cce7bdc6f91a97b04cad0293c766ac2bac8372e0ef1faf4e360847acfa08d345389478f96fb8c58f333547e7d1543cb66d886d1f81af19ca4d92a9b27a4b4dcfc0d14a60bd5016a528ca96bdb5e82602fea816de29e9a822a0daf4487db9aad66a22b4fc1dc641b29a", @ANYBLOB="000000000700000000000000000000007287da08eb73e144"], 0x48}}, 0x0) sendmsg$can_bcm(r6, 0x0, 0x0) r7 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, 0x0, 0x4) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, 0x0) 3m58.323977512s ago: executing program 6 (id=3116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x1504bffbefa2ea4, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x40010, 0xffffffffffffffff, 0x8871b000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000040)=0xd, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/86, &(0x7f0000000000)=0x56) 3m58.07670339s ago: executing program 55 (id=3116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x1504bffbefa2ea4, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x40010, 0xffffffffffffffff, 0x8871b000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000040)=0xd, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/86, &(0x7f0000000000)=0x56) 3m35.826587346s ago: executing program 1 (id=3147): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) r3 = dup(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x96e4, 0x9, 0x8, 0x0, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x5, @void, @value, @void, @value}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x0, 0x8, 0x3, 0x9}, {0x4, 0x7, 0x5, 0xa54}, {0x337, 0x4, 0xb, 0x7}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 3m35.507958051s ago: executing program 1 (id=3150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001240)={{0x1, 0x0, 0x0, 0xee00, 0x0, 0x71, 0x66c0}, 0xfffffffc, 0x10001, 0x4, 0x967, 0x0, 0x0, 0x80}) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/94, 0x5abc}) 3m35.093960878s ago: executing program 1 (id=3153): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x100, 0x4) close(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x1}, 0x20) sendmmsg$sock(r0, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="65cf67f143783dc65bffba747d1eee9293ee3d1f9f4b97353cce2c7b924d849c4d983536da63f4b30a3c4b78fd92c9cdb1b49fafa5e3738c2d94f6aeb0e17851995a4f03c35e1ae322c1e2940ce49c496fd1d359ea34b722ae3bc08a6029202893", 0x61}, {&(0x7f00000001c0)="318f0b177fa38b3e557fd5ef9ab88a426d90114098c18155fea46170f96e01bd3860b0b6d33cbc3ad631434724a9f292913b767c82bbcfa2bb140f41451a97c5f5b75d1e7793ba4ae85f1fa3e613cf91cb889365118d39d62052b6db72c2da0f49e4595d8845febca20aa349f6ff04f5440952020ec496ad11a7", 0x7a}, {0xfffffffffffffffd}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="9d5a8d84d664db83bbd8bbbd01a2894f91a4dc622916079b78449ad99d909053cf65da927d4679b334641017469b8afdd37e762d4fe39b860b642984ac4ea6e457f9bb065ecd841d2e2ce52ebc4f990ca6bf456ccc47c969fffcd609a21c9eebe7f6c1e87b7a88529f85a2c46804d90182eae9de0f888c63e0a5746d77ee165d714aa4855e08ba6a73407582d49d70764990d9e2de7ad2096f50fc6241af45584e1c1ec17b01e8cf852691f1f141679a0af4a5917384586937a1d68d7a813942c886df44ef784241bd52c9165af6ff465ffb05c7918edfc2e9f92459eaece2386221b1df2e38b17dea93858bd7f86aa22a09", 0xf2}, {&(0x7f0000000440)="11e96a84", 0x4}], 0x6, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x14d}}, @mark={{0x14, 0x1, 0x24, 0x5315}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xd9d}}], 0x60}}, {{&(0x7f0000000580)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)="a45fe49bee6ef78ed3b38955b7c6f2b85e650d1c62cf8bd7299943ae6ecccea24eabda9c030d086d911bcb40d32d9aa6f495c1170a70515ad2101e76ac398c63112c76813667939720e07a166a6197635b5b63d33a974c3a928a90fd880e111ec9edd5ce31c94259d068ef50dd71f3fc9eeb418dc1880e1d4d5619c233812fa6e8168bc7", 0x84}], 0x1, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x60}}], 0x2, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000880)={0x16, 0x98, 0xfa00, {&(0x7f0000000840), 0x1, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0xffffffff, @private2, 0x7000000}}}, 0xa0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000009c0)=@userptr={0x3, 0x8, 0x4, 0x1, 0x52, {r3, r4/1000+10000}, {0x3, 0xc, 0x2, 0xa, 0x7, 0x1, "55f9f696"}, 0x7, 0x2, {&(0x7f0000000980)}, 0x7, 0x0, r1}) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x78, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x38c, 0x6, 0x1, {0x22, 0xc60}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xa6, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x40, 0x4}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x250, 0x3, 0x10, 0x4, 0xff, 0x7}, 0x77, &(0x7f0000000ac0)={0x5, 0xf, 0x77, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x3, 0x5}, @generic={0x68, 0x10, 0xa, "f3c9cc4ef9f0377b4d261efad6389749ff5e6378804a4103372116e4b0d5353d881f4463595ed773edf593e6057418199b6c2133928e16c4e152fb1c8c430c0b96d8f9d4301bdbaafa72cdcf6e7c9b7c81bf0a4280c0d4aafc5120695b866f4a3ba88c61a4"}]}, 0x6, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1407}}, {0x40, &(0x7f0000000bc0)=@string={0x40, 0x3, "27e1423f68031940b522c95cb5f64be8a1e8a5c300295839b0fa075043b4440309c047da27215c14f95d71fc4c9e34f5d0ca7226151fe54d18d8a341bddc"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1c01}}, {0x2c, &(0x7f0000000c80)=@string={0x2c, 0x3, "43369aa10af491b422ef5a861d62f21a308048e0cdaaa0cc49a72db5fdcd89675abe8ee13cc97d383496"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000ec0)={0x24, &(0x7f0000000d40)={0x0, 0x11, 0x95, {0x95, 0x20, "269d8624366b504fbe32358dabc0b89b557f93d36d4a336264f14e909be0396ee7db135baadbc433fd21bc9f477bd5a08192f5010b6e95351e9d3a0711acb7101323ec4b3575fe27da7c4b3986f5a9ac206c2118e376f2fcde623cae6334dce856eb00ece3f8a8cdd504820d4dad9f349e221c07adfe49f59bf76b966945ddc511c1ee74d5c93c3dd33d373a5d67d6e87ca5de"}}, &(0x7f0000000e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000e40)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x9, "05d208d8"}, @global=@item_012={0x1, 0x1, 0x2, "1c"}, @local=@item_012={0x0, 0x2, 0xa}, @main=@item_012={0x1, 0x0, 0x9, "b5"}]}}, &(0x7f0000000e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x23d}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f00)={0x40, 0x17, 0xc3, "91fa462fc426df904e16fdcec365568e0b64e5e779f3e3ce4711744230f4f03774f9bb501cc69cd4ea26a2c4167812a4962f840b9987cebdb01e44c8015fd47a4edcb90a5eac3ea5ba9c61c9bde6d7e103ffb2136f5d1499065d30252245fd811c117447efed05b308e6149ae88ffdff2d22594435dd0879bf76fa195d5893309d11f7b59ad3f862934061d63542f01a1abeb285d9b74ad5cce398f881f47a9af3dddca06b84b004b1fef9a4500539b71c375a60804346f440cfbdadc0b99639d0e01a"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001080)={0x20, 0x1, 0x57, "29427a05e57273f38a38bc9fbaba16b3f72028012ef6acd4f44a998090a31dd2d4fdf67637b157c93cb9a75bcd1a48abd9313e221f3db3f40e9f72e9f56d8e82ee0f3f8d35222c2e830ccd98368b6badf1b2fec01d35a0"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x9}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001180)) listen(r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000001340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001380)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001480)=0xe8) mount$9p_fd(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x400, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@posixacl}, {@access_uid={'access', 0x3d, r8}}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x37, 0x36, 0x37, 0x35, 0x30, 0x65], 0x2d, [0x7, 0x0, 0x34, 0x38], 0x2d, [0x52, 0x63, 0x66, 0x32], 0x2d, [0x36, 0x35, 0x53, 0x64], 0x2d, [0x4, 0x37, 0x63, 0x30, 0x32, 0x61, 0x31, 0x64]}}}, {@euid_lt={'euid<', r10}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@audit}, {@subj_user={'subj_user', 0x3d, '\']()-(Z\xb3%\\'}}]}}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000001600)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1c, 0xd, &(0x7f0000001640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000016c0)='syzkaller\x00', 0x3, 0x4d, &(0x7f0000001700)=""/77, 0x41100, 0x8, '\x00', r9, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r1, 0x6, &(0x7f0000001800)=[0x1], &(0x7f0000001840)=[{0x2, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x0, 0x3}, {0x4, 0x2, 0x8, 0xb}, {0x0, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x10, 0x2}], 0x10, 0x2, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001980)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={&(0x7f0000001b80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_ext={0x1c, 0x18, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x8, 0x7, 0x10}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x4, 0x101, 0xfff}, 0x10, 0x10e27, r1, 0x7, &(0x7f0000001c00)=[r12, r1, r12, r12, r14, r12], &(0x7f0000001c40)=[{0x3, 0x5, 0x5}, {0x4, 0x4, 0x6, 0x9}, {0x0, 0x5, 0xb}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x1, 0x0, 0x3}, {0x0, 0x4, 0x7, 0xb}, {0x0, 0x3, 0x1, 0x7}], 0x10, 0x10001, @void, @value}, 0x94) execveat$binfmt(r12, 0x0, &(0x7f0000001dc0)={[&(0x7f0000001d80)='-{\'-%\x00']}, &(0x7f0000001ec0)={[&(0x7f0000001e00)='trans=fd,', &(0x7f0000001e40)='%\x00', &(0x7f0000001e80)='\x00']}, 0xc00) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000001f00)={{0x9, 0x5}, 0x100, './file0\x00'}) socket$inet(0x2, 0x4, 0xcde) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000002040)=0x27) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000020c0)={'sit0\x00', &(0x7f0000002080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x18, 0x4}}) bind$inet6(r13, &(0x7f0000002100)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x2}, 0x1c) 3m33.03199055s ago: executing program 7 (id=3117): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2080018, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) 3m32.831934364s ago: executing program 7 (id=3157): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) (async) dup(0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) sendfile(r1, r1, 0x0, 0x20003) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$ppp(r3, &(0x7f0000000040), 0x0) (async) tee(r3, r2, 0xff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m32.58719241s ago: executing program 8 (id=3162): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x200000}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m32.403413461s ago: executing program 7 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}}, 0x40008) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m30.684384872s ago: executing program 56 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}}, 0x40008) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m30.650500709s ago: executing program 8 (id=3166): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00\"u'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) syz_open_pts(r3, 0x1ca0c2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000001080)=0x1bffffd, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000081"], 0x24}}, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, r6}, 0x38) syz_usb_control_io(r0, 0x0, 0x0) 3m30.647881269s ago: executing program 1 (id=3167): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) (fail_nth: 18) 3m30.085531245s ago: executing program 1 (id=3173): r0 = socket$inet(0x2, 0x2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev}, @timestamp}}}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) listen(r1, 0x7ff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote, 0x4e21, 0x6, 0x4e20, 0x7fff, 0x2, 0xa0, 0x80, 0x0, 0x0, r2}, {0xbe, 0x5, 0x8, 0x1, 0x9, 0x1, 0x4, 0x8}, {0x9, 0x5, 0x7, 0x7}, 0x6, 0x6e6bbf, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x1, 0x0, 0xd8, 0xd01, 0x8, 0x7}}, 0xe8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @empty}}) 3m28.989336947s ago: executing program 1 (id=3176): shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x200, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xdfc, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000002010300000000000000070000070000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c094) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRESHEX=r6, @ANYRESOCT=r0, @ANYBLOB="eb35766dd70b9a2ebc397cab1f265bbb4fc72bdc69dc1f01ba9f978fc07c1e95926d636b6bd4ea5c67b93e3a9af9e062c557b2738a330cf277e9bf95eb2080378774b4449e004944555c8dddf810fbead8c2965bad4b098d55cc9d035b426990c635508fdcb05e1a683ba7c4297c5ef8bdb78f99361300168481abaa6dc4235ab7155014175ec7a418f071ac84c01f6c0daf0057bf1471c5842c3ed584bc4b60c5ce09da8ab7733ded6de8fbcaafecfb25f16d815d5be84e0ec9383b23b5f8ff197b624af492eb862dc73a9668249f5d478e5960e2966e95df6a5cd12df92d29db2a", @ANYRESHEX], 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffd86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22a93aa686d4264daca0"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x1ff) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000004c0)={0xc}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r6) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m28.542735899s ago: executing program 57 (id=3176): shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x200, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xdfc, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000002010300000000000000070000070000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c094) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRESHEX=r6, @ANYRESOCT=r0, @ANYBLOB="eb35766dd70b9a2ebc397cab1f265bbb4fc72bdc69dc1f01ba9f978fc07c1e95926d636b6bd4ea5c67b93e3a9af9e062c557b2738a330cf277e9bf95eb2080378774b4449e004944555c8dddf810fbead8c2965bad4b098d55cc9d035b426990c635508fdcb05e1a683ba7c4297c5ef8bdb78f99361300168481abaa6dc4235ab7155014175ec7a418f071ac84c01f6c0daf0057bf1471c5842c3ed584bc4b60c5ce09da8ab7733ded6de8fbcaafecfb25f16d815d5be84e0ec9383b23b5f8ff197b624af492eb862dc73a9668249f5d478e5960e2966e95df6a5cd12df92d29db2a", @ANYRESHEX], 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffd86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22a93aa686d4264daca0"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x1ff) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000004c0)={0xc}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r6) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m27.846478857s ago: executing program 8 (id=3182): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009000100b53fb783ce"], 0x48}}, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x80001, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="4b743cc442fc352700400000000000000000009500"/40], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd0, &(0x7f0000000180)=0xa4, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 3m27.529675475s ago: executing program 8 (id=3184): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) (fail_nth: 19) 3m27.11080809s ago: executing program 8 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000000001010400000000141a000002000000240001801400fb00e00000010c0002800d00010000000000240102801400018008000100ac14140008000200ac1e00010c00028005000100000000000800074000000000100004800c00028005000200050000005e04c7a2ed888a66bed43fee41927f5d530f5139a23bb41001d47e00c508624fa55043c0c53bd9b0d8cd1e9c5dcc8af63db04992b8b435c839f85db19abdd71e13b13acd4a525bbe57a0f573c7d3e92b151486b60e80310e2ab47fb0dc698e73a4c04402eb2b705828881e26927ae5ee3597bbc43f4b5acd03f1e41a0cecaa345b00"/245], 0x74}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) r2 = socket(0x28, 0x803, 0x0) (async, rerun: 32) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000000)) (async, rerun: 32) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) ioctl$EVIOCGBITSND(r3, 0x80004519, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xf, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r5, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="4f92f518921b756b4a3179b0b7469238a289f3b92f139356516154e961357457916331603269088816a7380b4877eb5e47c6ad60b5e3e67c654bb48090894a3724a858a0883b0338ffbe9cfeb5079ed96a3713bbc5e12dbde92eb977d027c6420fdc7ae789f9c7ad31ddb0d262af5976cd2d532d5a50dd69b11d4be96ef61c643a99c56eb8890e6e8badfeee240731972fce53406bcbd282f9f736a0cd69d6e76bcda2628baf697acff1d6f4000a6e98dc88f913489a69a550cf14b41e69980797d312", 0xc3) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) (async) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m26.005121002s ago: executing program 8 (id=3189): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4c) (async) r1 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r3, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) (async, rerun: 32) r6 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x2, @mcast2}}, 0x5b) (async, rerun: 32) write$smackfs_labels_list(r1, 0x0, 0x10) (rerun: 32) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180100005600010600000000000000000700cfae00000000"], 0x18}], 0x1}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (rerun: 64) 3m25.667876618s ago: executing program 58 (id=3189): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4c) (async) r1 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r3, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) (async, rerun: 32) r6 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x2, @mcast2}}, 0x5b) (async, rerun: 32) write$smackfs_labels_list(r1, 0x0, 0x10) (rerun: 32) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180100005600010600000000000000000700cfae00000000"], 0x18}], 0x1}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (rerun: 64) 3m0.903923703s ago: executing program 0 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cde13e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="8528"], 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf7e400000000500050001000000080007000800000008000700340000003000018008000300010000001400020069703667726530000000000000000000080001008e07f714572fddc3c20a25c8c31eaad5d6690d7f3db5b2700ae5e9527d07a8316c5302bf88bd8b5e0789311c2ae5f0c761b26978eb4ab4bc354c908fc2774dfff83bff70c416dedc90988e74f7dbf5d7d145db1f7b9df33f30c52755bdecb744bbd77115a03d2a45d33eed37d81317ad4a6011196c6e4ef72e1de66b7a3b5a9e6dede02b4c4f44b03b098863823c8b6bb5", @ANYRES32=0x0, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x24008804) 2m57.268802546s ago: executing program 0 (id=3250): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r3, @ANYBLOB="c8002f808c0003800c00050009000000000000000c000500040000000000000060000380080002000300000008000200000000000c0004000203aaaaaaaaaaaa0c0004000202aaaaaaaaaaaa06000100000000000c0004000202aaaaaaaaaaaa06000300a1aa00000800020002000000080002000300000006000100ff7f000005000200000000000800010001000000380003802c0003800c0004000202aaaaaaaaaaaa06000300a2aa00000c000400000300000000000008000200020000000800010000000000"], 0xe4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="64796e2c005ce6240aecde7ae70083893f3061b7743034abe131f8b473c6b23619c89e28a4f988c4d762bc903d0c853c1e3b71b6a1f1b84bb33a3ee573420268a354f1cea0ada345e52f7810d77df54a147cc1479277b1dcaf84a0e983d42fc60e916f43f4a81609376e2dec8a4978ed27ac7c1fb7fdaed36ecd4071ccbad5207fd19b139088b91a651aa7f64076c7452a3b9db376d10ccb4683c94407733907371c4988faeb5f39265f9a0bf366af93e5a6f0da6e37649197b2450f246e1ddd1bac1fdfe795be8cfb92dc77b796c7bd"]) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x4) (async) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007300000001000059050000000000008efd0af400000000000000"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061127c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m56.899984294s ago: executing program 0 (id=3252): r0 = socket(0xa, 0x2, 0x0) write(r0, &(0x7f0000000100)="240000001e005f0014f9f407faac47000a000000010000000000080008000100000000ff", 0x24) 2m56.106486893s ago: executing program 0 (id=3253): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000008000e500000044000000000000000000", @ANYRES32=0x1], 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7fffffffffffffff, 0x100) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa0003, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES8=0x0]) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000012, 0x5d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4), 0x1c) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) 2m55.086339442s ago: executing program 0 (id=3258): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) ustat(0x801, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) (async) ustat(0x801, &(0x7f0000000300)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) (async) 2m54.488918785s ago: executing program 0 (id=3261): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m54.14674093s ago: executing program 59 (id=3261): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12.970635181s ago: executing program 4 (id=3769): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000040001}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x0, 0x10162, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x16, 0x1, 0x0, "610424b66ccef4ba566c4acd3d00e706eb8cace586d84a5000000008ffff00", 0x32315559}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r2, r2}, &(0x7f0000000100)=""/101, 0x65, &(0x7f0000000000)={&(0x7f00000000c0)={'hmac(sha256)\x00'}}) r4 = socket$inet6(0xa, 0x6, 0x200) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=@mangle={'mangle\x00', 0x112, 0x6, 0x970, 0x0, 0x418, 0x718, 0x718, 0x418, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xe0, 0x118, 0x0, {0x5002}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x6, 0xff, 0x6, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff, 0xffff00], [0xff, 0xffffffff, 0xffffff00], 0x1a05, 0x40}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) 9.827747058s ago: executing program 4 (id=3784): r0 = socket$kcm(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)="d10c7907133f80d0665ee8c27bc042abd995db584b71c9a12b0da688aab70431c0797d1b41160b07352e2b55bcf788b1c831fd5b5e2c3bcf6609b83bdcaf952cab1874cdc6b70cc22245be594c925a8a9d23def054796aedb7ed48ad67fff0bb17dc98ce17c892f31dfc16bb4bd7eaa084e3bb4f5ba9d019a0ccb8a6e6ea997acc9cc6dba4fbdb1dcd7dc0c297ec99af9579e98f3f90cf62ba066993dff953a8eca6e55b05631411bf18b08ea0151636ac6caf82d27899989ac6a0277a509bdb1a53f7f9157b5afcce7f85114287664d8cda47ee597770d54dfdd6c9", 0xdc}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000000006a0ad06622b92d626bf100010000000200000035d9b6471d1a8bc0ff6af3d7ce966dcd417d9beed31e80ae84d297294b751aebcfdf44cca6a9df4f2a3496e0c6aaa7a169fcd2345aafeb1812828951ec79bf4100734dad951bfac7d6379e3bb109061b59d23b112e9fdd00b83bd9c6a442b1d752923587ee8df0579b8037423286af8234a2", @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000010000000000000000100000001000000"], 0x50, 0x4048051}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000010", @ANYRES16=r6, @ANYBLOB="0100273d7000fedbdf252700000008000300", @ANYRES32=r8, @ANYBLOB="0a0006005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x44810}, 0x4004040) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r10 = dup(r9) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r10, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 8.790785594s ago: executing program 4 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) splice(r0, &(0x7f0000000280)=0x8000000000000001, r2, &(0x7f0000000300)=0x8, 0x7a, 0xe) (async) splice(r0, &(0x7f0000000280)=0x8000000000000001, r2, &(0x7f0000000300)=0x8, 0x7a, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00002a9b8ab83e9fe3c11d865000000000d95c2dbf1841", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000070000000700cb030f47"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000210001002cbd7000fedbdf2502149402800000000013001f00000000000b003f00000000000c400000000000000006", @ANYRES8=r5, @ANYRESOCT=r1], 0x60}}, 0xc010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000210001002cbd7000fedbdf2502149402800000000013001f00000000000b003f00000000000c400000000000000006", @ANYRES8=r5, @ANYRESOCT=r1], 0x60}}, 0xc010) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x0, 0x2, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0xa0e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000ec69a008cd0c8000c9f0010203010902fc0903020000000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000000c0)={0x20, 0x0, 0x43, "d870a4ab2eb6ee60e72416d0ceb21e687237f49368efe4f9aa6eb07be434bb2f789f01495752298cb3fd254c14ca3b44dbaf5e429736e9176be61a24bf7e78e25a65d5"}, 0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.324584368s ago: executing program 3 (id=3792): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9", @ANYRES8], 0x0}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) setsockopt(r1, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.23027996s ago: executing program 2 (id=3793): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5}}}}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000080007301330000000000950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xb, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5}}}}}]}}]}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000080007301330000000000950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) (async) timer_create(0x0, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) (async) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xb, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 6.644012224s ago: executing program 4 (id=3795): r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x6040000) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000240)={0x1, 0x2, 0x2}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000140)=0x4) 6.643748002s ago: executing program 3 (id=3796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.4822653s ago: executing program 4 (id=3797): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0xfffffc7e, &(0x7f0000001440)={0x0, 0x0, 0x4, "3e89ce77"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.664251861s ago: executing program 3 (id=3798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x8090) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000040)=@ethtool_gfeatures}) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', '', [{0x20, ',+%\\'}, {}, {0x20, '.group/syz1\x00'}, {0x20, 'cgroup.type\x00'}, {0x20, 'threaded\x00'}, {0x20, 'cgroup.type\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, ']'}]}, 0xaf6e) r6 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x50, &(0x7f00000002c0)=0x9, 0x4) 5.425060515s ago: executing program 2 (id=3800): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d10000018"], 0x0, 0xd88c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) (async) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xdba2000) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000180), 0x20000000}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000d00)=0x8000) r6 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffe, 0x0, 0x3011, 0x9, 0x5, 0x4, 0x2, 0x3}}) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x3]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xebb]}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x800}}, './file0\x00'}) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53c], [0xffffffff, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf190, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r10, 0x0) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000}}) (async) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000006480)) 5.10698057s ago: executing program 2 (id=3802): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4532c04512444ba6, 0x4000010, r0, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x2, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}, {@redirect_dir_nofollow}, {@nfs_export_off}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file1\x00', 0x0, 0x7) chdir(&(0x7f00000000c0)='./bus\x00') r6 = creat(&(0x7f0000000440)='./file1\x00', 0x0) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000200ed00000015000000fb1506059a7bca1e43789f135527ce1483aee8de0d"], 0x39400) r7 = openat(r6, &(0x7f0000000280)='./file0\x00', 0x80800, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 4.91215834s ago: executing program 2 (id=3804): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/13, 0xd}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x10000, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0x5421, 0x1000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000008fa000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 3.460070467s ago: executing program 3 (id=3806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x580000a, 0x4010, r1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, &(0x7f0000000340)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}], 0x1, 0x1000000, 0x0, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x21b}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.423233933s ago: executing program 9 (id=3807): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x244a80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xc00000, 0xc, 0x0, 'queue0\x00', 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000140)=""/126, 0x7e}], 0x2}}], 0x2, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="9e685760794f93d5148a96de6f79285dad5de4da19e0a4d207b64f033a3f27c70bc955fd751f", 0x26}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x5, 0x5, 0x4, 0x1, 0x6, {}, {0x0, 0x1, 0x4, 0x36, 0x2, 0x2, "72e93a3f"}, 0x8000, 0x1, {&(0x7f0000000280)=[{0x0, 0x3, {0x400}, 0x4}, {0x754, 0xfff, {0x3680000}, 0x7}]}, 0x8, 0x0, r4}) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 3.143717866s ago: executing program 3 (id=3808): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x0}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 3.056083036s ago: executing program 9 (id=3809): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/99, 0x63}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) 3.055674067s ago: executing program 2 (id=3810): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500000000000000a55595bf8370054a68e5611eb94c88fd8055d45e50", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00010000000500090001000000"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x6]}, @rr={0x7, 0xf, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote, 0xfffffffd}, {@multicast2, 0xb}, {@private=0xa010100}, {@multicast1}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @timestamp={0x44, 0x18, 0xec, 0x0, 0xb, [0x4, 0x5, 0x1, 0x101, 0x6]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000082c0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f282d"], 0xe0}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x1100080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000f, 0x100010, r6, 0x0) r7 = dup(r3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x40, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.993837217s ago: executing program 9 (id=3811): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0x0, 0x1cb}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.859385387s ago: executing program 9 (id=3812): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000080) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r4}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.336038812s ago: executing program 9 (id=3813): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffff9) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioperm(0x0, 0x7, 0x7) (async) poll(0x0, 0x0, 0x7c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 2.021294833s ago: executing program 3 (id=3815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ftruncate(0xffffffffffffffff, 0x3) ptrace(0xffffffffffffffff, 0x0) shmdt(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.936086225s ago: executing program 4 (id=3816): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) write$FUSE_CREATE_OPEN(r1, &(0x7f0000001640)={0xa0}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000280)={0x10}) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x0) 1.822784768s ago: executing program 5 (id=3817): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffd}, 0x0, 0x0, 0x3}, {{@in6=@local}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="530000000700004600dd40edce68510449b8a5038a127412659c6b4b7a45"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x370a0, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 1.721005483s ago: executing program 2 (id=3818): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x121e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x4b30, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) getdents(r1, &(0x7f0000000080)=""/153, 0x99) getdents64(r1, &(0x7f00000001c0)=""/147, 0x93) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES16=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r6, r7, 0x0) listen(r1, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x81, 0xfffffff7}) ioprio_set$pid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x800, 0xb3, 0x3, 0x7}]}) r8 = syz_usb_connect$cdc_ecm(0x0, 0x75, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x0, 0x10, 0x30, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe, 0xc, 0x7, 0x66}, [@ncm={0x6, 0x24, 0x1a, 0x18f2}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @acm={0x4, 0x24, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa4, 0x5, 0x55}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x53, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x83, 0x0, 0x4, 0x8, 0x40}, 0x1a, &(0x7f0000000340)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x80, 0x226e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0xef, 0x7, 0x95}]}, 0x6, [{0x5f, &(0x7f0000000380)=@string={0x5f, 0x3, "1f590cee33a592ddc5061af5cbaacffb09a3ad30f3ca32c1ad10b212b282daa3784816a48a0e464ce7d1f0bf4ebacac745202c8bab2624e003ebf70a2acc84a4571b0a9eddbd395ea03a5e1595597e1bef35fa189bbe01d1da59d5dac7"}}, {0x97, &(0x7f0000000400)=@string={0x97, 0x3, "1436abd117af5696c8ed29e7e986ea8cbe16dc4f2b7932dca38a4ea11373af3043bf0c432c0a29e4ca4fb23534b8eae7394d57b10184c9f5e82a249d1df2066583bda27841d808ba16216f88e0c8fa5a03efcd56fcbcef93e97532e30513877b14a138ed6658d03ad2e862152e441811616e1d431367cd6766a616c6361bd984e913c94777ffb11f6992037e4aa6dd66095801ceab"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x60, &(0x7f0000000500)=@string={0x60, 0x3, "16750891d0397b9b126ea7a89553c702fe72ba1dac20dbf6015fe2ecc49aef5ac64a4ab51d98f990c219b4f84ce1bffe1c7bc49bc96657940ec2293039bfff082b9aa8be6aa5187321456e0a269c6a8b0537e65622c8277e3007874130a7"}}, {0x83, &(0x7f0000000580)=@string={0x83, 0x3, "560e881680ba1d5080d8c1f00a74f0809c9b5ced231841e33a75b8b5cfd3e35193b47b42324f67aa38a41d6000200fb0fc55d146b37bbbb499500805db3cf718acf43547a42181d1fa65aedd13f94c945db12eab4ad04704e79372878cb74e6afc4b5051826612084881642d03c259bcb38d4ac714000982288c467facfa611e71"}}, {0xe9, &(0x7f0000000700)=@string={0xe9, 0x3, "9b271bde7bf5a2373d5fbd4d012bcec8592eaefa595117a58eeb84fc6b04f91e3146043eb1af4ee3e7c730fb11da5e33d4894ba27e10b8b5caafc018518d9bf2ba7b37e75b79508139417e811eeb88e1c152f71c0a5ee3d398bf6e2796a2b976ab445a7e1d1f47e046916a968b5af987f4630b5f9778d9128aab5f43d489c85a054337217c0dda773291c2638602534942682e02928a43caaeec399740266a346f0013d4fac372809619037d1e60a266135253a243ceeae5a4782abb9a338e7f111cf513afe66284f62c2d12c590f34876fbdaa7d52dcc90076561ca0883465aa16610f1117a5b"}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x40, 0x10, 0xb8, {0xb8, 0x11, "f29d7cbfd076d23ee4d3d1dac27a3796e29a6cc97a37aca8900f45021812953da2e27bf07a6ca7d01445cf6ae232dfa0e8ee73cac200b60dc4307a7194b5626b62dbd234ff41b7040e5b3305943ffccedc112e3694a103bf22e2defe22b06b5abe2a924b66638893e1bb8a1f88a98ab0ffc8c629654e0f95850130f2030dcff7bb9afc66c5d69599620bb3f5ea3fdb10fd657cf0f465be5c642524e617fc343e7ddb78811ffbe30c5b1c274f744a42e72ab1d460a67d"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x1c, &(0x7f0000000940)={0x40, 0x18, 0xc9, "c478158858c15ec8df3875ebdc5e80dd625a0db019a33743571de9a3ad823c9bdb11ae66c67cb268c53840818801fc27f5a65f9c85a185a9c64a2ff1c9d8c1fd1bcecb335e7b5ab0f82398b064eef34e0684f18df27e24dae09db62faf8e8fa1101f592d798b75f4df2c0be2d1ff94aa9bc53deed5fbd842f26fea2e0be53ac41c4467c9160db1de9e9877bc2716681cfb1342c08637e87a8440395dec4eda655d733c2adb005ed3a059edcb180c2cbd192ebcb642db15db372e377535fb34cb23837f5699c3b2df41"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}}) 1.572157074s ago: executing program 5 (id=3819): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, 0x0) 1.471060818s ago: executing program 5 (id=3820): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x5004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.303361753s ago: executing program 9 (id=3821): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x930b}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 356.101213ms ago: executing program 5 (id=3822): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0x0, 0x1cb}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 204.001861ms ago: executing program 5 (id=3823): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r4}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x5, 0x7}}}}, 0x11) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev}}}}) 0s ago: executing program 5 (id=3824): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="6ba48bb1fa4c813aceb3b5ffd3133d444d95ed894778e4d795391ece6d9441d5ba0ace26ef8c199bac9774300a640a057919874c26ff6be08e412e0bcd9be8ea297ce64ee9ea968b4288c09dfaa99efcc9b45a8159b33ed51bd34658296cee15ca38c0544d", 0x65}], 0x1}}], 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x0, 0x11, 0x3, {0x3, 0x0, 'T'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): er_driver returned -16 [ 1097.815563][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.868425][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.916535][ T29] audit: type=1326 audit(1730607619.399:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18366 comm="syz.0.3253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e7937e719 code=0x0 [ 1097.939910][T14981] usb 3-1: USB disconnect, device number 119 [ 1098.891566][T18381] vlan2: entered promiscuous mode [ 1098.910158][T18381] vlan2: entered allmulticast mode [ 1098.951107][T18381] vlan0: entered allmulticast mode [ 1098.993482][T18381] veth0_vlan: entered allmulticast mode [ 1098.993623][T14977] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1099.007682][T18381] vlan0: entered promiscuous mode [ 1099.130061][T18381] team0: Port device vlan2 added [ 1099.158017][T14977] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1099.170155][T14977] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 1099.184728][T14977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1099.195048][T14977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1099.205174][T14977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.220106][T14977] usb 3-1: Product: syz [ 1099.230967][T14977] usb 3-1: Manufacturer: syz [ 1099.238828][T14977] usb 3-1: SerialNumber: syz [ 1099.252286][T14977] usb 3-1: config 0 descriptor?? [ 1099.266027][T14977] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 1099.282226][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1099.302324][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1099.313203][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1099.321045][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1099.360983][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 1099.379347][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 1099.414386][T14977] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1099.434731][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1099.442488][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1099.482003][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1099.530561][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 1099.553203][T14977] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1099.591745][T14977] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1099.623500][T14977] usb 3-1: USB disconnect, device number 120 [ 1099.674393][T14977] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1099.700277][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.714151][T14977] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1099.732850][T18390] could not allocate digest TFM handle sha256-asm [ 1099.751917][T14977] keyspan 3-1:0.0: device disconnected [ 1099.918261][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.109883][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.251888][T14977] libceph: connect (1)[c::]:6789 error -101 [ 1100.269905][T14977] libceph: mon0 (1)[c::]:6789 connect error [ 1100.279953][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.293149][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1100.306636][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1100.321129][T18409] syz.2.3264: attempt to access beyond end of device [ 1100.321129][T18409] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1100.345413][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1100.366964][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1100.374485][T18406] ceph: No mds server is up or the cluster is laggy [ 1100.407470][T18409] exFAT-fs (nbd2): unable to read boot sector [ 1100.419057][T18409] exFAT-fs (nbd2): failed to read boot sector [ 1100.425578][T18409] exFAT-fs (nbd2): failed to recognize exfat type [ 1100.492146][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1100.500038][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1100.543565][T14977] libceph: connect (1)[c::]:6789 error -101 [ 1100.550059][T14977] libceph: mon0 (1)[c::]:6789 connect error [ 1101.549538][T14977] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1101.642167][ T61] bridge_slave_1: left allmulticast mode [ 1101.652015][ T61] bridge_slave_1: left promiscuous mode [ 1101.658026][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.677006][ T61] bridge_slave_0: left allmulticast mode [ 1101.842517][T14977] usb 3-1: Using ep0 maxpacket: 16 [ 1101.850263][ T61] bridge_slave_0: left promiscuous mode [ 1101.856330][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.867981][T14977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.880696][T14977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.893675][T14977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.919597][T14977] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 1101.943253][T14977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.001665][T14977] usb 3-1: config 0 descriptor?? [ 1102.605176][T14517] Bluetooth: hci4: command tx timeout [ 1103.343808][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.413941][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.451551][ T61] bond0 (unregistering): Released all slaves [ 1103.481538][T14977] usbhid 3-1:0.0: can't add hid device: -71 [ 1103.498819][T14977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1103.525804][T14977] usb 3-1: USB disconnect, device number 121 [ 1103.973858][T18407] chnl_net:caif_netlink_parms(): no params data found [ 1104.056915][T18444] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1104.371563][T18407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.381201][T18407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.388644][T18407] bridge_slave_0: entered allmulticast mode [ 1104.396688][T18407] bridge_slave_0: entered promiscuous mode [ 1104.406628][T18407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.414167][T18407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.421784][T18407] bridge_slave_1: entered allmulticast mode [ 1104.429400][T18407] bridge_slave_1: entered promiscuous mode [ 1104.440144][ T61] hsr_slave_0: left promiscuous mode [ 1104.473521][T14977] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1104.482993][ T61] hsr_slave_1: left promiscuous mode [ 1104.490386][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.509613][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.631967][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.650466][T14977] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.670412][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.717422][T14517] Bluetooth: hci4: command tx timeout [ 1104.740978][T14977] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.888806][T14977] usb 10-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 1105.025939][T14977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1105.231191][T14977] usb 10-1: SerialNumber: syz [ 1105.254168][ T61] veth1_macvtap: left promiscuous mode [ 1105.264440][ T61] veth0_macvtap: left promiscuous mode [ 1105.270161][ T61] veth1_vlan: left promiscuous mode [ 1105.275709][ T61] veth0_vlan: left promiscuous mode [ 1105.499272][T18449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.612608][T18449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.737867][T14977] usb 10-1: 0:12 : does not exist [ 1105.791625][T14977] usb 10-1: USB disconnect, device number 60 [ 1105.852552][T18481] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3281'. [ 1105.871142][T18481] netlink: 'syz.5.3281': attribute type 1 has an invalid length. [ 1106.833876][T14517] Bluetooth: hci4: command tx timeout [ 1108.709516][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1108.838800][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1108.924713][ T5846] Bluetooth: hci4: command tx timeout [ 1111.125834][T18504] netlink: 'syz.2.3287': attribute type 10 has an invalid length. [ 1111.145446][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.152930][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.186818][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.194039][T18504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.201470][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.208620][T18504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.227106][T18504] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1111.289619][T18407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.340768][T18407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.522020][T18407] team0: Port device team_slave_0 added [ 1111.541174][T18524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3292'. [ 1111.581871][T18524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3292'. [ 1111.597078][T18407] team0: Port device team_slave_1 added [ 1111.620463][T18526] netlink: 'syz.2.3292': attribute type 10 has an invalid length. [ 1111.741813][T18526] team0: Device ipvlan1 failed to register rx_handler [ 1111.763590][T18081] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1111.893372][T18081] usb 5-1: device descriptor read/64, error -71 [ 1111.979097][T18407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.032684][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.117230][T18407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.153794][T18081] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1112.153901][T18407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.202756][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.228748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.238063][T18407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.293449][T18081] usb 5-1: device descriptor read/64, error -71 [ 1112.348255][T18407] hsr_slave_0: entered promiscuous mode [ 1112.361885][T18407] hsr_slave_1: entered promiscuous mode [ 1112.423360][T18407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.445310][T18407] Cannot create hsr debugfs directory [ 1112.583591][T18081] usb usb5-port1: attempt power cycle [ 1113.733128][T18081] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1114.121722][T18081] usb 5-1: device descriptor read/8, error -71 [ 1114.373492][T18081] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1114.456406][T18081] usb 5-1: device descriptor read/8, error -71 [ 1114.574157][T18081] usb usb5-port1: unable to enumerate USB device [ 1114.697677][T18407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1114.724341][T18407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1114.755886][T18407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1114.799095][T18407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1114.986589][T18407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.047129][T18407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.099356][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.106562][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.159969][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.167210][T15177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.568973][T18407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.669986][T18407] veth0_vlan: entered promiscuous mode [ 1115.702928][T18407] veth1_vlan: entered promiscuous mode [ 1115.741839][T18407] veth0_macvtap: entered promiscuous mode [ 1115.754443][T18407] veth1_macvtap: entered promiscuous mode [ 1115.774280][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.785263][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.795458][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.807868][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.820144][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.830720][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.840713][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.851822][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.861733][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.872494][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.882472][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.893239][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.903481][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.916269][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.926325][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.938427][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.948556][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.959213][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.969892][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.980629][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.990559][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.001317][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.012709][T18407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.027390][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.038605][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.048827][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.060393][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.070406][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.080981][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.091195][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.101870][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.111851][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.124350][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.135252][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.145871][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.155815][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.167236][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.177222][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.187815][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.198123][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.208814][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.218815][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.231439][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.241454][T18407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.252184][T18407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.264101][T18407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.277733][T18407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.286902][T18407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.295916][T18407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.305169][T18407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.414039][T15162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.421958][T15162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.450865][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.458139][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.463754][T15163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.472925][T15163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.783935][ T5887] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1116.933335][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 1116.952695][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1116.962074][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.970468][ T5887] usb 4-1: Product: syz [ 1116.974729][ T5887] usb 4-1: Manufacturer: syz [ 1116.979355][ T5887] usb 4-1: SerialNumber: syz [ 1116.986272][ T5887] usb 4-1: config 0 descriptor?? [ 1117.198118][ T5887] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1118.555594][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1118.613186][ T5887] usb write operation failed. (-71) [ 1118.619749][ T5887] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1118.640224][ T5887] dvbdev: DVB: registering new adapter (Terratec H7) [ 1118.647300][ T5887] usb 4-1: media controller created [ 1118.652802][ T5887] usb read operation failed. (-71) [ 1118.658934][ T5887] usb write operation failed. (-71) [ 1118.667532][ T5887] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1118.681798][ T5887] usb 4-1: USB disconnect, device number 39 [ 1119.774609][ T6639] bond0 (unregistering): Released all slaves [ 1119.788557][ T6639] bond1 (unregistering): Released all slaves [ 1119.929655][ T6639] IPVS: stopping backup sync thread 10227 ... [ 1120.218002][ T6639] hsr_slave_0: left promiscuous mode [ 1120.224236][ T6639] hsr_slave_1: left promiscuous mode [ 1120.246512][ T6639] veth1_macvtap: left promiscuous mode [ 1120.252104][ T6639] veth0_macvtap: left promiscuous mode [ 1120.258334][ T6639] veth1_vlan: left promiscuous mode [ 1120.263750][ T6639] veth0_vlan: left promiscuous mode [ 1122.410987][ T6639] IPVS: stop unused estimator thread 0... [ 1143.770906][T18599] netlink: 'syz.9.3307': attribute type 12 has an invalid length. [ 1144.623881][T13338] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1144.773230][T13338] usb 3-1: Using ep0 maxpacket: 16 [ 1144.802839][T13338] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1144.818666][T13338] usb 3-1: config 0 has no interface number 0 [ 1144.838595][T13338] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1144.863600][T13338] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1145.083526][T13338] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1145.874327][T13338] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1145.885997][T13338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.902085][T13338] usb 3-1: Product: syz [ 1145.912289][T13338] usb 3-1: Manufacturer: syz [ 1145.921549][T13338] usb 3-1: SerialNumber: syz [ 1145.928712][T13338] usb 3-1: config 0 descriptor?? [ 1145.934775][T18608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1145.961999][T18608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.204390][T18608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.232286][T18608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.867470][T13338] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1148.303282][T18081] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1148.747471][T13338] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1148.761837][T13338] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1148.773657][T13338] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1148.786809][T13338] usb 3-1: USB disconnect, device number 122 [ 1148.909033][T18081] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1148.928674][T18081] usb 10-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 1148.952848][T18081] usb 10-1: Product: syz [ 1148.962114][T18081] usb 10-1: Manufacturer: syz [ 1148.967096][T18081] usb 10-1: SerialNumber: syz [ 1148.982452][T18081] usb 10-1: config 0 descriptor?? [ 1149.537395][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 1150.616108][T18674] syz.2.3325(18674): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1151.405372][T18081] usb 10-1: Firmware version (0.0) predates our first public release. [ 1151.414688][T18081] usb 10-1: Please update to version 0.2 or newer [ 1151.418690][T18672] mkiss: ax0: crc mode is auto. [ 1151.528674][T18081] usb 10-1: USB disconnect, device number 61 [ 1151.751310][T18696] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 1151.860632][T18693] could not allocate digest TFM handle ghash-ce [ 1151.983175][T18081] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1152.361565][T18081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.432861][T18081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.626798][T18081] usb 10-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1152.687297][T18081] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.727685][T18081] usb 10-1: config 0 descriptor?? [ 1152.804219][T18708] FAULT_INJECTION: forcing a failure. [ 1152.804219][T18708] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.833273][T18708] CPU: 1 UID: 0 PID: 18708 Comm: syz.4.3334 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 1152.844127][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1152.854216][T18708] Call Trace: [ 1152.857512][T18708] [ 1152.860455][T18708] dump_stack_lvl+0x241/0x360 [ 1152.865160][T18708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1152.870383][T18708] ? __pfx__printk+0x10/0x10 [ 1152.875254][T18708] ? fs_reclaim_acquire+0x93/0x130 [ 1152.880392][T18708] ? __pfx___might_resched+0x10/0x10 [ 1152.885708][T18708] should_fail_ex+0x3b0/0x4e0 [ 1152.890405][T18708] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1152.896149][T18708] should_failslab+0xac/0x100 [ 1152.900868][T18708] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1152.906611][T18708] __kmalloc_noprof+0xd8/0x400 [ 1152.911395][T18708] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1152.916973][T18708] tomoyo_path_number_perm+0x23a/0x880 [ 1152.922454][T18708] ? tomoyo_path_number_perm+0x208/0x880 [ 1152.928116][T18708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1152.934160][T18708] ? __fget_files+0x29/0x470 [ 1152.938782][T18708] ? __fget_files+0x3f3/0x470 [ 1152.943491][T18708] security_file_ioctl+0xc6/0x2a0 [ 1152.948542][T18708] __se_sys_ioctl+0x47/0x170 [ 1152.953158][T18708] do_syscall_64+0xf3/0x230 [ 1152.957677][T18708] ? clear_bhb_loop+0x35/0x90 [ 1152.962378][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.968287][T18708] RIP: 0033:0x7f802257e719 [ 1152.972711][T18708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.992331][T18708] RSP: 002b:00007f8023421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.000760][T18708] RAX: ffffffffffffffda RBX: 00007f8022735f80 RCX: 00007f802257e719 [ 1153.008744][T18708] RDX: 0000000000000000 RSI: 0000000080045002 RDI: 0000000000000003 [ 1153.016721][T18708] RBP: 00007f8023421090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.024697][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.032683][T18708] R13: 0000000000000000 R14: 00007f8022735f80 R15: 00007ffcc3798328 [ 1153.040676][T18708] [ 1153.076090][T18708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1153.078537][T18686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.112100][T18686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.412588][T18081] usbhid 10-1:0.0: can't add hid device: -71 [ 1153.418984][T18081] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1153.428945][T18081] usb 10-1: USB disconnect, device number 62 [ 1153.455447][T18717] IPv4: Oversized IP packet from 172.20.20.24 [ 1153.464991][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1153.471930][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1153.653187][T14977] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1153.817664][T14977] usb 3-1: config index 0 descriptor too short (expected 64575, got 68) [ 1153.828651][T14977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.871691][T14977] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1153.915550][T14977] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1154.207152][T14977] usb 3-1: config index 1 descriptor too short (expected 64575, got 68) [ 1154.217409][T14977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.227865][T14977] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1154.238988][T14977] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1154.266484][T14977] usb 3-1: string descriptor 0 read error: -71 [ 1154.272870][T14977] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1154.282439][T14977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.297014][T14977] usb 3-1: can't set config #1, error -71 [ 1154.316450][T14977] usb 3-1: USB disconnect, device number 123 [ 1154.553408][T18076] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1154.803116][T18076] usb 10-1: Using ep0 maxpacket: 16 [ 1154.827552][T18076] usb 10-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 1154.838190][T18076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.849917][T18076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 149, changing to 11 [ 1154.869701][T18076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 17459, setting to 1024 [ 1154.891837][T18076] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.921170][T18076] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.942530][T18076] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.953541][T18076] usb 10-1: Manufacturer: syz [ 1154.973845][T18076] usb 10-1: config 0 descriptor?? [ 1155.637039][T13338] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1155.983192][T18076] rc_core: IR keymap rc-hauppauge not found [ 1155.993259][T18076] Registered IR keymap rc-empty [ 1156.013182][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.058063][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.067500][T13338] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1156.083704][T18076] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1156.102032][T13338] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 69, changing to 10 [ 1156.114105][T18076] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input70 [ 1156.144189][T13338] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1156.169349][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.179742][T13338] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1156.199354][T13338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.218403][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.220703][T18746] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1156.255820][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.318200][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.353359][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.394272][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.423559][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.460915][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.523413][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.843657][T18076] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1156.894386][T18076] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1156.919427][T18076] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.352230][T13338] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1158.396697][T13338] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input71 [ 1158.465772][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1158.502792][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1158.525235][T13338] usb 3-1: USB disconnect, device number 124 [ 1158.552338][T18764] FAULT_INJECTION: forcing a failure. [ 1158.552338][T18764] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.597184][T18764] CPU: 0 UID: 0 PID: 18764 Comm: syz.4.3347 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 1158.608054][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1158.618162][T18764] Call Trace: [ 1158.621478][T18764] [ 1158.624443][T18764] dump_stack_lvl+0x241/0x360 [ 1158.629164][T18764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.634404][T18764] ? __pfx__printk+0x10/0x10 [ 1158.639038][T18764] ? fs_reclaim_acquire+0x93/0x130 [ 1158.644185][T18764] ? __pfx___might_resched+0x10/0x10 [ 1158.649512][T18764] should_fail_ex+0x3b0/0x4e0 [ 1158.654236][T18764] ? tomoyo_encode+0x26f/0x540 [ 1158.659045][T18764] should_failslab+0xac/0x100 [ 1158.663772][T18764] ? tomoyo_encode+0x26f/0x540 [ 1158.668582][T18764] __kmalloc_noprof+0xd8/0x400 [ 1158.673390][T18764] tomoyo_encode+0x26f/0x540 [ 1158.678038][T18764] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1158.683733][T18764] tomoyo_path_number_perm+0x23a/0x880 [ 1158.689244][T18764] ? tomoyo_path_number_perm+0x208/0x880 [ 1158.694941][T18764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1158.701019][T18764] ? __fget_files+0x29/0x470 [ 1158.705665][T18764] ? __fget_files+0x3f3/0x470 [ 1158.710397][T18764] security_file_ioctl+0xc6/0x2a0 [ 1158.715466][T18764] __se_sys_ioctl+0x47/0x170 [ 1158.720101][T18764] do_syscall_64+0xf3/0x230 [ 1158.724643][T18764] ? clear_bhb_loop+0x35/0x90 [ 1158.729363][T18764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.735304][T18764] RIP: 0033:0x7f802257e719 [ 1158.739755][T18764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.759404][T18764] RSP: 002b:00007f8023421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.767876][T18764] RAX: ffffffffffffffda RBX: 00007f8022735f80 RCX: 00007f802257e719 [ 1158.775895][T18764] RDX: 0000000000000000 RSI: 0000000080045002 RDI: 0000000000000003 [ 1158.783909][T18764] RBP: 00007f8023421090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.791921][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.799936][T18764] R13: 0000000000000000 R14: 00007f8022735f80 R15: 00007ffcc3798328 [ 1158.807977][T18764] [ 1158.962955][T18764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1159.207865][T18747] syz.9.3340: vmalloc error: size 2981888, failed to allocated page array size 5824, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 1159.226610][T18747] CPU: 1 UID: 0 PID: 18747 Comm: syz.9.3340 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 1159.237423][T18747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1159.247498][T18747] Call Trace: [ 1159.250789][T18747] [ 1159.253728][T18747] dump_stack_lvl+0x241/0x360 [ 1159.258426][T18747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.263653][T18747] ? __pfx__printk+0x10/0x10 [ 1159.268266][T18747] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1159.274692][T18747] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1159.281212][T18747] warn_alloc+0x278/0x410 [ 1159.285563][T18747] ? __pfx_warn_alloc+0x10/0x10 [ 1159.290429][T18747] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1159.296605][T18747] ? __get_vm_area_node+0x23d/0x270 [ 1159.301827][T18747] __vmalloc_node_range_noprof+0x691/0x13f0 [ 1159.307766][T18747] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 1159.313767][T18747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1159.320112][T18747] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1159.326291][T18747] ? __get_vm_area_node+0x23d/0x270 [ 1159.331516][T18747] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 1159.337441][T18747] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1159.343649][T18747] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1159.349402][T18747] ? rcu_is_watching+0x15/0xb0 [ 1159.354177][T18747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1159.360522][T18747] ? rcu_is_watching+0x15/0xb0 [ 1159.365294][T18747] ? trace_kmalloc+0x1f/0xd0 [ 1159.369891][T18747] ? __kmalloc_node_noprof+0x247/0x440 [ 1159.375355][T18747] ? __kvmalloc_node_noprof+0x72/0x190 [ 1159.380825][T18747] __kvmalloc_node_noprof+0x142/0x190 [ 1159.386208][T18747] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1159.392379][T18747] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1159.398376][T18747] ? tpg_update_mv_step+0x361/0x4f0 [ 1159.403601][T18747] vivid_update_format_cap+0x133c/0x2090 [ 1159.409310][T18747] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 1159.415329][T18747] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 1159.421165][T18747] __video_do_ioctl+0xc23/0xdd0 [ 1159.426034][T18747] ? __pfx___video_do_ioctl+0x10/0x10 [ 1159.431415][T18747] ? __might_fault+0xc6/0x120 [ 1159.436111][T18747] video_usercopy+0x89b/0x1180 [ 1159.440892][T18747] ? __pfx___video_do_ioctl+0x10/0x10 [ 1159.446275][T18747] ? __pfx_video_usercopy+0x10/0x10 [ 1159.451480][T18747] ? smack_file_ioctl+0x2f7/0x3a0 [ 1159.456527][T18747] ? __fget_files+0x3f3/0x470 [ 1159.461228][T18747] v4l2_ioctl+0x189/0x1e0 [ 1159.465565][T18747] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1159.470427][T18747] __se_sys_ioctl+0xf9/0x170 [ 1159.475035][T18747] do_syscall_64+0xf3/0x230 [ 1159.479550][T18747] ? clear_bhb_loop+0x35/0x90 [ 1159.484328][T18747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.490234][T18747] RIP: 0033:0x7f32d6b7e719 [ 1159.494656][T18747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.514277][T18747] RSP: 002b:00007f32d7a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.522704][T18747] RAX: ffffffffffffffda RBX: 00007f32d6d36058 RCX: 00007f32d6b7e719 [ 1159.530684][T18747] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000005 [ 1159.538663][T18747] RBP: 00007f32d6bf132e R08: 0000000000000000 R09: 0000000000000000 [ 1159.546651][T18747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.554634][T18747] R13: 0000000000000000 R14: 00007f32d6d36058 R15: 00007fff1f3d4978 [ 1159.562628][T18747] [ 1159.565893][T18747] Mem-Info: [ 1159.569047][T18747] active_anon:366 inactive_anon:6374 isolated_anon:0 [ 1159.569047][T18747] active_file:24951 inactive_file:35003 isolated_file:0 [ 1159.569047][T18747] unevictable:768 dirty:157 writeback:0 [ 1159.569047][T18747] slab_reclaimable:10056 slab_unreclaimable:127216 [ 1159.569047][T18747] mapped:33986 shmem:4017 pagetables:817 [ 1159.569047][T18747] sec_pagetables:0 bounce:0 [ 1159.569047][T18747] kernel_misc_reclaimable:0 [ 1159.569047][T18747] free:1219116 free_pcp:2492 free_cma:0 [ 1159.616676][T18747] Node 0 active_anon:1424kB inactive_anon:25436kB active_file:99644kB inactive_file:139968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135820kB dirty:672kB writeback:0kB shmem:14492kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13036kB pagetables:3192kB sec_pagetables:0kB all_unreclaimable? no [ 1159.652083][T18747] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1159.683545][T18747] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.710992][T18747] lowmem_reserve[]: 0 2465 2466 0 0 [ 1159.716459][T18747] Node 0 DMA32 free:960708kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1420kB inactive_anon:25400kB active_file:98868kB inactive_file:139916kB unevictable:1536kB writepending:672kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:3328kB local_pcp:3008kB free_cma:0kB [ 1159.748418][T18747] lowmem_reserve[]: 0 0 0 0 0 [ 1159.754326][T18747] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:776kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1159.781390][T18747] lowmem_reserve[]: 0 0 0 0 0 [ 1159.786284][T18747] Node 1 Normal free:3899464kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:6500kB local_pcp:0kB free_cma:0kB [ 1159.815524][T18747] lowmem_reserve[]: 0 0 0 0 0 [ 1159.820395][T18747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1159.833441][T18747] Node 0 DMA32: 436*4kB (M) 1146*8kB (UME) 584*16kB (UME) 724*32kB (UME) 447*64kB (ME) 183*128kB (UME) 82*256kB (UME) 281*512kB (UME) 214*1024kB (UME) 13*2048kB (UME) 111*4096kB (UM) = 960736kB [ 1159.854032][T18747] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1159.867290][T18747] Node 1 Normal: 194*4kB (UME) 62*8kB (UME) 47*16kB (UME) 209*32kB (UME) 81*64kB (UME) 34*128kB (UME) 23*256kB (UM) 9*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 942*4096kB (UM) = 3899464kB [ 1159.886622][T18747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.896350][T18747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.905917][T18747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.907137][T18778] netlink: 'syz.2.3352': attribute type 29 has an invalid length. [ 1159.915608][T18747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.915678][T18747] 63962 total pagecache pages [ 1159.915691][T18747] 1 pages in swap cache [ 1159.915736][T18747] Free swap = 124544kB [ 1159.915749][T18747] Total swap = 124996kB [ 1159.915763][T18747] 2097051 pages RAM [ 1159.915774][T18747] 0 pages HighMem/MovableOnly [ 1159.915786][T18747] 427074 pages reserved [ 1159.915797][T18747] 0 pages cma reserved [ 1160.082910][T18778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1161.365864][T18812] bond_slave_0: entered promiscuous mode [ 1161.371608][T18812] bond_slave_1: entered promiscuous mode [ 1161.466214][T18812] macsec1: entered promiscuous mode [ 1161.497765][T18812] bond0: entered promiscuous mode [ 1161.531768][T18812] macsec1: entered allmulticast mode [ 1161.565961][T18812] bond0: entered allmulticast mode [ 1161.600165][T18812] bond_slave_0: entered allmulticast mode [ 1161.624911][T18812] bond_slave_1: entered allmulticast mode [ 1161.694537][T18812] bond0: left allmulticast mode [ 1161.699739][T18812] bond_slave_0: left allmulticast mode [ 1161.705748][T18812] bond_slave_1: left allmulticast mode [ 1161.725923][T18812] bond0: left promiscuous mode [ 1161.745405][T18812] bond_slave_0: left promiscuous mode [ 1161.750982][T18812] bond_slave_1: left promiscuous mode [ 1162.436513][T14975] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1162.613307][T14975] usb 5-1: device descriptor read/64, error -71 [ 1162.993189][T14975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1163.123268][T14975] usb 5-1: device descriptor read/64, error -71 [ 1163.233490][T14975] usb usb5-port1: attempt power cycle [ 1163.467944][T18827] netlink: 'syz.3.3364': attribute type 30 has an invalid length. [ 1163.653202][T14975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1163.674007][T14975] usb 5-1: device descriptor read/8, error -71 [ 1163.913292][T14975] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1163.933272][T18076] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 1163.943580][T14975] usb 5-1: device descriptor read/8, error -71 [ 1164.053580][T14975] usb usb5-port1: unable to enumerate USB device [ 1164.103219][T18076] usb 4-1: Invalid ep0 maxpacket: 32 [ 1164.447496][T14977] usb 10-1: USB disconnect, device number 63 [ 1164.723587][T14975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1164.760855][T18842] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3368'. [ 1164.852265][T18076] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 1164.906843][T14975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.917274][T14975] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1164.926692][T14975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.937010][T14975] usb 5-1: config 0 descriptor?? [ 1165.003627][T18076] usb 4-1: Invalid ep0 maxpacket: 32 [ 1165.011064][T18076] usb usb4-port1: attempt power cycle [ 1165.168427][T18083] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1165.241574][T18836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144512 (68289024 ns) > initial count (548 ns). Using initial count to start timer. [ 1165.263361][T14975] usb 5-1: USB disconnect, device number 9 [ 1165.343233][T18083] usb 10-1: Using ep0 maxpacket: 16 [ 1165.350880][T18083] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1165.362843][T18083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1165.376508][T18076] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1165.390938][T18083] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1165.400479][T18083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.409071][T18083] usb 10-1: Product: syz [ 1165.415136][T18076] usb 4-1: Invalid ep0 maxpacket: 32 [ 1165.420741][T18083] usb 10-1: Manufacturer: syz [ 1165.426547][T18083] usb 10-1: SerialNumber: syz [ 1165.432941][T18083] usb 10-1: config 0 descriptor?? [ 1165.441559][T18083] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1165.451419][T18083] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1165.558456][T18076] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1165.584255][T18076] usb 4-1: Invalid ep0 maxpacket: 32 [ 1165.590463][T18076] usb usb4-port1: unable to enumerate USB device [ 1166.056457][T18083] em28xx 10-1:0.0: chip ID is em2870 [ 1166.262579][T18083] usb 10-1: USB disconnect, device number 64 [ 1166.269596][T18083] em28xx 10-1:0.0: Disconnecting em28xx [ 1166.283490][T18083] em28xx 10-1:0.0: Freeing device [ 1166.319099][T18871] xt_HMARK: proto mask must be zero with L3 mode [ 1166.444924][T18874] bridge0: port 3(vlan2) entered blocking state [ 1166.451953][T18874] bridge0: port 3(vlan2) entered disabled state [ 1166.458665][T18874] vlan2: entered allmulticast mode [ 1166.465942][T18874] vlan2: left allmulticast mode [ 1166.833468][T18083] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1167.034170][T18083] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1167.185472][T18083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.593220][T18083] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1168.123203][T18083] usb 3-1: config 1 has no interface number 1 [ 1168.129388][T18083] usb 3-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 1168.141550][T18083] usb 3-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 1168.155895][T18083] usb 3-1: config 1 interface 2 has no altsetting 1 [ 1168.170946][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1168.187996][T18083] usb 3-1: string descriptor 0 read error: -22 [ 1168.207977][T18083] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1168.218952][T18083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.251225][T18083] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1168.263864][T18898] tmpfs: Bad value for 'mpol' [ 1168.268718][T18083] usb 3-1: MIDIStreaming interface descriptor not found [ 1168.542837][ T5887] usb 3-1: USB disconnect, device number 125 [ 1170.030026][T18931] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 1170.887190][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1171.737701][T14517] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1172.104114][T18965] trusted_key: encrypted_key: insufficient parameters specified [ 1172.373349][T18076] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1172.523828][T18076] usb 4-1: Using ep0 maxpacket: 8 [ 1172.532822][T18076] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1172.555943][T18076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.593258][T18076] usb 4-1: Product: syz [ 1172.609400][T18076] usb 4-1: Manufacturer: syz [ 1172.629848][T18076] usb 4-1: SerialNumber: syz [ 1172.694795][T18076] usb 4-1: config 0 descriptor?? [ 1172.722897][T18076] gspca_main: se401-2.14.0 probing 047d:5003 [ 1172.791650][T18969] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3409'. [ 1172.801369][T13338] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1172.953962][T13338] usb 10-1: too many configurations: 144, using maximum allowed: 8 [ 1172.964165][T13338] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1172.971931][T13338] usb 10-1: can't read configurations, error -61 [ 1173.020359][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1173.104406][T18076] gspca_se401: Bayer format not supported! [ 1173.113307][T13338] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1173.143301][T14977] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1173.263819][T13338] usb 10-1: too many configurations: 144, using maximum allowed: 8 [ 1173.273324][T14977] usb 5-1: device descriptor read/64, error -71 [ 1173.280504][T13338] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1173.288463][T13338] usb 10-1: can't read configurations, error -61 [ 1173.308881][T13338] usb usb10-port1: attempt power cycle [ 1173.513222][T14977] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1173.617028][T18986] netlink: 'syz.2.3415': attribute type 1 has an invalid length. [ 1173.626284][T18986] netlink: 9380 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1173.663333][T14977] usb 5-1: device descriptor read/64, error -71 [ 1173.693302][T13338] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1173.732688][T13338] usb 10-1: too many configurations: 144, using maximum allowed: 8 [ 1173.746154][T13338] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1173.754276][T13338] usb 10-1: can't read configurations, error -61 [ 1173.773483][T14977] usb usb5-port1: attempt power cycle [ 1173.938655][T13338] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1174.163415][T14977] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1174.236579][T13338] usb 10-1: too many configurations: 144, using maximum allowed: 8 [ 1174.282305][T13338] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1174.293248][T18990] x_tables: duplicate entry at hook 1 [ 1174.324667][T14977] usb 5-1: device descriptor read/8, error -71 [ 1174.334966][T13338] usb 10-1: can't read configurations, error -61 [ 1174.354615][T13338] usb usb10-port1: unable to enumerate USB device [ 1174.583502][T14977] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1174.624926][T14977] usb 5-1: device descriptor read/8, error -71 [ 1174.744975][T14977] usb usb5-port1: unable to enumerate USB device [ 1175.107024][T19004] 9pnet: p9_errstr2errno: server reported unknown error I; [ 1175.138130][T14978] usb 4-1: USB disconnect, device number 44 [ 1175.527371][T19008] 9pnet_fd: Insufficient options for proto=fd [ 1175.563414][T14978] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1175.574333][T19013] deleting an unspecified loop device is not supported. [ 1175.873147][T14978] usb 4-1: Using ep0 maxpacket: 16 [ 1175.934413][T14978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.970586][T14978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1175.983855][T14978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1176.002039][T14978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1176.013401][T14978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.119870][T14978] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1176.151756][T14978] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1176.160748][T14978] usb 4-1: Manufacturer: syz [ 1176.218977][T14978] usb 4-1: config 0 descriptor?? [ 1177.296027][T18076] hid-generic 0083:0000:0000.004C: unknown main item tag 0x0 [ 1177.323270][T18076] hid-generic 0083:0000:0000.004C: unknown main item tag 0x0 [ 1177.350781][T18076] hid-generic 0083:0000:0000.004C: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 1177.673846][T19049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1177.684405][T14978] rc_core: IR keymap rc-hauppauge not found [ 1177.690395][T14978] Registered IR keymap rc-empty [ 1177.695768][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1177.713466][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1177.734141][T14978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1177.754426][T14978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 1177.790662][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1177.833371][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1177.904117][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.910591][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.917655][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1177.922182][T19059] xt_cgroup: path and classid specified [ 1177.963584][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.003203][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.053283][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.083387][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.157717][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3434'. [ 1178.175498][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.226086][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.303461][T14978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.344412][T14978] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1178.385792][T14978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1178.458296][T14978] usb 4-1: USB disconnect, device number 45 [ 1178.737025][T13338] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1178.919558][T13338] usb 10-1: Using ep0 maxpacket: 32 [ 1178.970919][T13338] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1178.985454][T13338] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.997927][T14975] kernel write not supported for file bpf-prog (pid: 14975 comm: kworker/0:8) [ 1179.033332][T13338] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1179.063859][T13338] usb 10-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1179.085268][T19080] dccp_flush_write_queue: CCID did not manage to send all packets [ 1179.094140][T13338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.098390][T13338] usb 10-1: config 0 descriptor?? [ 1179.335791][T18076] usb 10-1: USB disconnect, device number 69 [ 1179.573262][T13338] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1179.750886][T13338] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1179.768825][T13338] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1179.790014][T13338] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1179.805855][T13338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.822524][T13338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.838972][T13338] usb 3-1: Product: Ð [ 1179.847601][T13338] usb 3-1: Manufacturer: Й [ 1179.857662][T13338] usb 3-1: SerialNumber: 듳 [ 1179.871256][T19086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1179.881207][T19086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1180.744629][T19108] 9pnet_fd: Insufficient options for proto=fd [ 1180.785985][T19109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.897804][T15163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.908654][T19109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.948664][T15163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.010114][T19086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.071317][T19086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.125835][T13338] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1181.139097][T13338] usb 3-1: USB disconnect, device number 126 [ 1182.294161][T19138] netlink: 192 bytes leftover after parsing attributes in process `syz.9.3455'. [ 1182.334571][T19138] CIFS mount error: No usable UNC path provided in device string! [ 1182.334571][T19138] [ 1182.368127][T19138] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1182.522508][T14975] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1182.766903][T14975] usb 5-1: not running at top speed; connect to a high speed hub [ 1182.895643][T14975] usb 5-1: config 2 has an invalid interface number: 238 but max is 0 [ 1183.040492][T14975] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1183.058793][T14975] usb 5-1: config 2 has an invalid interface number: 87 but max is 0 [ 1183.083254][T14975] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1183.106169][T14975] usb 5-1: config 2 has no interface number 0 [ 1183.112715][T14975] usb 5-1: config 2 has no interface number 1 [ 1183.118971][T14975] usb 5-1: config 2 interface 238 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1183.130132][T14975] usb 5-1: config 2 interface 238 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1183.141285][T14975] usb 5-1: config 2 interface 238 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1183.152629][T14975] usb 5-1: config 2 interface 238 altsetting 7 has an endpoint descriptor with address 0x38, changing to 0x8 [ 1183.164553][T14975] usb 5-1: config 2 interface 238 altsetting 7 endpoint 0x8 has invalid maxpacket 5161, setting to 64 [ 1183.176172][T14975] usb 5-1: config 2 interface 238 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1183.187537][T14975] usb 5-1: config 2 interface 238 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1183.199068][T14975] usb 5-1: config 2 interface 238 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1183.210653][T14975] usb 5-1: config 2 interface 238 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1183.221559][T14975] usb 5-1: too many endpoints for config 2 interface 87 altsetting 214: 48, using maximum allowed: 30 [ 1183.232839][T14975] usb 5-1: config 2 interface 87 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1183.244015][T14975] usb 5-1: config 2 interface 87 altsetting 214 has 1 endpoint descriptor, different from the interface descriptor's value: 48 [ 1183.257322][T14975] usb 5-1: config 2 interface 238 has no altsetting 0 [ 1183.264261][T14975] usb 5-1: config 2 interface 87 has no altsetting 0 [ 1184.099653][T14975] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice= d.f3 [ 1184.109780][T14975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.119390][T14975] usb 5-1: Product: syz [ 1184.124359][T14975] usb 5-1: Manufacturer: syz [ 1184.129350][T14975] usb 5-1: SerialNumber: syz [ 1184.133596][ T5887] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1184.139739][T19126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1184.263215][ T5887] usb 3-1: device descriptor read/64, error -71 [ 1184.503501][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1184.587339][T14975] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 1184.594059][T14975] usb 5-1: No valid video chain found. [ 1184.613279][T14975] usb 5-1: USB disconnect, device number 14 [ 1184.663285][ T5887] usb 3-1: device descriptor read/64, error -71 [ 1184.775120][ T5887] usb usb3-port1: attempt power cycle [ 1185.095310][ T5841] Bluetooth: hci7: command 0x0406 tx timeout [ 1185.213344][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1185.260177][ T5887] usb 3-1: device descriptor read/8, error -71 [ 1185.514287][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3461'. [ 1185.565459][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1185.714259][T19168] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3461'. [ 1185.744520][ T5887] usb 3-1: device descriptor read/8, error -71 [ 1186.290404][ T5887] usb usb3-port1: unable to enumerate USB device [ 1186.793092][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3468'. [ 1187.013350][T18076] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1187.175927][T18076] usb 5-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.204915][T18076] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.227115][T18076] usb 5-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.249993][T18076] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.282088][T18076] usb 5-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.302873][T18076] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.316940][T18076] usb 5-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.327584][T18076] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.339250][T18076] usb 5-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.349811][T18076] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.370093][T18076] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1187.393120][T18076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.410791][T18076] usb 5-1: config 0 descriptor?? [ 1189.605488][T19242] kernel read not supported for file /eth0 (pid: 19242 comm: syz.9.3482) [ 1189.631105][ T29] audit: type=1800 audit(1730607711.109:2448): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3482" name="eth0" dev="mqueue" ino=85575 res=0 errno=0 [ 1190.206463][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1191.144818][T14978] usb 5-1: USB disconnect, device number 15 [ 1191.832164][T19278] overlayfs: missing 'lowerdir' [ 1192.556909][T19275] overlay: ./file0 is not a directory [ 1192.767335][T19275] team0: Port device vlan2 added [ 1193.464180][T18082] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1193.643181][T18082] usb 4-1: Using ep0 maxpacket: 8 [ 1193.655672][T18082] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1193.673058][T18082] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.721963][T18082] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1193.731752][T18082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.741439][T18082] usb 4-1: Product: syz [ 1193.746962][T18082] usb 4-1: Manufacturer: syz [ 1193.751632][T18082] usb 4-1: SerialNumber: syz [ 1193.770352][T19305] overlay: Unknown parameter './file1' [ 1193.802949][T19288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1193.863437][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1194.032860][T19288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3496'. [ 1194.056993][T19288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.075904][T19288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.081501][ T5887] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 1194.094044][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.102193][ T5887] usb 5-1: Product: syz [ 1194.112270][ T5887] usb 5-1: Manufacturer: syz [ 1194.121111][ T5887] usb 5-1: SerialNumber: syz [ 1194.176055][T14978] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1194.177023][ T5887] usb 5-1: config 0 descriptor?? [ 1194.232621][T19321] program syz.2.3506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1194.558832][T14978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.564253][ T5887] kaweth 5-1:0.0: Firmware present in device. [ 1194.674058][T14978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.690949][ T5887] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 1194.706859][ T5887] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1194.836011][T14978] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.840882][ T5887] usb 5-1: USB disconnect, device number 16 [ 1194.892816][T14978] usb 10-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1194.906960][T14978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.939141][T14978] usb 10-1: config 0 descriptor?? [ 1195.401280][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.418723][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.457178][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.483417][T14517] Bluetooth: hci2: command 0x0406 tx timeout [ 1195.506552][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.552722][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.573554][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.591395][T14978] glorious 0003:258A:0036.004D: unknown main item tag 0x0 [ 1195.612604][T14978] glorious 0003:258A:0036.004D: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.9-1/input0 [ 1195.661558][T14978] usb 10-1: USB disconnect, device number 70 [ 1196.443566][T18082] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1196.543261][T18082] usb 4-1: USB disconnect, device number 46 [ 1196.615073][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3509'. [ 1199.553302][T14975] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1199.973469][T14975] usb 4-1: Using ep0 maxpacket: 32 [ 1200.000141][T14975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.988516][T14975] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1200.997715][T14975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.044556][T14975] usb 4-1: config 0 descriptor?? [ 1201.053502][T14975] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1202.529314][T14975] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1202.705342][T14975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.730164][T14975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.769185][T14975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1203.118288][T14975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.383127][T14975] usb 5-1: config 0 descriptor?? [ 1203.643693][ T5887] usb 4-1: USB disconnect, device number 47 [ 1203.877199][T14975] pyra 0003:1E7D:2CF6.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1203.900905][T14975] pyra 0003:1E7D:2CF6.004E: couldn't init struct pyra_device [ 1203.908601][T14975] pyra 0003:1E7D:2CF6.004E: couldn't install mouse [ 1203.921459][T14975] pyra 0003:1E7D:2CF6.004E: probe with driver pyra failed with error -71 [ 1203.944927][T14975] usb 5-1: USB disconnect, device number 17 [ 1204.537052][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.598413][T19432] dummy0: entered promiscuous mode [ 1204.604509][T19432] vlan3: entered promiscuous mode [ 1204.609670][T19432] vlan3: entered allmulticast mode [ 1204.615018][T19432] dummy0: entered allmulticast mode [ 1204.622254][T19432] dummy0: left allmulticast mode [ 1204.627492][T19432] dummy0: left promiscuous mode [ 1204.777375][T19428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.806174][ T29] audit: type=1326 audit(1730607726.289:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.4.3535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f802257e719 code=0x0 [ 1206.657791][T19461] x_tables: duplicate entry at hook 1 [ 1207.340014][T19463] tmpfs: Bad value for 'mpol' [ 1207.603577][ T5887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1207.773438][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1207.989720][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.020510][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1208.062381][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1208.112190][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1208.151419][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.185721][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1208.208808][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.234439][ T5887] usb 5-1: Manufacturer: syz [ 1208.292268][ T5887] usb 5-1: config 0 descriptor?? [ 1208.753293][ T5887] rc_core: IR keymap rc-hauppauge not found [ 1208.763034][ T5887] Registered IR keymap rc-empty [ 1208.773567][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.842448][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.885312][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1208.985821][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input73 [ 1209.093855][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.172678][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.229898][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.263299][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.306683][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.373407][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.406104][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.414991][T19505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1209.453543][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.483355][T18076] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1209.492665][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.527287][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.564823][ T5887] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1209.583464][ T5887] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1209.603786][ T5887] usb 5-1: USB disconnect, device number 18 [ 1209.634797][T18076] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1209.647957][T18076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.666001][T18076] usb 3-1: config 0 descriptor?? [ 1209.694782][T18076] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1210.023372][T19515] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1212.990874][T19541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1213.855175][T19550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1213.955143][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1214.043457][T14975] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1214.173357][ T5887] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1214.193669][T14975] usb 10-1: Using ep0 maxpacket: 8 [ 1214.207985][T14975] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 1214.243174][T14975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.267342][T14975] usb 10-1: Product: syz [ 1214.282360][T14975] usb 10-1: Manufacturer: syz [ 1214.302773][T14975] usb 10-1: SerialNumber: syz [ 1214.324266][T14975] usb 10-1: config 0 descriptor?? [ 1214.343268][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 1214.351117][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.352112][T14975] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1214.486375][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1214.490794][T14975] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 1214.516794][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.643405][ T5887] usb 4-1: Product: syz [ 1214.663185][ T5887] usb 4-1: Manufacturer: syz [ 1214.667897][ T5887] usb 4-1: SerialNumber: syz [ 1215.033767][T14975] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1215.204604][T14975] usb 5-1: Using ep0 maxpacket: 8 [ 1215.223738][T14975] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1215.255724][T14975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.280082][T14975] usb 5-1: Product: syz [ 1215.297683][T14975] usb 5-1: Manufacturer: syz [ 1215.314741][T14975] usb 5-1: SerialNumber: syz [ 1215.318513][ T5887] usb 4-1: config 0 descriptor?? [ 1215.333874][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1215.340971][ T5887] pvrusb2: ********** [ 1215.346891][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1215.347220][T14975] usb 5-1: config 0 descriptor?? [ 1215.358551][ T5887] pvrusb2: Important functionality might not be entirely working. [ 1215.370454][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1215.382043][ T5887] pvrusb2: ********** [ 1215.385414][T14978] usb 10-1: USB disconnect, device number 71 [ 1215.399286][T14978] ftdi_sio 10-1:0.0: device disconnected [ 1215.516932][T18076] usb 3-1: USB disconnect, device number 5 [ 1215.636283][T14975] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1215.666487][ T2334] pvrusb2: Invalid write control endpoint [ 1215.669240][ T5887] usb 4-1: USB disconnect, device number 48 [ 1215.798246][ T2334] pvrusb2: Invalid write control endpoint [ 1215.810211][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1215.821453][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1215.834427][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1215.849831][ T2334] pvrusb2: Device being rendered inoperable [ 1215.875454][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1215.894462][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1215.930010][ T2334] pvrusb2: Attached sub-driver cx25840 [ 1215.943263][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1215.959332][T19576] binder: 19574:19576 ioctl c0306201 200003c0 returned -22 [ 1215.978015][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1216.236070][T14978] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1216.347764][T19579] x_tables: duplicate entry at hook 1 [ 1216.630873][T14978] usb 3-1: Using ep0 maxpacket: 32 [ 1216.695861][T14978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.769148][T14975] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1216.780902][T14978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.798049][T14975] usb 5-1: USB disconnect, device number 19 [ 1216.804216][T14978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1216.825109][T14978] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1216.834418][T14978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.850216][T14978] usb 3-1: config 0 descriptor?? [ 1217.222751][T19603] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1217.267573][T19570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.280290][T19570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.518092][T14978] hid (null): nested delimiters [ 1217.523179][T14978] hid (null): unknown global tag 0xc [ 1217.528518][T14978] hid (null): invalid report_count 34438 [ 1217.582106][T14978] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.004F/input/input74 [ 1217.629453][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 1217.638710][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3582'. [ 1218.672759][T19627] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:4 [ 1218.786608][T14978] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.004F/input/input75 [ 1218.799958][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1218.832656][T14978] kye 0003:0458:5011.004F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1218.874903][T14978] usb 3-1: USB disconnect, device number 6 [ 1219.663517][T19637] x_tables: duplicate entry at hook 1 [ 1222.073299][T14978] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1222.234724][T14978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.266824][T14978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.288445][T14978] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1222.297937][T14978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.313894][T14978] usb 3-1: config 0 descriptor?? [ 1222.652255][T19690] x_tables: duplicate underflow at hook 2 [ 1222.739903][T14978] hid (null): bogus close delimiter [ 1222.906415][T19698] netlink: 'syz.9.3605': attribute type 2 has an invalid length. [ 1222.941961][T19698] netlink: 'syz.9.3605': attribute type 1 has an invalid length. [ 1222.952106][T14978] usb 3-1: string descriptor 0 read error: -71 [ 1222.975263][T14978] uclogic 0003:256C:006D.0050: failed retrieving string descriptor #200: -71 [ 1223.000341][T14978] uclogic 0003:256C:006D.0050: failed retrieving pen parameters: -71 [ 1223.024602][T14978] uclogic 0003:256C:006D.0050: failed probing pen v2 parameters: -71 [ 1223.042968][T14978] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 1223.051425][T14978] uclogic 0003:256C:006D.0050: probe with driver uclogic failed with error -71 [ 1223.091270][T19698] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3605'. [ 1223.105866][T14978] usb 3-1: USB disconnect, device number 7 [ 1224.433751][T14975] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1224.633230][T14975] usb 4-1: Using ep0 maxpacket: 16 [ 1224.644285][T14975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1224.713562][T14975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1224.727000][T14975] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1224.736469][T14975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.746968][T14975] usb 4-1: Product: syz [ 1224.751190][T14975] usb 4-1: Manufacturer: syz [ 1224.757971][T19737] netlink: 'syz.9.3618': attribute type 9 has an invalid length. [ 1224.767096][T19737] netlink: 134672 bytes leftover after parsing attributes in process `syz.9.3618'. [ 1224.776547][T19737] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 1224.812811][T14975] usb 4-1: SerialNumber: syz [ 1224.821878][T14975] usb 4-1: config 0 descriptor?? [ 1224.901481][T14975] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1224.923259][T14975] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1225.147041][T19745] overlay: Unknown parameter 'measure' [ 1225.182430][T19745] overlay: ./bus is not a directory [ 1225.433364][T14978] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1225.542817][T14975] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1225.552498][T19722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.567173][T19722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.595475][T14978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.606902][T14978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.633387][T14981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1225.640996][T14978] usb 10-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1225.650557][ T5841] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1225.668281][T14978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.692054][T14978] usb 10-1: config 0 descriptor?? [ 1225.777039][T14975] em28xx 4-1:0.0: Config register raw data: 0x56 [ 1225.814629][T14981] usb 3-1: New USB device found, idVendor=05ff, idProduct=b301, bcdDevice=e4.00 [ 1225.827459][T14981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.835924][T14981] usb 3-1: Product: syz [ 1225.840325][T14981] usb 3-1: Manufacturer: syz [ 1225.845317][T14981] usb 3-1: SerialNumber: syz [ 1225.865328][T14981] usb 3-1: config 0 descriptor?? [ 1225.979535][T14975] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1225.992045][T14975] em28xx 4-1:0.0: No AC97 audio processor [ 1226.135991][T14978] usbhid 10-1:0.0: can't add hid device: -71 [ 1226.142889][T14978] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1226.165056][T14978] usb 10-1: USB disconnect, device number 72 [ 1226.203452][T14517] Bluetooth: hci4: command 0x0406 tx timeout [ 1226.513428][T19755] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1226.524348][T19755] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1227.218405][ T29] audit: type=1326 audit(1730607748.689:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19778 comm="syz.4.3628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f802257e719 code=0x0 [ 1227.298070][T14975] usb 4-1: USB disconnect, device number 49 [ 1227.306370][T14975] em28xx 4-1:0.0: Disconnecting em28xx [ 1227.572330][T14975] em28xx 4-1:0.0: Freeing device [ 1227.816173][T19792] netlink: 'syz.9.3633': attribute type 4 has an invalid length. [ 1227.839933][T19792] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1227.865772][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1227.888049][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1229.247901][T14981] usb 3-1: USB disconnect, device number 8 [ 1229.742729][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1230.388434][T19832] team_slave_0: entered promiscuous mode [ 1230.395011][T19832] team_slave_1: entered promiscuous mode [ 1230.403150][T19832] bond_slave_0: entered promiscuous mode [ 1230.409341][T19832] bond_slave_1: entered promiscuous mode [ 1230.415176][T19832] bridge0: entered promiscuous mode [ 1230.434660][T19832] macvlan2: entered promiscuous mode [ 1230.450424][T19832] team0: entered promiscuous mode [ 1230.469592][T19832] bond0: entered promiscuous mode [ 1230.476911][T19832] macvlan2: entered allmulticast mode [ 1230.482622][T19832] team0: entered allmulticast mode [ 1230.488173][T19832] team_slave_0: entered allmulticast mode [ 1230.494501][T19832] team_slave_1: entered allmulticast mode [ 1230.502830][T19832] bond0: entered allmulticast mode [ 1230.532747][T19832] bond_slave_0: entered allmulticast mode [ 1230.549221][T19832] bond_slave_1: entered allmulticast mode [ 1230.565948][T19832] bridge0: entered allmulticast mode [ 1230.585404][T19832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1230.711298][T19834] macvlan3: entered promiscuous mode [ 1230.717048][T19834] macvlan3: entered allmulticast mode [ 1230.831535][T19843] loop6: detected capacity change from 0 to 524287999 [ 1231.672148][T19862] binder_alloc: binder_alloc_mmap_handler: 19858 20ffc000-20ffe000 already mapped failed -16 [ 1231.719176][T19861] binder_alloc: 19858: binder_alloc_buf, no vma [ 1231.740261][ T29] audit: type=1326 audit(1730607753.219:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19858 comm="syz.2.3652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9f97e719 code=0x0 [ 1231.776428][ T29] audit: type=1326 audit(1730607753.249:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1231.809855][ T29] audit: type=1326 audit(1730607753.249:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1231.847142][ T29] audit: type=1326 audit(1730607753.249:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1231.913210][ T29] audit: type=1326 audit(1730607753.249:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1231.967678][ T29] audit: type=1326 audit(1730607753.249:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1231.999794][ T29] audit: type=1326 audit(1730607753.249:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.022719][T14981] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1232.051779][ T29] audit: type=1326 audit(1730607753.249:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.087705][ T29] audit: type=1326 audit(1730607753.249:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.196630][T14981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.213261][T14981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.235419][T19868] Bluetooth: MGMT ver 1.23 [ 1232.244062][T14981] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1232.261693][T14981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.272401][T14981] usb 4-1: config 0 descriptor?? [ 1232.299637][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1232.299655][ T29] audit: type=1326 audit(1730607753.769:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e31b code=0x7ffc0000 [ 1232.348409][ T29] audit: type=1326 audit(1730607753.769:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e31b code=0x7ffc0000 [ 1232.382174][ T29] audit: type=1326 audit(1730607753.769:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e31b code=0x7ffc0000 [ 1232.418730][ T29] audit: type=1326 audit(1730607753.769:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e31b code=0x7ffc0000 [ 1232.458735][ T29] audit: type=1326 audit(1730607753.769:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1c05b0805 code=0x7ffc0000 [ 1232.498731][ T29] audit: type=1326 audit(1730607753.969:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.544209][ T29] audit: type=1326 audit(1730607753.969:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.580853][ T29] audit: type=1326 audit(1730607753.979:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.615751][ T29] audit: type=1326 audit(1730607753.979:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.659615][ T29] audit: type=1326 audit(1730607753.979:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19854 comm="syz.3.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1232.967401][T14981] usbhid 4-1:0.0: can't add hid device: -71 [ 1232.984353][T14981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1233.005945][T14981] usb 4-1: USB disconnect, device number 50 [ 1234.387699][T19887] cgroup: Need name or subsystem set [ 1234.396902][T19885] sit0: entered promiscuous mode [ 1234.423379][T19885] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 1234.469091][T19885] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1234.853413][T14978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1235.013979][T14978] usb 3-1: too many configurations: 74, using maximum allowed: 8 [ 1235.024702][T14978] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1235.032357][T14978] usb 3-1: can't read configurations, error -61 [ 1235.081613][T19903] netlink: 'syz.5.3666': attribute type 1 has an invalid length. [ 1235.164096][T14978] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1235.212445][T19909] IPVS: set_ctl: invalid protocol: 168 10.1.1.2:20000 [ 1235.915296][T14978] usb 3-1: too many configurations: 74, using maximum allowed: 8 [ 1235.982692][T14978] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1236.001140][T14978] usb 3-1: can't read configurations, error -61 [ 1236.010198][T14978] usb usb3-port1: attempt power cycle [ 1236.593167][T14978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1236.614569][T14978] usb 3-1: too many configurations: 74, using maximum allowed: 8 [ 1236.634639][T14978] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1236.643934][T14978] usb 3-1: can't read configurations, error -61 [ 1236.867459][T14978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1236.989334][T19937] x_tables: duplicate entry at hook 1 [ 1237.123583][T18076] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1237.139287][T14978] usb 3-1: too many configurations: 74, using maximum allowed: 8 [ 1237.293689][T18076] usb 4-1: Using ep0 maxpacket: 8 [ 1237.310846][T18076] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1237.425240][T14978] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1237.432956][T14978] usb 3-1: can't read configurations, error -61 [ 1237.448373][T18076] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.477965][T18076] usb 4-1: config 135 has no interface number 0 [ 1237.487447][T18076] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1237.503214][T18076] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1237.526506][T18076] usb 4-1: config 135 interface 230 has no altsetting 0 [ 1237.539511][T18076] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1237.548886][T18076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.557058][T18076] usb 4-1: Product: syz [ 1237.572945][T14978] usb usb3-port1: unable to enumerate USB device [ 1237.596238][T18076] usb 4-1: Manufacturer: syz [ 1237.701781][T18076] usb 4-1: SerialNumber: syz [ 1237.781081][T18076] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1237.809728][T18076] usb 4-1: No valid video chain found. [ 1237.986264][T19935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.015589][T19935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.194731][T19935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3675'. [ 1238.364805][T14975] usb 4-1: USB disconnect, device number 51 [ 1239.254181][T19973] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.350613][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.357339][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.425916][T19982] ptrace attach of "./syz-executor exec"[18407] was attempted by "./syz-executor exec"[19982] [ 1239.673505][T14978] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1240.583659][T14975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1240.754597][T14975] usb 3-1: Using ep0 maxpacket: 16 [ 1240.772743][T14975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.793169][T14975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.831116][T14975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.853847][T14975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.883554][T14975] usb 3-1: Product: syz [ 1240.893913][T14975] usb 3-1: Manufacturer: syz [ 1240.903464][T14975] usb 3-1: SerialNumber: syz [ 1241.495970][T19992] netlink: 'syz.2.3692': attribute type 7 has an invalid length. [ 1241.523591][T19992] netlink: 'syz.2.3692': attribute type 8 has an invalid length. [ 1241.531473][T19992] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1241.591220][T14975] usb 3-1: 0:2 : does not exist [ 1241.637436][T14975] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1241.666565][T14975] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1241.709278][T14975] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1241.821173][T14975] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1241.909345][T14975] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1241.943266][T18082] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1241.989125][T14975] usb 3-1: USB disconnect, device number 13 [ 1242.105219][T18082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.116416][T18082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.133131][T18076] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1242.159315][T18082] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1242.168826][T18082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.186240][T18082] usb 5-1: config 0 descriptor?? [ 1242.217079][T20017] qrtr: Invalid version 0 [ 1242.293224][T18076] usb 4-1: Using ep0 maxpacket: 8 [ 1242.311375][T18076] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.323088][T18076] usb 4-1: config 0 has no interface number 0 [ 1242.343249][T18076] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.403114][T18076] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1242.425843][T18076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.469145][T18076] usb 4-1: config 0 descriptor?? [ 1242.515352][T18076] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1242.861601][T18082] usb 5-1: string descriptor 0 read error: -22 [ 1243.634928][T18082] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0051/input/input76 [ 1243.667224][T18082] uclogic 0003:256C:006D.0051: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1243.904389][T18082] usb 5-1: USB disconnect, device number 20 [ 1243.931068][T20028] dlm: Unknown command passed to DLM device : 0 [ 1243.931068][T20028] [ 1245.178801][T14978] usb 4-1: USB disconnect, device number 53 [ 1245.193764][T14978] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1245.415131][T14975] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1245.603722][T14975] usb 10-1: Using ep0 maxpacket: 16 [ 1245.661929][T14975] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1245.672376][T14975] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1245.683623][T14975] usb 10-1: can't read configurations, error -61 [ 1245.823766][T14975] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1246.004972][T14975] usb 10-1: Using ep0 maxpacket: 16 [ 1246.059172][T14975] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1246.112925][T14975] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1246.150272][T14975] usb 10-1: can't read configurations, error -61 [ 1246.173567][T14975] usb usb10-port1: attempt power cycle [ 1246.485351][T20058] /dev/nullb0: Can't open blockdev [ 1246.593225][T14975] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1246.614007][T14975] usb 10-1: Using ep0 maxpacket: 16 [ 1246.620087][T14975] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1246.633376][T14975] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1246.641213][T14975] usb 10-1: can't read configurations, error -61 [ 1246.773367][T14975] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1246.804030][T14975] usb 10-1: Using ep0 maxpacket: 16 [ 1246.810075][T14975] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1246.830063][T14975] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1246.838514][T14975] usb 10-1: can't read configurations, error -61 [ 1246.838991][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1246.853750][T14975] usb usb10-port1: unable to enumerate USB device [ 1246.913209][T18082] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1247.073341][T18082] usb 4-1: device descriptor read/64, error -71 [ 1247.334077][T18082] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1247.483792][T18082] usb 4-1: device descriptor read/64, error -71 [ 1247.594147][T18082] usb usb4-port1: attempt power cycle [ 1247.944254][T18082] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1247.963995][T18082] usb 4-1: device descriptor read/8, error -71 [ 1248.203342][T18082] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1248.263439][T18082] usb 4-1: device descriptor read/8, error -71 [ 1248.341597][T20080] lo: entered promiscuous mode [ 1248.386982][T20080] tunl0: entered promiscuous mode [ 1248.395500][T18082] usb usb4-port1: unable to enumerate USB device [ 1248.451276][T20080] gre0: entered promiscuous mode [ 1248.483952][T20080] gretap0: entered promiscuous mode [ 1248.495058][T20080] erspan0: entered promiscuous mode [ 1248.544256][T20080] ip_vti0: entered promiscuous mode [ 1248.550536][T20080] ip6_vti0: entered promiscuous mode [ 1248.560891][T20080] sit0: entered promiscuous mode [ 1248.570947][T20080] ip6tnl0: entered promiscuous mode [ 1248.598252][T20080] ip6gre0: entered promiscuous mode [ 1248.774568][T20080] syz_tun: entered promiscuous mode [ 1248.805128][T20080] ip6gretap0: entered promiscuous mode [ 1248.811829][T20080] bridge0: entered promiscuous mode [ 1248.829308][T20080] vcan0: entered promiscuous mode [ 1248.842000][T20080] bond0: entered promiscuous mode [ 1248.849028][T20080] bond_slave_0: entered promiscuous mode [ 1248.858459][T20080] bond_slave_1: entered promiscuous mode [ 1248.911204][T20080] team0: entered promiscuous mode [ 1248.922291][T20080] team_slave_0: entered promiscuous mode [ 1249.172932][T20080] team_slave_1: entered promiscuous mode [ 1249.292853][T20080] dummy0: entered promiscuous mode [ 1249.367041][T20080] nlmon0: entered promiscuous mode [ 1249.517195][T18082] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1249.536131][T20080] caif0: entered promiscuous mode [ 1249.541353][T20080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1249.609982][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3717'. [ 1249.708878][T18082] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1249.947659][T20098] x_tables: duplicate entry at hook 1 [ 1250.023065][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.304202][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.356150][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.384014][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.413282][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.441254][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.459454][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.490148][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.523072][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.540444][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.553254][T14981] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1250.581732][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.607436][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.637354][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.688261][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.713246][T14975] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1250.721369][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.745054][T14981] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1250.755664][T14981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.770509][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.800672][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.801694][T14981] usb 4-1: config 0 descriptor?? [ 1250.830915][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.867421][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.873358][T14975] usb 10-1: Using ep0 maxpacket: 8 [ 1250.887430][T14975] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.906183][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.919950][T14975] usb 10-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 1250.946333][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.971645][T14975] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1250.985407][T18082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1250.993122][T14975] usb 10-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1251.023118][T18082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1251.036254][T14975] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1251.053425][T18082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1251.059788][T14981] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1251.069323][T14981] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1251.070274][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.088500][T14975] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1251.103468][T14975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.116012][T18082] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1251.131819][T14975] usb 10-1: Product: syz [ 1251.151659][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.157048][T14975] usb 10-1: Manufacturer: syz [ 1251.165868][T18082] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1251.166422][T14975] usb 10-1: SerialNumber: syz [ 1251.189739][T20102] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1251.222512][T18082] usb 3-1: Product: syz [ 1251.241418][T18082] usb 3-1: Manufacturer: syz [ 1251.259287][T14981] [drm:udl_init] *ERROR* Selecting channel failed [ 1251.265858][T18082] usb 3-1: SerialNumber: syz [ 1251.283852][T18082] usb 3-1: config 0 descriptor?? [ 1251.348467][T18082] yurex 3-1:0.0: Could not find endpoints [ 1251.389202][T14981] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1251.400064][T14981] [drm] Initialized udl on minor 2 [ 1251.419473][T14981] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1251.433474][T14978] usb 3-1: USB disconnect, device number 14 [ 1251.439853][T14981] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1251.488397][T14977] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1251.513797][T14981] usb 4-1: USB disconnect, device number 58 [ 1251.526047][T14977] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1251.544520][T14977] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1251.673761][T14975] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1251.701344][T14975] usb 10-1: USB disconnect, device number 77 [ 1252.277810][T20120] fuse: Unknown parameter '' [ 1253.253188][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1253.253219][ T29] audit: type=1326 audit(1730607774.729:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.305711][T20139] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 1253.309976][ T29] audit: type=1326 audit(1730607774.729:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.376849][T20143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1253.394813][ T29] audit: type=1326 audit(1730607774.729:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.436623][ T29] audit: type=1326 audit(1730607774.729:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.458456][ T29] audit: type=1326 audit(1730607774.769:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.480429][ T29] audit: type=1326 audit(1730607774.769:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.502446][ T29] audit: type=1326 audit(1730607774.769:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.535069][ T29] audit: type=1326 audit(1730607774.769:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.557739][ T29] audit: type=1326 audit(1730607774.769:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.580340][ T29] audit: type=1326 audit(1730607774.779:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20142 comm="syz.3.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c057e719 code=0x7ffc0000 [ 1253.960202][T20154] kAFS: unparsable volume name [ 1254.312728][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 1254.426414][T14981] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1254.438354][T20167] netlink: 'syz.4.3738': attribute type 4 has an invalid length. [ 1255.364310][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1255.629489][T14981] usb 10-1: config index 0 descriptor too short (expected 36846, got 72) [ 1255.638777][T14981] usb 10-1: config 158 has too many interfaces: 205, using maximum allowed: 32 [ 1255.648332][T14981] usb 10-1: config 158 has an invalid descriptor of length 221, skipping remainder of the config [ 1255.659634][T14981] usb 10-1: config 158 has 0 interfaces, different from the descriptor's value: 205 [ 1255.677223][T14981] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.687347][T14981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.762868][T14981] usb 10-1: Product: syz [ 1255.768371][T14981] usb 10-1: Manufacturer: syz [ 1255.774449][T14981] usb 10-1: SerialNumber: syz [ 1256.024677][T14981] usb 10-1: USB disconnect, device number 78 [ 1256.887807][T20161] netlink: zone id is out of range [ 1256.921790][T20161] netlink: zone id is out of range [ 1256.963912][T20161] netlink: zone id is out of range [ 1256.992785][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1257.183341][T20161] netlink: zone id is out of range [ 1257.185700][T20196] loop9: detected capacity change from 0 to 7 [ 1257.199257][T20196] Dev loop9: unable to read RDB block 7 [ 1257.205963][T20196] loop9: unable to read partition table [ 1257.212104][T20196] loop9: partition table beyond EOD, truncated [ 1257.218506][T20196] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1257.240233][T20196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1257.273835][T20161] netlink: zone id is out of range [ 1257.289381][T20161] netlink: zone id is out of range [ 1257.310824][T20161] netlink: zone id is out of range [ 1257.329186][T20161] netlink: zone id is out of range [ 1257.340345][T20161] netlink: zone id is out of range [ 1257.436557][T20202] netlink: 'syz.4.3749': attribute type 10 has an invalid length. [ 1257.493479][T20203] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old? [ 1257.521188][T20202] team0: Port device netdevsim0 added [ 1257.859280][T20211] bridge0: port 2(bridge_slave_1) entered listening state [ 1258.064907][ T5887] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1258.840872][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1258.849761][ T5887] usb 4-1: config 0 has no interface number 0 [ 1258.871793][ T5887] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1258.882133][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.911511][ T5887] usb 4-1: Product: syz [ 1258.924138][ T5887] usb 4-1: Manufacturer: syz [ 1258.929303][ T5887] usb 4-1: SerialNumber: syz [ 1258.948065][ T5887] usb 4-1: config 0 descriptor?? [ 1259.166717][ T5887] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1259.223686][ T5887] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1259.244534][ T5887] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1259.263931][ T5887] usb 4-1: media controller created [ 1259.322662][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1259.738742][T18083] usb 4-1: USB disconnect, device number 59 [ 1261.053275][T14978] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1261.233278][T14978] usb 10-1: Using ep0 maxpacket: 8 [ 1261.240595][T14978] usb 10-1: config 6 has an invalid interface number: 2 but max is 0 [ 1261.250762][T14978] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.283511][T14978] usb 10-1: config 6 has no interface number 0 [ 1261.307827][T14978] usb 10-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1261.339557][T14978] usb 10-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.378060][T14978] usb 10-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1261.394472][T14978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.421617][T14978] usb 10-1: Product: syz [ 1261.434718][T14978] usb 10-1: Manufacturer: syz [ 1261.456018][T14978] usb 10-1: SerialNumber: syz [ 1261.477478][T14978] hso 10-1:6.2: Failed to find INT IN ep [ 1261.593489][T18082] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1261.732387][T14975] usb 10-1: USB disconnect, device number 79 [ 1261.775255][T18082] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 1261.796544][T18082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.825267][T20274] net_ratelimit: 2 callbacks suppressed [ 1261.825299][T20274] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 1262.337837][T18082] usb 3-1: config 0 descriptor?? [ 1262.452234][T18082] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 1262.473656][T18082] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1262.666851][T14981] usb 3-1: USB disconnect, device number 15 [ 1263.119223][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1263.963285][T18082] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1264.143277][T18082] usb 3-1: Using ep0 maxpacket: 32 [ 1264.150549][T18082] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.182067][T18082] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.235033][T20320] veth0_vlan: left allmulticast mode [ 1264.316590][T20320] vlan0: left allmulticast mode [ 1264.321530][T20320] vlan0: left promiscuous mode [ 1264.430591][T18082] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1264.440475][T18082] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1264.449111][T18082] usb 3-1: Product: syz [ 1264.453431][T18082] usb 3-1: Manufacturer: syz [ 1264.462272][T18082] hub 3-1:4.0: USB hub found [ 1264.512835][T20323] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1264.673923][T18082] hub 3-1:4.0: 2 ports detected [ 1264.705082][T20311] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3782'. [ 1265.254674][T20334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.264673][T20334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.293287][T20338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.463330][T14981] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1265.483710][T14975] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1265.591005][T20348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.601367][T20348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.623463][T14981] usb 10-1: Using ep0 maxpacket: 8 [ 1265.630753][T14981] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1265.639456][T14975] usb 5-1: Using ep0 maxpacket: 16 [ 1265.645293][T14981] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.656464][T14981] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.667094][T14981] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.678498][T14975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.689758][T14975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.701937][T14981] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.720632][T14981] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1265.734849][T14981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.743911][T14975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1265.753242][T14975] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1265.761691][T14975] usb 5-1: Product: syz [ 1265.772059][T14975] usb 5-1: Manufacturer: syz [ 1265.782165][T14975] usb 5-1: config 0 descriptor?? [ 1265.823425][ T5887] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1265.933948][T18082] hub 3-1:4.0: activate --> -90 [ 1265.988895][T14981] usb 10-1: GET_CAPABILITIES returned 0 [ 1265.995560][T14981] usbtmc 10-1:16.0: can't read capabilities [ 1266.006214][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 1266.018210][ T5887] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1266.028081][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.039276][ T5887] usb 4-1: Product: syz [ 1266.043747][ T5887] usb 4-1: Manufacturer: syz [ 1266.048450][ T5887] usb 4-1: SerialNumber: syz [ 1266.056302][ T5887] usb 4-1: config 0 descriptor?? [ 1266.067770][ T5887] gspca_main: se401-2.14.0 probing 047d:5003 [ 1266.140874][T18082] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 1266.149781][T18082] usb 3-1: USB disconnect, device number 16 [ 1266.201978][T14975] kovaplus 0003:1E7D:2D50.0052: item fetching failed at offset 5/7 [ 1266.233889][T14975] kovaplus 0003:1E7D:2D50.0052: parse failed [ 1266.241472][T14975] kovaplus 0003:1E7D:2D50.0052: probe with driver kovaplus failed with error -22 [ 1266.450832][T20336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.471192][ T5887] gspca_se401: ExtraFeatures: 255 [ 1266.481870][T20336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.516638][T18082] usb 5-1: USB disconnect, device number 21 [ 1266.674317][ T5887] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input77 [ 1266.711552][ T5887] usb 4-1: USB disconnect, device number 60 [ 1266.993452][T14978] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1267.143232][T14978] usb 3-1: Using ep0 maxpacket: 32 [ 1267.150725][T14978] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1267.161476][T14978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.184193][T14978] usb 3-1: config 0 descriptor?? [ 1267.324138][T20362] Smack: duplicate mount options [ 1267.331390][T20362] sctp: [Deprecated]: syz.4.3795 (pid 20362) Use of int in max_burst socket option. [ 1267.331390][T20362] Use struct sctp_assoc_value instead [ 1267.773328][ T5887] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1268.113664][T14978] aquacomputer_d5next 0003:0C70:F003.0053: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 1268.273209][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 1268.303933][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1268.318068][T20356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.349326][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1268.367231][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1268.389239][T20356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.405526][ T5887] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1268.423268][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.457768][ T5887] usb 5-1: config 0 descriptor?? [ 1268.464039][T18082] usb 3-1: USB disconnect, device number 17 [ 1268.477835][T20366] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1268.516115][ T5887] hub 5-1:0.0: USB hub found [ 1268.731688][ T5887] hub 5-1:0.0: 2 ports detected [ 1268.940371][T20385] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 1269.673400][T20396] x_tables: duplicate entry at hook 1 [ 1270.539951][T18082] usb 10-1: USB disconnect, device number 80 [ 1270.638061][T20400] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1270.670704][T20403] vivid-004: disconnect [ 1270.714247][T20401] vivid-004: reconnect [ 1270.972592][T20410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1271.876864][T14978] usb 5-1: USB disconnect, device number 22 [ 1271.894255][ T5887] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1272.135679][T20441] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzE [ 1272.393274][T14978] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1272.543300][T14978] usb 5-1: device descriptor read/64, error -71 [ 1272.593207][T18083] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1272.923378][T14978] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1272.977035][T18083] usb 3-1: Using ep0 maxpacket: 8 [ 1273.039242][T18083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.043362][T14977] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1273.050621][T18083] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1273.058795][T14978] usb 5-1: device descriptor read/64, error -71 [ 1273.067685][T18083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.084999][T18083] usb 3-1: config 0 descriptor?? [ 1273.194011][T14978] usb usb5-port1: attempt power cycle [ 1273.254110][T14977] usb 10-1: Using ep0 maxpacket: 32 [ 1273.537803][T14977] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1273.549585][T14977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1273.570730][T20444] fuse: Bad value for 'user_id' [ 1273.603185][T20444] fuse: Bad value for 'user_id' [ 1273.614365][T14977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1273.635807][T18083] hid-alps 0003:044E:121E.0054: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 1273.641243][T14977] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1273.687355][T14977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.699796][T14977] usb 10-1: config 0 descriptor?? [ 1273.709166][T20452] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1273.733166][T14978] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1273.745939][T14977] hub 10-1:0.0: USB hub found [ 1273.754773][T14978] usb 5-1: device descriptor read/8, error -71 [ 1273.881609][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.924430][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.952826][T18083] usb 3-1: USB disconnect, device number 18 [ 1379.002949][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1379.009982][ C1] rcu: 0-...!: (1 GPs behind) idle=0d3c/1/0x4000000000000000 softirq=103475/103479 fqs=2 [ 1379.022460][ C1] rcu: (detected by 1, t=10505 jiffies, g=124717, q=352 ncpus=2) [ 1379.030312][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1379.030364][ C0] NMI backtrace for cpu 0 [ 1379.030380][ C0] CPU: 0 UID: 0 PID: 20452 Comm: syz.9.3821 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 1379.030402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1379.030413][ C0] RIP: 0010:lock_acquire+0x232/0x550 [ 1379.030449][ C0] Code: 92 7e 83 f8 01 0f 85 a3 01 00 00 49 89 de 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 f7 e8 a7 2c 8b 00 48 c7 44 24 60 00 00 00 00 <9c> 8f 44 24 60 42 80 3c 2b 00 74 08 4c 89 f7 e8 9a 2b 8b 00 f6 44 [ 1379.030465][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000046 [ 1379.030482][ C0] RAX: 0000000000000001 RBX: 1ffff92000000f28 RCX: 3c110c64097a3400 [ 1379.030495][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c603460 [ 1379.030509][ C0] RBP: ffffc90000007a28 R08: ffffffff94297807 R09: 1ffffffff2852f00 [ 1379.030523][ C0] R10: dffffc0000000000 R11: fffffbfff2852f01 R12: 1ffff92000000f24 [ 1379.030537][ C0] R13: dffffc0000000000 R14: ffffc90000007940 R15: 0000000000000046 [ 1379.030551][ C0] FS: 00007f32d7a596c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1379.030567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1379.030580][ C0] CR2: 00007f32d7a17d58 CR3: 0000000068354000 CR4: 00000000003526f0 [ 1379.030602][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1379.030613][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1379.030626][ C0] Call Trace: [ 1379.030636][ C0] [ 1379.030646][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1379.030676][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1379.030704][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1379.030730][ C0] ? nmi_handle+0x2a/0x5a0 [ 1379.030757][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1379.030782][ C0] ? nmi_handle+0x14f/0x5a0 [ 1379.030800][ C0] ? nmi_handle+0x2a/0x5a0 [ 1379.030819][ C0] ? lock_acquire+0x232/0x550 [ 1379.030846][ C0] ? default_do_nmi+0x63/0x160 [ 1379.030874][ C0] ? exc_nmi+0x123/0x1f0 [ 1379.030900][ C0] ? end_repeat_nmi+0xf/0x53 [ 1379.030926][ C0] ? lock_acquire+0x232/0x550 [ 1379.030953][ C0] ? lock_acquire+0x232/0x550 [ 1379.030980][ C0] ? lock_acquire+0x232/0x550 [ 1379.031006][ C0] [ 1379.031013][ C0] [ 1379.031023][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1379.031049][ C0] ? __lock_acquire+0x1384/0x2050 [ 1379.031085][ C0] ? debug_objects_fill_pool+0x80/0x9f0 [ 1379.031104][ C0] debug_objects_fill_pool+0xa0/0x9f0 [ 1379.031122][ C0] ? debug_objects_fill_pool+0x80/0x9f0 [ 1379.031142][ C0] ? __lock_acquire+0x1384/0x2050 [ 1379.031174][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1379.031198][ C0] ? advance_sched+0xa02/0xca0 [ 1379.031228][ C0] debug_object_activate+0x135/0x510 [ 1379.031248][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1379.031272][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1379.031290][ C0] ? advance_sched+0xa02/0xca0 [ 1379.031316][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1379.031333][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1379.031354][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1379.031376][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 1379.031395][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1379.031429][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1379.031453][ C0] hrtimer_interrupt+0x396/0x990 [ 1379.031483][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1379.031505][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1379.031526][ C0] [ 1379.031533][ C0] [ 1379.031540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1379.031561][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1379.031581][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e 24 33 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 de 9a f5 65 8b 05 14 87 3b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1379.031602][ C0] RSP: 0018:ffffc90004527a60 EFLAGS: 00000206 [ 1379.031618][ C0] RAX: 3c110c64097a3400 RBX: 1ffff920008a4f50 RCX: ffffffff9a39e903 [ 1379.031632][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 1379.031645][ C0] RBP: ffffc90004527af0 R08: ffffffff901bdd2f R09: 1ffffffff2037ba5 [ 1379.031660][ C0] R10: dffffc0000000000 R11: fffffbfff2037ba6 R12: dffffc0000000000 [ 1379.031674][ C0] R13: 1ffff920008a4f4c R14: ffffc90004527a80 R15: 0000000000000246 [ 1379.031698][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1379.031719][ C0] ? blake2s_update+0x1a5/0x280 [ 1379.031747][ C0] add_device_randomness+0xe6/0x130 [ 1379.031779][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 1379.031808][ C0] ? bpf_lsm_capable+0x9/0x10 [ 1379.031833][ C0] do_adjtimex+0x370/0xae0 [ 1379.031860][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 1379.031883][ C0] ? __pfx___might_resched+0x10/0x10 [ 1379.031908][ C0] ? __might_fault+0xaa/0x120 [ 1379.031931][ C0] ? __pfx_lock_release+0x10/0x10 [ 1379.031963][ C0] ? __might_fault+0xc6/0x120 [ 1379.031988][ C0] __x64_sys_clock_adjtime+0x1e1/0x290 [ 1379.032014][ C0] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 1379.032051][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1379.032079][ C0] ? do_syscall_64+0x100/0x230 [ 1379.032103][ C0] ? do_syscall_64+0xb6/0x230 [ 1379.032127][ C0] do_syscall_64+0xf3/0x230 [ 1379.032149][ C0] ? clear_bhb_loop+0x35/0x90 [ 1379.032170][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.032190][ C0] RIP: 0033:0x7f32d6b7e719 [ 1379.032207][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.032222][ C0] RSP: 002b:00007f32d7a59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1379.032239][ C0] RAX: ffffffffffffffda RBX: 00007f32d6d35f80 RCX: 00007f32d6b7e719 [ 1379.032253][ C0] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000000 [ 1379.032265][ C0] RBP: 00007f32d6bf132e R08: 0000000000000000 R09: 0000000000000000 [ 1379.032277][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.032288][ C0] R13: 0000000000000000 R14: 00007f32d6d35f80 R15: 00007fff1f3d4978 [ 1379.032309][ C0] [ 1379.032355][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g124717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1379.632308][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1379.642301][ C1] rcu: RCU grace-period kthread stack dump: [ 1379.648210][ C1] task:rcu_preempt state:R running task stack:24656 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1379.660010][ C1] Call Trace: [ 1379.663420][ C1] [ 1379.666379][ C1] __schedule+0x185a/0x4b70 [ 1379.670961][ C1] ? __pfx___schedule+0x10/0x10 [ 1379.675840][ C1] ? __pfx_lock_release+0x10/0x10 [ 1379.680892][ C1] ? __asan_memset+0x23/0x50 [ 1379.685512][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1379.691349][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1379.697716][ C1] ? schedule+0x90/0x320 [ 1379.701986][ C1] schedule+0x14b/0x320 [ 1379.706169][ C1] schedule_timeout+0x1be/0x310 [ 1379.711053][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1379.716458][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1379.721788][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1379.727374][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1379.732246][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1379.737484][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1379.743666][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1379.748976][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1379.754900][ C1] ? finish_swait+0xd4/0x1e0 [ 1379.759536][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1379.764154][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1379.769371][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1379.775292][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1379.780353][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1379.785577][ C1] kthread+0x2f0/0x390 [ 1379.789670][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1379.794892][ C1] ? __pfx_kthread+0x10/0x10 [ 1379.799508][ C1] ret_from_fork+0x4b/0x80 [ 1379.803972][ C1] ? __pfx_kthread+0x10/0x10 [ 1379.808599][ C1] ret_from_fork_asm+0x1a/0x30 [ 1379.813407][ C1] [ 1379.816443][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1379.822782][ C1] CPU: 1 UID: 0 PID: 15157 Comm: kworker/u8:16 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 1379.833822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1379.843901][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1379.850445][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 1379.857228][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 86 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 31 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 ef [ 1379.876854][ C1] RSP: 0018:ffffc9000bd576e0 EFLAGS: 00000293 [ 1379.882959][ C1] RAX: ffffffff8188eaab RBX: 1ffff110170c8ca5 RCX: ffff88802fef0000 [ 1379.890948][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1379.898949][ C1] RBP: ffffc9000bd578e0 R08: ffffffff8188ea7a R09: 1ffffffff2852f00 [ 1379.906942][ C1] R10: dffffc0000000000 R11: fffffbfff2852f01 R12: dffffc0000000000 [ 1379.914935][ C1] R13: ffff8880b8646528 R14: ffff8880b873fc40 R15: 0000000000000000 [ 1379.922962][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1379.931926][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1379.938534][ C1] CR2: 00007f32d7a15ff0 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1379.946556][ C1] DR0: 0000000000000063 DR1: 0000000000000000 DR2: 0000000000000002 [ 1379.954552][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1379.962547][ C1] Call Trace: [ 1379.965848][ C1] [ 1379.968720][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1379.975095][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 1379.980768][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 1379.986108][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1379.991967][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1379.998246][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 1380.003657][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1380.009323][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 1380.014548][ C1] ? acct_account_cputime+0x207/0x210 [ 1380.019959][ C1] ? update_process_times+0x1ce/0x230 [ 1380.025366][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1380.030512][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1380.036002][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 1380.041400][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1380.047448][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1380.053194][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1380.059297][ C1] ? hrtimer_interrupt+0x396/0x990 [ 1380.064461][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1380.070642][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1380.076476][ C1] [ 1380.079424][ C1] [ 1380.082378][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.088578][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 1380.094755][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 1380.100935][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 1380.107121][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 1380.113217][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1380.118280][ C1] ? __pfx___text_poke+0x10/0x10 [ 1380.123245][ C1] ? process_scheduled_works+0x976/0x1850 [ 1380.129001][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1380.135353][ C1] ? __pfx___might_resched+0x10/0x10 [ 1380.140669][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 1380.146244][ C1] ? __pfx___might_resched+0x10/0x10 [ 1380.151567][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1380.156624][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1380.161772][ C1] text_poke_bp_batch+0x352/0xb30 [ 1380.166841][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1380.172419][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1380.177478][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1380.183763][ C1] ? process_scheduled_works+0x976/0x1850 [ 1380.189518][ C1] text_poke_finish+0x30/0x50 [ 1380.194224][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1380.200245][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 1380.206185][ C1] static_key_enable+0x1a/0x20 [ 1380.210981][ C1] toggle_allocation_gate+0xbc/0x260 [ 1380.216305][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1380.222235][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1380.228614][ C1] process_scheduled_works+0xa63/0x1850 [ 1380.234223][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1380.240253][ C1] ? assign_work+0x364/0x3d0 [ 1380.244881][ C1] worker_thread+0x870/0xd30 [ 1380.249520][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1380.254581][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1380.259728][ C1] kthread+0x2f0/0x390 [ 1380.263822][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1380.268962][ C1] ? __pfx_kthread+0x10/0x10 [ 1380.273579][ C1] ret_from_fork+0x4b/0x80 [ 1380.278025][ C1] ? __pfx_kthread+0x10/0x10 [ 1380.282637][ C1] ret_from_fork_asm+0x1a/0x30 [ 1380.287453][ C1]