last executing test programs: 2m13.386182739s ago: executing program 0 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xffffffff, 0x1}}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000040)={[{@gid}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$eJzs3U9PE0EYBvBndrtlKwRXwJB4MiiJJwJ40HiRGOLFL+DBEBFKQlgxUUyUxIiejfFmYuLRm2ejX0Evxi+gJw7Gk16IB9fMu7PtbNndllJYGp5fYt125887nZ3tDKQMiOjYujb//d3Fbf1PeQBcAFcAB4APVACcxrj/cH2jbUFu40ghzql2pVlar2dl9WFyGIF+VsGQ/RodjCiKoh9tU/0+lFioPMoewRYHGDCjU877hx7ZwdiK23W8WD2sdrCDRxguMxwiIiqf+fx3zKfEkJm/Ow4waebh/f75n5rf7JQXx5HQ+Px34ueR0u/PSTml13urG2F9OV7C6d53klViVlmZ10TUfLuriK8sd9Caclm1ZJNYnNrKalif2pICnuOqYSUbk8dlJA0RedFW41QTGWvTAkVtLzYobfB0G2Zz4h8tqjFzAfzpJ15nV7fwpYOY1Gf1VS2oAG+w3Jj/VSKlu0l6KmgZKnH80/klSiuDOFWqlc3wT0klZ0wN+Pi+2cpa3vvqw9WxZNGlqNb5e5DE+aqanwsjSP9YIW7dTH7rJNcoUFGyarBzzTYS/c3MNdZaV23FC+tTS/fCvIu+tzJXdOqluqkm8AsfMG/N/x2dehL5IzM1ypWkNFdGYXsqkjKnH1NkaN7d08gkcT09XjvK8wJ3cBnDDx5vri2GYf1++QfJUOky+9kexxNfiOZy1K/o/6008PWBB6Bnlf6LoijzVAWH0QWeNPXS22aTN9cWlbnn7a8KfedsOTWXnxjAHADzSnJH6Kb2p41cA80C2+QKpK4/urflldQF6SUHSVRyKrl0D6Z3kqpSp1wMdDRSal1UeuPJ2mLY1Z2I+kyz0zF+q+xgqAx6vqDi9Z+1XpmWu45+CArWP176aW1XAqvEmZwV0Ig8nuhsBdcoNneeOJgctFlznbsAnG+p0UFS47PWYgMTJ47ibyX3/qsMNY9vuM2f/xMRERERERERERERERERERERERER9Zu9fhuhm68TpGvcPoZ/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaH+s/X8BV3aMqWbt/1u0U5Nw4x1i/F7s/+t2sP+v2urnvciIjoT/AQAA//8TP1iR") r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000b40)="df", 0x1, 0xfffffffffffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000240)='mmap_lock_acquire_returned\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x19, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2m7.706594979s ago: executing program 0 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000640)="a33d0f096afbe10bdddf07f52a7d51f736b564948920262f", 0x18}], 0x2) 2m6.867706075s ago: executing program 1 (id=164): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000001b40)={0x1, [{0x2, 0x0, 0x8000, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xffffff56, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x18, 0xa1a, &(0x7f0000000480)="f104fe"}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x18, 0x0}, {0x2, 0x0, 0x4, 0x0}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002500)=@newtaction={0x88, 0x13, 0x53b, 0xfffffffd, 0x0, {}, [{0x74, 0x1, [@m_mirred={0x70, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3, 0x6, 0x6, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x7, 0x2, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000200)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \''], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x2a4003, 0x0) r8 = dup3(r7, r0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) 2m6.08559187s ago: executing program 1 (id=167): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x80, 0xe9, 0x2, 0x3, 0x6, 0x7, 0x127, 0x38, 0x123, 0x0, 0x4, 0x20, 0x1, 0x5, 0x800, 0x1}, [{0x5, 0x7, 0x4, 0x5, 0x7f, 0x6, 0x0, 0x81}]}, 0x58) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 2m5.841146535s ago: executing program 1 (id=168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xffffffff, 0x1}}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000040)={[{@gid}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$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") r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000b40)="df", 0x1, 0xfffffffffffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000240)='mmap_lock_acquire_returned\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x19, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2m5.494543731s ago: executing program 3 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x40000) recvmmsg(r1, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 2m4.952167222s ago: executing program 3 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="59bb00000000000000000100000008002b81"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000021000000001c000000000000850000007d180000a50000000400f8fd855112aaf8c1aaaad90c1a83a9b0f9a222bb60416e911f53a53a55257ddfe466f2534f4760c5f2aa752355b25c31935daa0c68a65fff3bc7eeba4f97a0d8fe29ef21c6393c5000b976d5f31dd0c9595f974c9ff3ae30497a4a7e975bddab347478bb694310d5fc1e31099c43"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 2m2.914014541s ago: executing program 3 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x4, 0x4}, 0x100, './file0\x00'}) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYRES64, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x40c40d1}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x8, 0x5, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x4e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x60, 0x0, 0x1, [0x2, 0x3, 0x0, 0x9, 0x7fffffff, 0x2000007]}, @generic={0x89, 0xe, "96014d515dfa5b79c685572d"}, @noop]}}}}}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x21, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) 2m2.887096692s ago: executing program 0 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x638a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) open$dir(0x0, 0x0, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x3, 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m2.344628602s ago: executing program 3 (id=175): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)="8e1d949de5ada462540c0c71aa0600fbc8d9a68621a92a66572f6bde8aef6f3a4140b500"/50, 0x32, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000002c0), 0x7fffffff, 0x0) io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c5}) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x28f, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fanotify_init(0x4, 0x800) fanotify_mark(r10, 0x1, 0x8000003, r7, 0x0) write(r9, &(0x7f0000000040)='f', 0x1) tee(r8, r7, 0x827, 0x8) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 2m1.077179107s ago: executing program 2 (id=177): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d8c, 0x400, 0x20040000, 0x22b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xffff7fffffff13e9, 0xffffffffffffffff, 0x1d, {0x27ffffbffffffff, 0x9}, 0x54}, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) ppoll(&(0x7f0000000000)=[{r6, 0x1200}], 0x1, 0x0, 0x0, 0x0) 2m0.931141589s ago: executing program 3 (id=178): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d8c, 0x400, 0x20040000, 0x22b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x40020100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xffff7fffffff13e9, 0xffffffffffffffff, 0x1d, {0x27ffffbffffffff, 0x9}, 0x54}, 0x1) 2m0.234455153s ago: executing program 0 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008090}, 0x40000) recvmmsg(r1, 0x0, 0x0, 0x40010061, 0x0) 2m0.232066723s ago: executing program 3 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) mknod(0x0, 0xc000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x101001) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x6, 0x2, 0x6, {0x202, 0x4, 0xf, 0x2}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x37, 0xffffbffe, 0x73}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000d50431cb2d5c"], 0x48) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r5}) sched_setscheduler(0x0, 0x1, 0x0) 1m59.254670472s ago: executing program 32 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) mknod(0x0, 0xc000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x101001) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x6, 0x2, 0x6, {0x202, 0x4, 0xf, 0x2}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x37, 0xffffbffe, 0x73}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000d50431cb2d5c"], 0x48) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r5}) sched_setscheduler(0x0, 0x1, 0x0) 1m59.240746452s ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="59bb00000000000000000100000008002b81"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000021000000001c000000000000850000007d180000a50000000400f8fd855112aaf8c1aaaad90c1a83a9b0f9a222bb60416e911f53a53a55257ddfe466f2534f4760c5f2aa752355b25c31935daa0c68a65fff3bc7eeba4f97a0d8fe29ef21c6393c5000b976d5f31dd0c9595f974c9ff3ae30497a4a7e975bddab347478bb694310d5fc1e31099c43"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1m59.199083962s ago: executing program 2 (id=183): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x5, r1, 0x0, 0x0, 0x3ff}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@private, @in=@multicast2}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000001c0)=0xe4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_io_uring_setup(0x1361, &(0x7f0000000000)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000100000000000b20203270757ae5d89a3eda3"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) r5 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r5, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) 1m58.771346681s ago: executing program 1 (id=184): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x68000, 0xe000) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000100), &(0x7f0000000180)=0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x180884c, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 1m56.74540585s ago: executing program 2 (id=185): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 1m52.698191388s ago: executing program 1 (id=186): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)="8e1d949de5ada462540c0c71aa0600fbc8d9a68621a92a66572f6bde8aef6f3a4140b500"/50, 0x32, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000002c0), 0x7fffffff, 0x0) io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c5}) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x28f, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fanotify_init(0x4, 0x800) fanotify_mark(r10, 0x1, 0x8000003, r7, 0x0) write(r9, &(0x7f0000000040)='f', 0x1) tee(r8, r7, 0x827, 0x8) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 1m52.534956391s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_connect$uac1(0x2, 0xdb, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x7, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x514, 0x4}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x400, 0x4, '\x00\t\x00\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe5, 0x1, 0x7, 0x5, "ac", "bca6e8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x1, 0x3, 0x7, "", "47b53d"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7ff, 0x800, 0x6, "a05508d945d68a5d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xa6, 0x1, 0x6c, {0x7, 0x25, 0x1, 0x3, 0x7, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0x8, "f1"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x2, 0x10, 0x2a, "440f2cd0e725ffe599"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7, "d7bfd9", "5591"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x54, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8, 0x8000}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x3, 0x2, 0x10, 0x6}, 0x25, &(0x7f00000001c0)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x41, 0x0, 0x256}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "6b7e79265810815f855b332ba3b99513"}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "1a60adef3e76ce0c17bb52eb17c2bed043d15ac0f17fba3495aa345bc58d532994928518bdedaa4fe7b1abe6ddb1c0b54eb2ad086cba5147eb1affe2f6358573eb8b02032426839770a03f6c4157db536b9b1a5aa1e36f2c16751bcf85c8128f0f9ec674a7616b106759579e9b47e02dc61e83dd942b5ae95338fcfe1cb9835e206aa82c7192a5c66560405d447de336723a3c8e7ca2aebb63d971e7aef4fd9e5ae4193870c742dc"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x61, &(0x7f00000003c0)=@string={0x61, 0x3, "0ab9e4928f7c63a19935d59eacb00e341f3ad4e5b1046049a786fd19f6e5ea8a9c97775be9756727e0a468d9390e119e52e769bbcfc24b2e76583efd4fd625ece42497fc0bbe13c1113ae916cdc7d6433c66820731c3612b84559191a016be"}}, {0x11, &(0x7f0000000440)=@string={0x11, 0x3, "d48128a97ec00b22019a8554038d07"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xd0c3}}]}) socket$pppoe(0x18, 0x1, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) close(0x3) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 1m52.395977344s ago: executing program 2 (id=188): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f00000002c0)='./file1\x00', 0x282c803, &(0x7f0000000340)=ANY=[], 0xb, 0x648, &(0x7f0000001080)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="2424000020190000080013"], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000740)=@x86={0x2, 0x5, 0x0, 0x0, 0xfffffffe, 0x82, 0xc, 0x7, 0x1, 0xfd, 0x80, 0xc, 0x0, 0xf, 0x7, 0x9, 0x8, 0xff, 0x2, '\x00', 0x6, 0x3}) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57) removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0xdf}}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x280, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x65fb0793}, {0x6, 0x16, 0xb313}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3b}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x991f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xff78}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x280}, 0x1, 0x0, 0x0, 0x800}, 0x4014) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r8, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x9d3b, 0xe60]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x6c}, {0x18}, {0x5}, {0x1}, {0x24}, {0x30}, {0x5}, {0x9, 0x1}, {0x5, 0x1}, {0x6c}, {0x0, 0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x18}, {0x18, 0x1}, {0x1}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xe9}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000801) dup(r4) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x4}}, 0x20) 1m51.54299421s ago: executing program 2 (id=189): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d8c, 0x400, 0x20040000, 0x22b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x40020100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xffff7fffffff13e9, 0xffffffffffffffff, 0x1d, {0x27ffffbffffffff, 0x9}, 0x54}, 0x1) 1m50.958806821s ago: executing program 2 (id=190): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d8c, 0x400, 0x20040000, 0x22b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xffff7fffffff13e9, 0xffffffffffffffff, 0x1d, {0x27ffffbffffffff, 0x9}, 0x54}, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) ppoll(&(0x7f0000000000)=[{r6, 0x1200}], 0x1, 0x0, 0x0, 0x0) 1m49.699344176s ago: executing program 1 (id=191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008090}, 0x40000) recvmmsg(r1, 0x0, 0x0, 0x40010061, 0x0) 1m17.927416808s ago: executing program 33 (id=187): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_connect$uac1(0x2, 0xdb, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x7, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x514, 0x4}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x400, 0x4, '\x00\t\x00\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe5, 0x1, 0x7, 0x5, "ac", "bca6e8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x1, 0x3, 0x7, "", "47b53d"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7ff, 0x800, 0x6, "a05508d945d68a5d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xa6, 0x1, 0x6c, {0x7, 0x25, 0x1, 0x3, 0x7, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0x8, "f1"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x2, 0x10, 0x2a, "440f2cd0e725ffe599"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7, "d7bfd9", "5591"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x54, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8, 0x8000}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x3, 0x2, 0x10, 0x6}, 0x25, &(0x7f00000001c0)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x41, 0x0, 0x256}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "6b7e79265810815f855b332ba3b99513"}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "1a60adef3e76ce0c17bb52eb17c2bed043d15ac0f17fba3495aa345bc58d532994928518bdedaa4fe7b1abe6ddb1c0b54eb2ad086cba5147eb1affe2f6358573eb8b02032426839770a03f6c4157db536b9b1a5aa1e36f2c16751bcf85c8128f0f9ec674a7616b106759579e9b47e02dc61e83dd942b5ae95338fcfe1cb9835e206aa82c7192a5c66560405d447de336723a3c8e7ca2aebb63d971e7aef4fd9e5ae4193870c742dc"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x61, &(0x7f00000003c0)=@string={0x61, 0x3, "0ab9e4928f7c63a19935d59eacb00e341f3ad4e5b1046049a786fd19f6e5ea8a9c97775be9756727e0a468d9390e119e52e769bbcfc24b2e76583efd4fd625ece42497fc0bbe13c1113ae916cdc7d6433c66820731c3612b84559191a016be"}}, {0x11, &(0x7f0000000440)=@string={0x11, 0x3, "d48128a97ec00b22019a8554038d07"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xd0c3}}]}) socket$pppoe(0x18, 0x1, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) close(0x3) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 0s ago: executing program 34 (id=191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008090}, 0x40000) recvmmsg(r1, 0x0, 0x0, 0x40010061, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 82.680884][ T5774] cgroup: Unknown subsys name 'net' [ 82.818024][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.500421][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.895336][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.904351][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.912383][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.912449][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.920432][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.935334][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.936119][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.945066][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.952717][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.958133][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.964548][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.979828][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.981227][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.987970][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.995567][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.002708][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.009986][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.016107][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.025553][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.036439][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.043957][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.064606][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.072567][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.081099][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.684388][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.811681][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.932971][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 87.943192][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.975884][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.983428][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.991437][ T5790] bridge_slave_0: entered allmulticast mode [ 87.999144][ T5790] bridge_slave_0: entered promiscuous mode [ 88.013757][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.021073][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.029089][ T5790] bridge_slave_1: entered allmulticast mode [ 88.036068][ T5790] bridge_slave_1: entered promiscuous mode [ 88.147402][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.161950][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.172425][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.184441][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.191893][ T5788] bridge_slave_0: entered allmulticast mode [ 88.200361][ T5788] bridge_slave_0: entered promiscuous mode [ 88.212967][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.220611][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.227835][ T5788] bridge_slave_1: entered allmulticast mode [ 88.235833][ T5788] bridge_slave_1: entered promiscuous mode [ 88.311007][ T5790] team0: Port device team_slave_0 added [ 88.345588][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.359486][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.375633][ T5790] team0: Port device team_slave_1 added [ 88.382875][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.390519][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.397721][ T5787] bridge_slave_0: entered allmulticast mode [ 88.404880][ T5787] bridge_slave_0: entered promiscuous mode [ 88.463272][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.470794][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.478016][ T5787] bridge_slave_1: entered allmulticast mode [ 88.485921][ T5787] bridge_slave_1: entered promiscuous mode [ 88.521736][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.528926][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.555637][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.570512][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.577516][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603715][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.629985][ T5788] team0: Port device team_slave_0 added [ 88.636300][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.643635][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.651051][ T5789] bridge_slave_0: entered allmulticast mode [ 88.658026][ T5789] bridge_slave_0: entered promiscuous mode [ 88.695176][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.705850][ T5788] team0: Port device team_slave_1 added [ 88.740457][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.747620][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.755847][ T5789] bridge_slave_1: entered allmulticast mode [ 88.763624][ T5789] bridge_slave_1: entered promiscuous mode [ 88.786278][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.808770][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.815778][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.842055][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.855128][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.862210][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.888223][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.976301][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.990286][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.002449][ T5787] team0: Port device team_slave_0 added [ 89.012777][ T5787] team0: Port device team_slave_1 added [ 89.022981][ T5790] hsr_slave_0: entered promiscuous mode [ 89.030178][ T5790] hsr_slave_1: entered promiscuous mode [ 89.054638][ T5788] hsr_slave_0: entered promiscuous mode [ 89.061250][ T5788] hsr_slave_1: entered promiscuous mode [ 89.067624][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.075576][ T5788] Cannot create hsr debugfs directory [ 89.089704][ T5102] Bluetooth: hci0: command tx timeout [ 89.136908][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.144272][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.170340][ T5102] Bluetooth: hci1: command tx timeout [ 89.170394][ T50] Bluetooth: hci3: command tx timeout [ 89.176550][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.183347][ T50] Bluetooth: hci2: command tx timeout [ 89.201648][ T5789] team0: Port device team_slave_0 added [ 89.227966][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.235088][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.261203][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.281476][ T5789] team0: Port device team_slave_1 added [ 89.373252][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.380413][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.406397][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.425660][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.433027][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.460037][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.509943][ T5787] hsr_slave_0: entered promiscuous mode [ 89.516867][ T5787] hsr_slave_1: entered promiscuous mode [ 89.523920][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.531919][ T5787] Cannot create hsr debugfs directory [ 89.642187][ T5789] hsr_slave_0: entered promiscuous mode [ 89.650522][ T5789] hsr_slave_1: entered promiscuous mode [ 89.656852][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.665177][ T5789] Cannot create hsr debugfs directory [ 89.955019][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.975265][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.999611][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.010699][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.089970][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.101695][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.112427][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.124346][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.221646][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.247787][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.264168][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.275863][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.365158][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.394530][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.405704][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.416513][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.470630][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.549444][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.616258][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.627482][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.644281][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.663954][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.671414][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.695204][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.714661][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.721880][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.731799][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.739026][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.766344][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.773568][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.783953][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.791178][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.813471][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.825842][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.833076][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.925542][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.975660][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.982978][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.028243][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.035475][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.178807][ T50] Bluetooth: hci0: command tx timeout [ 91.180885][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.249115][ T50] Bluetooth: hci3: command tx timeout [ 91.254615][ T50] Bluetooth: hci1: command tx timeout [ 91.258777][ T5102] Bluetooth: hci2: command tx timeout [ 91.493537][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.635359][ T5790] veth0_vlan: entered promiscuous mode [ 91.664811][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.692993][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.707627][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.716761][ T5790] veth1_vlan: entered promiscuous mode [ 91.827228][ T5788] veth0_vlan: entered promiscuous mode [ 91.862654][ T5789] veth0_vlan: entered promiscuous mode [ 91.879637][ T5788] veth1_vlan: entered promiscuous mode [ 91.893001][ T5790] veth0_macvtap: entered promiscuous mode [ 91.906940][ T5787] veth0_vlan: entered promiscuous mode [ 91.929743][ T5790] veth1_macvtap: entered promiscuous mode [ 91.939677][ T5789] veth1_vlan: entered promiscuous mode [ 91.961961][ T5787] veth1_vlan: entered promiscuous mode [ 92.016735][ T5788] veth0_macvtap: entered promiscuous mode [ 92.046389][ T5789] veth0_macvtap: entered promiscuous mode [ 92.063310][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.071907][ T5788] veth1_macvtap: entered promiscuous mode [ 92.095167][ T5787] veth0_macvtap: entered promiscuous mode [ 92.107264][ T5787] veth1_macvtap: entered promiscuous mode [ 92.115071][ T5789] veth1_macvtap: entered promiscuous mode [ 92.150255][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.174884][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184970][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.194937][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.206266][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.221387][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.233330][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.246753][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.255064][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.266148][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.276707][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.288164][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.302338][ T54] cfg80211: failed to load regulatory.db [ 92.305474][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.319887][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.330676][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.342860][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.351921][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.362546][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.373606][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.384324][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.394392][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.404917][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.416283][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.435464][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.446271][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.456705][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.469362][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.481184][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.501822][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.511287][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.522802][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531899][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.566969][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.577959][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.588110][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.599020][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.609771][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.620373][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.632706][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.644043][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.653420][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.662510][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.671919][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721672][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.732203][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.741667][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750981][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.852730][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.865830][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.959234][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.967164][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.995444][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.028820][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.078918][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.086806][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.165357][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.175088][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.248581][ T5102] Bluetooth: hci0: command tx timeout [ 93.262538][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271386][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.302214][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.317766][ T5880] syz.2.3[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.327045][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.336517][ T5102] Bluetooth: hci2: command tx timeout [ 93.341480][ T5800] Bluetooth: hci3: command tx timeout [ 93.347444][ T50] Bluetooth: hci1: command tx timeout [ 93.540182][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.577108][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795383][ T5903] tipc: Started in network mode [ 94.810926][ T5903] tipc: Node identity 2618980b4086, cluster identity 4711 [ 94.848114][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.872113][ T5910] loop0: detected capacity change from 0 to 64 [ 94.916717][ T5903] tipc: Enabled bearer , priority 0 [ 95.086656][ T5901] tipc: Resetting bearer [ 95.228624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.328789][ T50] Bluetooth: hci0: command tx timeout [ 95.408843][ T50] Bluetooth: hci2: command tx timeout [ 95.414332][ T5800] Bluetooth: hci1: command tx timeout [ 95.414362][ T5102] Bluetooth: hci3: command tx timeout [ 95.568909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.669644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.047691][ T5881] tipc: Node number set to 1721669643 [ 98.984099][ T5901] tipc: Disabling bearer [ 99.040733][ T5926] tipc: Enabling of bearer rejected, failed to enable media [ 99.049905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.080756][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 99.388801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.874860][ T5970] tipc: Started in network mode [ 100.902193][ T5970] tipc: Node identity f21a35fb60a7, cluster identity 4711 [ 100.943529][ T5970] tipc: Enabled bearer , priority 0 [ 101.021173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.071600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.105920][ T5966] tipc: Resetting bearer [ 101.973312][ T5881] tipc: Node number set to 2461873659 [ 103.327374][ T5966] tipc: Disabling bearer [ 103.357118][ T5979] tipc: Enabling of bearer rejected, failed to enable media [ 103.558005][ T6006] loop2: detected capacity change from 0 to 64 [ 103.768755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.810617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.757157][ T6021] input: syz1 as /devices/virtual/input/input5 [ 105.098605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.799144][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.011904][ T23] usb 2-1: device descriptor read/64, error -71 [ 106.106232][ T6038] tipc: Started in network mode [ 106.116945][ T6038] tipc: Node identity 229cee4daf3b, cluster identity 4711 [ 106.125734][ T6038] tipc: Enabled bearer , priority 0 [ 106.148823][ T6034] tipc: Resetting bearer [ 106.298571][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.498720][ T23] usb 2-1: device descriptor read/64, error -71 [ 106.640403][ T23] usb usb2-port1: attempt power cycle [ 107.130729][ T5881] tipc: Node number set to 2376592973 [ 107.132953][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.179165][ T23] usb 2-1: device descriptor read/8, error -71 [ 107.449442][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.520120][ T23] usb 2-1: device descriptor read/8, error -71 [ 107.658596][ T23] usb usb2-port1: unable to enumerate USB device [ 108.910134][ T6060] (null): rxe_set_mtu: Set mtu to 1024 [ 109.021028][ T6062] loop1: detected capacity change from 0 to 512 [ 109.035298][ T6062] ext4: Unknown parameter 'smackfsroot' [ 110.482609][ T6034] tipc: Disabling bearer [ 110.521069][ T6051] tipc: Enabling of bearer rejected, failed to enable media [ 111.048227][ T6060] infiniband syz1: set active [ 111.071925][ T6060] infiniband syz1: added syz_tun [ 111.091252][ T6060] syz1: rxe_create_cq: returned err = -12 [ 111.103374][ T6060] infiniband syz1: Couldn't create ib_mad CQ [ 111.109258][ T6087] loop3: detected capacity change from 0 to 64 [ 111.141371][ T6060] infiniband syz1: Couldn't open port 1 [ 111.285497][ T6060] RDS/IB: syz1: added [ 111.300954][ T6060] smc: adding ib device syz1 with port count 1 [ 111.310142][ T6060] smc: ib device syz1 port 1 has pnetid [ 111.670037][ T6094] tipc: Enabled bearer , priority 0 [ 111.683826][ T6092] tipc: Resetting bearer [ 113.667396][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'. [ 116.550350][ T6092] tipc: Disabling bearer [ 116.658795][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 117.406195][ T6161] loop1: detected capacity change from 0 to 64 [ 117.481184][ T6160] tipc: Enabled bearer , priority 0 [ 117.564527][ T6150] tipc: Resetting bearer [ 118.107363][ T6149] loop3: detected capacity change from 0 to 32768 [ 118.164321][ T6149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.86 (6149) [ 118.320489][ T6149] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.352283][ T6149] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.379781][ T6149] BTRFS info (device loop3): force clearing of disk cache [ 118.421543][ T6149] BTRFS info (device loop3): force zlib compression, level 3 [ 118.468840][ T6149] BTRFS info (device loop3): enabling auto defrag [ 118.496700][ T6149] BTRFS info (device loop3): max_inline at 0 [ 118.518773][ T6149] BTRFS info (device loop3): using free space tree [ 118.812462][ T6149] BTRFS info (device loop3): enabling ssd optimizations [ 118.824148][ T6149] BTRFS info (device loop3): auto enabling async discard [ 118.878995][ T6149] BTRFS info (device loop3): rebuilding free space tree [ 119.419759][ T28] audit: type=1326 audit(1758139237.134:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663c18eba9 code=0x7ffc0000 [ 119.495326][ T28] audit: type=1326 audit(1758139237.144:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663c18eba9 code=0x7ffc0000 [ 119.799938][ T5790] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.102311][ T6201] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 120.982398][ T6202] loop2: detected capacity change from 0 to 131072 [ 121.044293][ T6202] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 121.054328][ T6202] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 121.087488][ T6202] F2FS-fs (loop2): invalid crc value [ 121.192676][ T6202] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.358363][ T6202] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 121.365745][ T6202] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 121.417977][ T6202] F2FS-fs (loop2): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 122.665758][ T6213] loop3: detected capacity change from 0 to 32768 [ 122.677646][ T6213] ======================================================= [ 122.677646][ T6213] WARNING: The mand mount option has been deprecated and [ 122.677646][ T6213] and is ignored by this kernel. Remove the mand [ 122.677646][ T6213] option from the mount to silence this warning. [ 122.677646][ T6213] ======================================================= [ 122.799202][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 124.254965][ T6150] tipc: Disabling bearer [ 124.900425][ T6230] loop1: detected capacity change from 0 to 64 [ 126.059794][ T6245] tipc: Started in network mode [ 126.119604][ T6245] tipc: Node identity 4644b19004bb, cluster identity 4711 [ 126.127045][ T6245] tipc: Enabled bearer , priority 0 [ 126.170457][ T6242] tipc: Resetting bearer [ 127.208410][ T5791] tipc: Node number set to 1124053392 [ 127.278057][ T5791] IPVS: starting estimator thread 0... [ 127.328526][ T6265] virtiofs: Unknown parameter 'always' [ 127.805121][ T6268] IPVS: using max 17 ests per chain, 40800 per kthread [ 128.328275][ C1] sched: RT throttling activated [ 128.967518][ T6265] loop2: detected capacity change from 0 to 262144 [ 129.074600][ T6265] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.180807][ T6265] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.092064][ T6287] loop0: detected capacity change from 0 to 32768 [ 131.301762][ T6287] (syz.0.124,6287,1):ocfs2_journal_addressable:1993 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 131.301841][ T6287] (syz.0.124,6287,1):ocfs2_check_volume:2490 ERROR: status = -27 [ 131.335284][ T6287] (syz.0.124,6287,1):ocfs2_mount_volume:1822 ERROR: status = -27 [ 131.356386][ T6287] (syz.0.124,6287,1):ocfs2_fill_super:1178 ERROR: status = -27 [ 131.907430][ T6298] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 132.698873][ T6306] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 133.265532][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.273380][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.644622][ T6242] tipc: Disabling bearer [ 134.641068][ T6349] tipc: Enabled bearer , priority 0 [ 134.679062][ T6342] tipc: Resetting bearer [ 134.682684][ T6350] loop0: detected capacity change from 0 to 64 [ 135.527202][ T6360] Zero length message leads to an empty skb [ 135.681254][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.727787][ T6362] loop3: detected capacity change from 0 to 1024 [ 135.888607][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 135.948042][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 135.972735][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.008676][ T23] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 136.028009][ T23] usb 3-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 136.044211][ T23] usb 3-1: Product: syz [ 136.049287][ T23] usb 3-1: Manufacturer: syz [ 136.053992][ T23] usb 3-1: SerialNumber: syz [ 136.104486][ T23] usb 3-1: config 0 descriptor?? [ 136.144077][ T23] smsusb:smsusb_probe: board id=2, interface number 0 [ 136.166630][ T23] smsusb:smsusb_probe: Device initialized with return code -19 [ 136.289533][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.352317][ T27] usb 3-1: USB disconnect, device number 2 [ 136.484257][ T5860] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 136.508536][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 136.524219][ T5860] usb 4-1: can't read configurations, error -61 [ 136.698434][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.929016][ T5860] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 136.946012][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 136.955009][ T5860] usb 4-1: can't read configurations, error -61 [ 136.963649][ T5860] usb usb4-port1: attempt power cycle [ 137.388527][ T5860] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.447379][ T5860] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 137.467202][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 137.475037][ T5860] usb 4-1: can't read configurations, error -61 [ 137.638406][ T5860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.696861][ T5860] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 137.733494][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 137.749096][ T5860] usb 4-1: can't read configurations, error -61 [ 137.763857][ T5860] usb usb4-port1: unable to enumerate USB device [ 137.848420][ T5791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.050452][ T5791] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 138.061189][ T5791] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 138.074002][ T5791] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 138.085305][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.093429][ T5791] usb 3-1: Product: syz [ 138.098232][ T5791] usb 3-1: SerialNumber: syz [ 138.175056][ T5791] usb 3-1: bad CDC descriptors [ 138.226385][ T5791] usb 3-1: bad CDC descriptors [ 138.254899][ T5791] option 3-1:7.0: GSM modem (1-port) converter detected [ 138.346963][ T5791] usb 3-1: USB disconnect, device number 3 [ 138.366139][ T5791] option 3-1:7.0: device disconnected [ 138.577239][ T6342] tipc: Disabling bearer [ 138.695023][ T42] hfsplus: b-tree write err: -5, ino 4 [ 139.302499][ T5881] IPVS: starting estimator thread 0... [ 139.539199][ T6392] IPVS: using max 18 ests per chain, 43200 per kthread [ 140.396892][ T6399] loop1: detected capacity change from 0 to 512 [ 140.485366][ T6399] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e00ce19c, mo2=0002] [ 140.499238][ T6399] System zones: 0-2, 18-18, 34-34 [ 140.555702][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.569545][ T6399] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.615049][ T6399] Quota error (device loop1): do_check_range: Getting block 16777216 out of range 0-5 [ 140.675648][ T6407] tipc: Enabled bearer , priority 0 [ 140.714351][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.733842][ T6401] tipc: Resetting bearer [ 141.465192][ T6409] loop2: detected capacity change from 0 to 32768 [ 141.492056][ T6409] (syz.2.161,6409,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "0x0000000000000000ÿÿÿÿ" or missing value [ 141.538498][ T6409] (syz.2.161,6409,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 142.270157][ T6441] loop1: detected capacity change from 0 to 64 [ 144.935071][ T6401] tipc: Disabling bearer [ 145.223019][ T6454] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 145.781806][ T6463] loop3: detected capacity change from 0 to 2048 [ 145.895565][ T6463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.989060][ T5790] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh [ 147.013857][ T5790] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh [ 155.557497][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.584399][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.610391][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.643838][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.662292][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.674399][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.786750][ T6499] loop2: detected capacity change from 0 to 1024 [ 155.869034][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.940230][ T6500] loop1: detected capacity change from 0 to 2048 [ 156.093504][ T6033] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.104701][ T5860] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 156.144287][ T5860] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.177606][ T6500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.225885][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.375105][ T5860] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.419481][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.463772][ T5860] usb 1-1: Product: syz [ 156.468011][ T5860] usb 1-1: Manufacturer: syz [ 156.523793][ T5860] usb 1-1: SerialNumber: syz [ 156.569555][ T5860] usb 1-1: config 0 descriptor?? [ 156.606700][ T5860] hub 1-1:0.0: bad descriptor, ignoring hub [ 156.648389][ T5860] hub: probe of 1-1:0.0 failed with error -5 [ 156.707068][ T5860] usb 1-1: selecting invalid altsetting 0 [ 156.817825][ T6495] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh [ 156.853760][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.925239][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.850325][ T5102] Bluetooth: hci0: command tx timeout [ 158.711379][ T6497] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 159.002511][ T6497] usb 1-1: device descriptor read/64, error -71 [ 159.421028][ T6497] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 159.703300][ T6497] usb 1-1: device descriptor read/64, error -71 [ 160.085103][ T6497] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 160.165925][ T5102] Bluetooth: hci0: command tx timeout [ 162.218002][ T5102] Bluetooth: hci0: command tx timeout [ 165.280160][ T6497] usb 1-1: device descriptor read/8, error -110 [ 165.344334][ T5102] Bluetooth: hci0: command tx timeout [ 165.707800][ T6497] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 165.812681][ T6497] usb 1-1: device descriptor read/8, error -32 [ 166.451705][ T5860] usb 1-1: USB disconnect, device number 2 [ 197.215017][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.229705][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.531234][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 213.537438][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 213.643171][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 257.183719][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.198732][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.996467][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 318.281192][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.295667][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.355751][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.370467][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.829453][ T29] INFO: task kworker/0:5:5861 blocked for more than 144 seconds. [ 391.837543][ T29] Not tainted syzkaller #0 [ 397.678260][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.695945][ T29] task:kworker/0:5 state:D stack:24168 pid:5861 ppid:2 flags:0x00004000