last executing test programs: 47m55.342273968s ago: executing program 32 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10) 46m19.590758575s ago: executing program 33 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r3], 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r4, 0x823, &(0x7f00000001c0)=[{0x0}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) 45m36.811110019s ago: executing program 34 (id=1517): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) (async) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) 34m42.926039288s ago: executing program 35 (id=4465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sync_file_range(r0, 0x5, 0xfffffffffffffc00, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) syz_emit_ethernet(0x14f, &(0x7f00000006c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0xf, 0x6, "27f5cb", 0x119, 0x11, 0xff, @mcast1, @empty, {[@srh={0x2c, 0x6, 0x4, 0x3, 0x5, 0x60, 0x4, [@local, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], {0x4e24, 0x4e22, 0xe1, 0x0, @opaque="8e24720024d7a353470c73b223970b81fa82bc159e5b7ece4dc4bb0c585debd6c3f51f123f907a731b57f5761551e8a4ed5365e701d156ed95fd8d58589b8389febe556d2e439c04e03e0b92cd71247141f95cb002b446c28f94fb1c856accff892e5deb752e59aa40923318009b245eb28f40af7156fbec6883e0524682a0f856e83403d53ef73ffafcdbf5b26bc727985fb4dd61d375185e43261156405d5c205c9f0e3b6bc8256c8e1ce69c969c774a7a7d0e0288f0f67e9fa3f2ad4a3fad0adab42dc9bb0f93194f994b963a3bbeee3afe57020c234fad"}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 30m41.902532397s ago: executing program 36 (id=5676): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000f9d000/0x3000)=nil, 0x3000}}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xa, 0x1, 0x3, 0x6, 0xf}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nobarrier}, {@ref_verify}, {@acl}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0xa2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x28) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x200000000003}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 30m36.679346677s ago: executing program 37 (id=5701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5"], 0x0, 0x266, &(0x7f00000001c0)="$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") openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0xad308eca7261d488, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0xad308eca7261d488, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) (async) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1], 0xb8) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1], 0xb8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000081d0254a778f594700383a00fe8800f6e4d93c6300000000000000000000000001ff02000000000000000000000000000102009078ec94f3000000000000003a0001000000000000000000000000000000011e520b4c951ee12e"], 0x0) mkdir(0x0, 0x12) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 27m20.704186225s ago: executing program 38 (id=6513): socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000f80)={r2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_io_uring_setup(0x54e0, &(0x7f0000000480)={0x0, 0xfffffffe, 0x100, 0x0, 0x335}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x2004, @fd_index=0xa, 0x7, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="380000001000370425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r11, 0x7a8, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000057674f39c3700039022abd7000fbdbdf2507000000", @ANYRES32=r14, @ANYBLOB="0c0001800800010026000100"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r12, 0x0, 0x0, 0x1f5, 0xfffc, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x700, 0x11, 0x3, 0x94, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x864, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty}}}}) 25m17.392058619s ago: executing program 39 (id=7086): syz_emit_ethernet(0xd2, &(0x7f0000002940)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "c57448", 0x9c, 0x11, 0x0, @mcast1, @empty, {[], {0x4e23, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "2dcbd38d9c8644a757332d0edd807c4b7bb65eb661581056a1bc4e1049ead609", "f78d9ff8b2cffb1dc37ecc45c386890cc5a4c117595ef72972c12eb02d5525fd187eb477a8462210754b4a2202378953", "2e4be85d446970c18e8efee42fcabb11940aad879d063a053904d34c", {"d354c533b51d9127ff0f466230cfacad", "2f9fd9d5bc2f3ee1f4c5ad98e8988739"}}}}}}}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000002940)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "c57448", 0x9c, 0x11, 0x0, @mcast1, @empty, {[], {0x4e23, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "2dcbd38d9c8644a757332d0edd807c4b7bb65eb661581056a1bc4e1049ead609", "f78d9ff8b2cffb1dc37ecc45c386890cc5a4c117595ef72972c12eb02d5525fd187eb477a8462210754b4a2202378953", "2e4be85d446970c18e8efee42fcabb11940aad879d063a053904d34c", {"d354c533b51d9127ff0f466230cfacad", "2f9fd9d5bc2f3ee1f4c5ad98e8988739"}}}}}}}}, 0x0) (async) 24m17.556488337s ago: executing program 40 (id=7345): socket$kcm(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x700, 0x12, 0x7, {{0x24, 0x4, 0x2, 0x31, 0x90, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x2, [{@local, 0x100}, {@rand_addr=0x64010102, 0xfffffe01}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x44, 0x90, 0x3, 0xe, [{@empty, 0x9}, {@broadcast, 0x15}, {@multicast1, 0x7}, {@private=0xa010100}, {@broadcast, 0x7}, {@private=0xa010100, 0x1}, {@broadcast, 0x200}, {@rand_addr=0x64010100, 0x8}]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x11, 0x3, 0x7, [{@empty, 0x3}, {@multicast1, 0xc}, {@remote, 0x4}]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="800000004000"/16], 0x48) socket$kcm(0xf, 0x3, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x700, 0x12, 0x7, {{0x24, 0x4, 0x2, 0x31, 0x90, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x2, [{@local, 0x100}, {@rand_addr=0x64010102, 0xfffffe01}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x44, 0x90, 0x3, 0xe, [{@empty, 0x9}, {@broadcast, 0x15}, {@multicast1, 0x7}, {@private=0xa010100}, {@broadcast, 0x7}, {@private=0xa010100, 0x1}, {@broadcast, 0x200}, {@rand_addr=0x64010100, 0x8}]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x11, 0x3, 0x7, [{@empty, 0x3}, {@multicast1, 0xc}, {@remote, 0x4}]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fafbf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30301080097e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e02006e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="800000004000"/16], 0x48) (async) 21m41.51114548s ago: executing program 41 (id=7948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0xffff}, {0x5, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40080}, 0x850) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21m10.739678466s ago: executing program 42 (id=8061): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x1b\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 13m38.975550442s ago: executing program 43 (id=9773): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file2\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0xfd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x1d, &(0x7f00000008c0), 0x4) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000200), 0x2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0xc00, 0x0) 11m51.393408215s ago: executing program 0 (id=10139): ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '.\x00'}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000100)=""/165, 0xa5}, {&(0x7f00000001c0)=""/215, 0xd7}], 0x3) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000100)=""/165, 0xa5}, {&(0x7f00000001c0)=""/215, 0xd7}], 0x3) ftruncate(r0, 0x5a) (async) ftruncate(r0, 0x5a) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x81444, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}], [{@fsname}, {@smackfshat={'smackfshat', 0x3d, '\'!+,\xec#-!/-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_role={'obj_role', 0x3d, '^&'}}, {@obj_type={'obj_type', 0x3d, '\xd6^'}}, {@obj_user={'obj_user', 0x3d, '\'*-:'}}, {@fowner_gt={'fowner>', r3}}, {@seclabel}]}}) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x240042, 0x0) pread64(r0, &(0x7f00000007c0)=""/49, 0x31, 0x6) (async) pread64(r0, &(0x7f00000007c0)=""/49, 0x31, 0x6) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000800)={0x7}, 0x4) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000800)={0x7}, 0x4) mount$9p_tcp(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x1004, &(0x7f0000000900)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@privport}, {@cachetag={'cachetag', 0x3d, '\'*-:'}}, {@access_uid={'access', 0x3d, r1}}, {@noxattr}, {@nodevmap}, {@msize={'msize', 0x3d, 0x8000000000000001}}, {@uname={'uname', 0x3d, '\xd6^'}}, {@posixacl}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) move_mount(0xffffffffffffffff, &(0x7f0000000a00)='\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'veth0_to_batadv\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone(0x200000, &(0x7f0000002b00)="bd2770d820041b2d9679034e39ed44829bfe30de", 0x14, &(0x7f0000002b40), &(0x7f0000002b80), &(0x7f0000002bc0)="ca016058a48c3d") r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002c00), 0x240, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r8, 0x3ba0, &(0x7f0000002cc0)={0x48, 0x4, 0x0, 0x0, 0x4a, &(0x7f0000002c40)="8546294a7172f5afa582a2b10a704eacb06a788e7729d72253e3f6722ec20fa1fc54e3ec25af95a9d12aee240c4092fd580bbf2f6f76dad3f17396af61e6b65f8e16c606bce434930259", 0x8000}) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x10001, 0x2002) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x10001, 0x2002) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x8002, &(0x7f0000002d40), 0x7a0b, 0x6) (async) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x8002, &(0x7f0000002d40), 0x7a0b, 0x6) bind(r0, &(0x7f0000002d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x80) close(r8) eventfd(0x8001) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002e00)={0x0, 0xb}, &(0x7f0000002e40)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002e00)={0x0, 0xb}, &(0x7f0000002e40)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002e80)=@assoc_value={r9, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002e80)=@assoc_value={r9, 0x6}, 0x8) rename(&(0x7f0000002ec0)='./file0/file0\x00', &(0x7f0000002f00)='./file0\x00') mount$bind(&(0x7f0000002f40)='./file0/file0\x00', &(0x7f0000002f80)='./file0/file0\x00', &(0x7f0000002fc0), 0x2020008, 0x0) fanotify_mark(r0, 0x20, 0x8000000, r0, &(0x7f0000003000)='./file0\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003040)={r9, 0x95, 0x4}, &(0x7f0000003080)=0x8) write$FUSE_DIRENTPLUS(r0, &(0x7f0000005180)={0x3d8, 0x0, r4, [{{0x6, 0x2, 0x1, 0x0, 0x5, 0x71a, {0x1, 0x7, 0x4, 0xd8, 0x7f, 0x10001, 0x1, 0x4, 0x6, 0xd000, 0x8d, 0xee01, r6, 0x1000, 0x6}}, {0x3, 0xfffffffffffffffa, 0x3, 0xc, ']::'}}, {{0x4, 0x1, 0x4, 0x80, 0x9, 0x9, {0x6, 0x4, 0x4, 0xd1b, 0x4, 0x7, 0xfffffff8, 0x2, 0x40, 0xc000, 0xddc3, r5, 0x0, 0x1000, 0x81}}, {0x4, 0x4, 0x1, 0xaa, '*'}}, {{0x4, 0x1, 0x7, 0x1, 0x9, 0x400, {0x1, 0x7fff, 0xffffffffffffffff, 0x9, 0x6f, 0x8000000000000001, 0x0, 0x6, 0x2, 0x4000, 0x4, 0x0, r2, 0xb7a1, 0x58}}, {0x6, 0x2, 0x8, 0xc7, 'system_u'}}, {{0x5, 0x1, 0x1000, 0x4, 0x3, 0x3a62, {0x4, 0x0, 0x1, 0x8000, 0x9, 0x1, 0x4, 0x76b, 0x2, 0x1000, 0x8, r5, r6, 0xf, 0xc}}, {0x4, 0x5, 0xa, 0x0, '\'!+,\xec#-!/-'}}, {{0x3, 0x3, 0x6, 0xe, 0x82fe, 0xfc, {0x1, 0x200, 0xd7, 0xfffffffffffffffd, 0x1000, 0x8, 0x1, 0x7, 0xc, 0x2000, 0x9, r5, r6, 0x33d0, 0x8}}, {0x1, 0x200, 0x4, 0x42, 'func'}}, {{0x5, 0x1, 0x81, 0x81, 0x2, 0x6a87324d, {0x2, 0x2, 0x2, 0x8, 0x7, 0x7, 0x4, 0xd8, 0xb, 0xa000, 0x2, r3, r2, 0x7ff, 0x4}}, {0x6, 0x7, 0x1, 0x1, '['}}]}, 0x3d8) 11m51.261320134s ago: executing program 0 (id=10141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0), 0x2811818, &(0x7f0000000400)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x74, 0x37, 0x70, 0x0, 0x36, 0x6b, 0x67, 0x67]}}, {@huge_advise}, {@huge_never}], [{@audit}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)}], 0x1}, 0x0) setns(r5, 0x24020000) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x10c) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m50.291894048s ago: executing program 0 (id=10143): r0 = syz_io_uring_setup(0x98b, &(0x7f0000000640)={0x0, 0x8875, 0x0, 0x5, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket(0x10, 0x80002, 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x27}, 0x0, 0x18, 0x0, 0x0, {0x1f}}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) io_uring_enter(r0, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) signalfd(r7, &(0x7f0000000040)={[0x6]}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r8, @ANYRES16=r8, @ANYBLOB="0100000000e650279f00"/25, @ANYRES8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4000804) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 11m49.361519702s ago: executing program 0 (id=10145): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001880)="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", 0xfa0, 0x4008000, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') writev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)="d1", 0x1}], 0x2) sendto$inet(r1, &(0x7f00000000c0)="e40129baeff6d64e9e2758f0b144df5393562a3023fe70d71878af5adae64aee114754ac147e9e2d32b2c672c788395145706a4658f47d7dbd26dcb7c521f24033d4afdb4cf84d48c26f3113b0cddd39210f05566ae57fddb50ed2aaa8dd813632140d0962ec13a8f0494c03c4bbe130239ca4492fc5a2040a1db5bc35c031b2e5d8e1e6760cf4ca767dfd0973ea9a5c6945d853833cb3612aa726", 0x9b, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 11m49.108870597s ago: executing program 44 (id=10145): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001880)="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", 0xfa0, 0x4008000, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') writev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)="d1", 0x1}], 0x2) sendto$inet(r1, &(0x7f00000000c0)="e40129baeff6d64e9e2758f0b144df5393562a3023fe70d71878af5adae64aee114754ac147e9e2d32b2c672c788395145706a4658f47d7dbd26dcb7c521f24033d4afdb4cf84d48c26f3113b0cddd39210f05566ae57fddb50ed2aaa8dd813632140d0962ec13a8f0494c03c4bbe130239ca4492fc5a2040a1db5bc35c031b2e5d8e1e6760cf4ca767dfd0973ea9a5c6945d853833cb3612aa726", 0x9b, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 8m12.957662676s ago: executing program 5 (id=10959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x20) 8m12.865618151s ago: executing program 5 (id=10960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000100", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x10000, @remote, 0x11}}}, &(0x7f0000000000)=0x84) 8m11.942279778s ago: executing program 5 (id=10962): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) close(r2) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000080)='./bus\x00') (async) open(&(0x7f0000000000)='.\x00', 0x494003, 0xbc) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x1, 0x2, 0x10003, 0x4, 0x3, 0x3, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0x5, 0x0, 0x2, 0x8, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e5b, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) close(r0) 8m11.789616922s ago: executing program 5 (id=10963): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xea, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x20000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r1, 0xffffffffffffffff, 0x16, 0x14}, 0x20) r3 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x18, r3, 0x7c, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 8m11.261832661s ago: executing program 5 (id=10965): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x11f0c3) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x16d, 0x0, &(0x7f0000000240)={0x2, 0x14c, {0x1, 0xc, 0xce, "e8fe7fac5d1e9213a4c0c17975c26132d24a75b762c3b51d227cfdd5f2c67630c70e16a1ced1e8ec915635bbf3fc9f7dd3f9e209a3219f9d7b59bfb9ba8c523158649cd9e24829603bc6621470c164e3ae0b614d17fa4d764245e6812dc60a7311abf80e2a27223b055ae44fb1c29f9d806ab5e720676eb34d4acf82a1906ac7340d6d94766f7ac601e3e9dc846b6cfeadeb8517179a5193013a337cf672a0f44284d47f5e7e1a33206f6fbdbfab400e3237545ffd02be043295bf1fd5a178f98a7a8863c73fe04c6e7b60408c22", 0x71, "65ab5bd97ed64e1da0774f397a1f2ffcc4898b746901e0570a5a76883c497921f2c1ba01c11b7b0a640f643eb9db44941bf9d9cf87210b1016bd79af7ce4ece19cc14668d0f11a61015940405ac657625b310aefbc3b277a213f1874de65625a5aa2ed4ea0e581e0ee8f868fbbca14c46d"}, 0xd8, "8f76975fa038d38f8479257f1baa269b3c235961dabe7869b3a38bc57a679e4926dfd4e6a7b15742f7afa1ef5c1a357081db29aeb85b20426441daaef9d6e6c9f5c21dd2090ca852372d4c08c4782d89be94a6c27888fe59b0574db9a498e383fd46eebe025c4e24a73b38e3bb54e18d5c56cad976b23e745332b80f29e4c3723d2aeb40e5c96aaeeef370826bd439857edb0f3947d40a11d6592a83a04ca1747e839e9de7cf8c758e3a21de1fe9f4817ebc3efd0ed1951e5fcf0534275057d9f3e6e4f6da623da6486e23e1248b367aef4d9d3a6b1bf5d4"}, 0x230}) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x16d, 0x0, &(0x7f0000000240)={0x2, 0x14c, {0x1, 0xc, 0xce, "e8fe7fac5d1e9213a4c0c17975c26132d24a75b762c3b51d227cfdd5f2c67630c70e16a1ced1e8ec915635bbf3fc9f7dd3f9e209a3219f9d7b59bfb9ba8c523158649cd9e24829603bc6621470c164e3ae0b614d17fa4d764245e6812dc60a7311abf80e2a27223b055ae44fb1c29f9d806ab5e720676eb34d4acf82a1906ac7340d6d94766f7ac601e3e9dc846b6cfeadeb8517179a5193013a337cf672a0f44284d47f5e7e1a33206f6fbdbfab400e3237545ffd02be043295bf1fd5a178f98a7a8863c73fe04c6e7b60408c22", 0x71, "65ab5bd97ed64e1da0774f397a1f2ffcc4898b746901e0570a5a76883c497921f2c1ba01c11b7b0a640f643eb9db44941bf9d9cf87210b1016bd79af7ce4ece19cc14668d0f11a61015940405ac657625b310aefbc3b277a213f1874de65625a5aa2ed4ea0e581e0ee8f868fbbca14c46d"}, 0xd8, "8f76975fa038d38f8479257f1baa269b3c235961dabe7869b3a38bc57a679e4926dfd4e6a7b15742f7afa1ef5c1a357081db29aeb85b20426441daaef9d6e6c9f5c21dd2090ca852372d4c08c4782d89be94a6c27888fe59b0574db9a498e383fd46eebe025c4e24a73b38e3bb54e18d5c56cad976b23e745332b80f29e4c3723d2aeb40e5c96aaeeef370826bd439857edb0f3947d40a11d6592a83a04ca1747e839e9de7cf8c758e3a21de1fe9f4817ebc3efd0ed1951e5fcf0534275057d9f3e6e4f6da623da6486e23e1248b367aef4d9d3a6b1bf5d4"}, 0x230}) 8m7.642352997s ago: executing program 5 (id=10982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x50, 0x8000, 0x5, 0x9, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x6, [{@rand_addr=0x64010102, 0xffffffaa}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008014) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000002c0)="695cd6ea1f5a0094ab7a292993d754d92d2e732c5927505201639a1c33dfb1dbb608ac21256955f95ff339fa259eee051b1ff467d279457ccda1a4bf408aeea3c19d5bf852665ec8e0e9198a98c57fb2037a3ca2874d2ce040026d015170c355a7b3944f5944a67f8f57ccd9bebc29c15fe9b8ebe752", 0x76, 0x40, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = syz_clone(0x10a400, &(0x7f0000000900)="2f82b9ced937bfa509980345892ff2114413147372518741d3b256bb4f20f0bbdfa512dec9bcdfabba215275f2d29b1678e90f4528ddb8ae856f684e82dd633151b235d5b4ebd06021ee07ef4d1e96044774357c02995ab24b9e594d7d2a5f2c1bfa5220e45290e05bf68d7a9e922ee8837ca6c9d7a44b95ea807b5b6733", 0x7e, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="88673feb4796bf9c98fc49ca11ab09ab64ce64a8adf2098b7bf23b9695a722ad18c0dd031824b0199a533bdddd7568b62ba5cfad090a7605dc4975b4eb2596c7c9c7a15d9f8b876a40c240251723593523b2aae79f21271660815047411cc40f2bae586c772501f0d2a33b9217b7e532cb3b2d3a90c27fd9") newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) getgroups(0x6, &(0x7f0000000b40)=[0xee00, 0xee01, 0x0, 0x0, 0xee00, 0xee00]) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000f00), 0x40181, 0x0) r11 = syz_mount_image$fuse(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x2000000, &(0x7f0000000fc0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee01}}]}}, 0x1, 0x0, &(0x7f00000010c0)="0c95437b900ad74db79a6b9e43745e2ae1d712e3adb806f10b286a7fe84327027c76fa6716ecf8cf8a4a103ce73af7a5b3a6296b01b850a8afdeb8a8a6637c81be81e68420d9ccd9cefb67a0576d7ab9b048be42e2a069bdbd07f68be1ffc70ea8864bd4405ce6e34314e5873f4c98195a55bd867eae5f2b65044e08360bb7d8f61c05120625ae3309b46c0b3f61b2cd04a420d04f690fa63fb3bd50d5386f17ff0bfa5c98e812d8445592a4b7aa32fd718a8b58991b34e137929f59b6d621d2e808d1203f96fb9a98c71b13c1e0099024a586") fcntl$getownex(r0, 0x10, &(0x7f00000011c0)={0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', 0x800, 0x7ff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001380)={0x5, 0x3, {0x0}, {0xee01}, 0x8, 0xfffffffffffffffc}) getresuid(&(0x7f00000013c0)=0x0, &(0x7f0000001400), &(0x7f0000001440)) newfstatat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0}, &(0x7f0000001580)=0xc) getresuid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) getgroups(0x1, &(0x7f0000001680)=[0xee01]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0xe, 0x7, 0xf, 0x9, 0x1ff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002140)={0x6, 0x2, {}, {0xee00}, 0x2690, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)="4b1a28d59d843137097bf4673e9cae793a8eb360964aed0335929d921499b123f5865ae916b1aaed214e", 0x2a}, {&(0x7f0000000440)="d0d9c538fe8cda8f9709b412a45250cdc6eaba522e4795be46dc09ec12718e2287b2382fb5c6803004d4d34d28597bd186b3de448b78b3f2f3be7c8fa717ad312adcd759a510b7227d43a3112273c351c05f39b4b5e3c973a8615fc5166dc3e4fe60b952fa90047d54ba78a20d62f1f6f3d1e2c5a26d704fdaa5d7f511c8801ae0d2d7b4703fb6fdd6506f83d68727173f90f59a941fbff9c05a78ba0fd98e55dbc38de8863deee98727", 0xaa}, {&(0x7f0000000500)="b8739a96d26b479487acf5b51958771255604147eb745108a5ac2d410803ee6ed1bb76908f7cee1ffc2350a33dd5d58d7504cc3037e2ee24d3e2321fa35b158c81806fb04209baed9884c78791e145ab4cd0f6190f0e3c19a9b8f66e3ed1454110156eba813ad8cc4f0c5eb166cd6ae807772a606734406bc3f61bede1e7d62534dd9894a5a782cd88d07d175e3a9404a83053540c3e98102176b04b94297229be2c8ae17077a8022b086bca3c691651bea6f9dceaf5dcc0cc84d59e2b57e29be6573d737b523fa0288516a2ad07534d10820972b4320ef0a15bf3e8500f33cbfce7da1a747e52de99d38d52af", 0xed}, {&(0x7f0000000600)="02e04e6892925835b1539faa9c10806731fef8aad423812280628dd88c422e0b558bede0129f0deb53c737e358daf5d20ba8c7a010cb5e6a933d71adf30b7d2a115808a270d07f5b204e9313f9e4896adccf4872afc63abbfd919f5ce00245ce7769d29ae18a226dae33df640c9d51f80d6329d25641e69e0476a7a039f5c80e821618ecc505dd275411631028e43d91235152968bb34f6841607b4d24eb62cb8c727a470de036362e1e1b6b1b93cd3196bcca057702c5f3f938275b39b67764d368fd64a6a87634dcbb9f757f4f0e69a18b6ce3963d2323568bcbb2a7186a532909def0acab070620598aea75fb30acc9e108bc50f8", 0xf6}, {&(0x7f0000000700)="944fb164dfb64b792e12b7f1ce236296bb50d0f5c1a011ba54a1aea246473cff24fc000a6126ee2a15fd5964261e1126feb748502f4f90fd4c7ebec3d8417a5ca3a2ddbb4decbe5325889978c43b9e219114c21d76e10451299799980a649f1b1a0fed8bb4f462f831aa0c00974d77a9e719c66af7f0fe4112ffa406291faa1aa4e8f8bc83b0a7594fab1446a74a8c4a32b7afa3276499c9f8a6a869b324da4aa4b5a0", 0xa3}, {&(0x7f00000007c0)="b295f0818a787ad7224b747f1ea93977e44bfc23bc51c7cdcebaf6a6ad4d603f1a018dd5d914b31c6eabf0a7662d7ef8887942227e9e7f75c5413a6c0542e93715e1ccecd418d7a9e71a7178ac997e3d9e31c19e84982e798fd79e70e8250affd9dc1d3615fbe909dffc54dfe3dbd70975", 0x71}, {&(0x7f0000000840)="822f9ad14e6b01868d3a0c125fb8b3", 0xf}], 0x7, &(0x7f0000000bc0)=[@rights={{0x28, 0x1, 0x1, [r4, r3, r3, r3, r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r0]}}], 0x80, 0x20000040}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="293fa6d366869c529b023308bf8f5673443a989ba856f06e8c4532945c33104be9bedbf25f8a8b5fc7b468d610e195c634685a73329c1e9e54a056ebba0c3c236b803661342e89f3bf8add9893dbb41f00f30635a06b11e87610b9ef135e5680d8faae9e72aebccf183821e87d6172e7b5a8f1639c41818510094d20605a2d647731bff8348e54c15708dcc7dc18b396273a14cd9c89983b164fb9e598", 0x9d}, {&(0x7f0000000d80)="6a13f3b27887ee14fc1714bc09323fafc4d7f4e56b942b1d6df6cfb452b83d085039de87b26964c0a1071b33a9a916d721d6d23424f0b5e254a3beb78e810b4430b4972561f27be724e3c9507e9e33515caa18e6826c04167c73bbd35b577578f55f07b042d990a1a82d65ca8cb795d38de41e4be64450583247bc555a3482290f5ab381abee7fce273bcaa2fdaab5edae1a0f8e27353e762f27d656ddff2fb35d39afcea8af9eb8f906ebf544088a6782979b31b35513dc84a0e6d3250d79464ee87783db6a42b6340cfb3a6a6ec68ae3508216de5df6528eb4", 0xda}, {&(0x7f0000000e80)="48731ef1610dc0c744ef748f9b853f5cf6efd48625497fd537a6797170a33002b9f528fedd66ba9d4a93a3b21c2c035b4c2b", 0x32}], 0x3, &(0x7f00000016c0)=[@rights={{0x24, 0x1, 0x1, [r10, r0, r0, r3, r11]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xc8, 0x4085}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001840)="cf5b6fcc4ad1c56e8bbd892a9e4db5f41e6f0e0cb3015682416975babc5190d98ead296aed7c966535130d2ff1c52be2b54535c794", 0x35}, {&(0x7f0000001880)="d2111bd72c372386a98da28f1fc80ce76d8ce8adbc5e36fb356aad", 0x1b}, {&(0x7f00000018c0)="67e638bc7daff161668b5207e0bc3a4a24dc5673c95352b2fac7f73c37293506a2250ce95edf21696474d516fd363e5829feff046cfa3880095ff48702aef13bd494c672075c10356ca8097dfc2c043f7bae05067109ea085765c59090e3abf265494c0776be85e9ed86e715c3ed8aa6c55df2a78b7c701967ae9085abc6437f0d63b562bb4a3560cfb70614f067d8866f9708d7186a1e692b7f65db4a2b5313543458170bc01b9b4c671a1e99c8f55c421d53ba8dfc26b2a1b06cdb1348c367d7d875b06cbd3352b9c0338021db10582127d2ab791b", 0xd6}, {&(0x7f00000019c0)="e0aec61c4069f977f3fd1d25e574", 0xe}, {&(0x7f0000001a00)="99607733391fbcf1b4ee46fd0ebed67c3c80af757728992d2603878245847a49bc15733dbabe5d7c85cbfe32d8721816857392545aa4d9a79751184afadd173b62c4779c64ec4bd421038cd371ce5483daa46809ef83b854872b4869030a16ef56cf0e45b2b2673d7149f9c5cfab9929c4eb25acb3912f73151fc38e7769eb9540054930da877010f33c840f363d9ac84f85e58e20226b3aaf39b0345667b574b16b6a50575cb47593c4bb574b3f25d855083658d0a3debc0120b5f856034679e84609c59735496fb24813aa9d669b27", 0xd0}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001bc0)}}, {{&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c80)="c7e717d1254a016036e1a85f8c647f57d67f0cdb50eef4ea63cb72a949c9123217daf5ac4c542229d148fb7eb7d0f4c81f85b0f44fb6f3a5d8ac4cf9463c9724eab02e26cffa7898b8cb21273e11419fe6fb85ba83684ca6c3aedd80d1f10a", 0x5f}, {&(0x7f0000001d00)="810a0f26c0cd80978c0bcdfd071ee63ddab80a9454fe107d3387d2fc6a25e170d805c839054b590365271c1999a0faeef8ea263537eb31a5a760f7d76d86e6df7315407130e3d2772f7f377cad7dfa511ca6799ab170df4cbb24e749206b3e1c34e9b55fc6aafcb41a5c8b2bf17ae89b20cc8cb7e82e5552343b974b52e4c27329a000ae680c0a7929b5b7fd7e9676280799948aec833df7507f3f2a443fd9e3a3ede213da", 0xa5}, {&(0x7f0000001dc0)="76a4907c05b1c282314d31f4010774264881e5fbfc872eeee92a447c6e5ac5adf7c6bc9efe6b49229b114799bb3d476a10f0dbfaed4783ac82d6a6f0676080ebf40f611d150dd5566d627989bbac18daa7317f5f38134b5f167f2b9149fa6de0ef467a48e4072ce08bf55267f65a2ef8cbc52b8aefbc0d2c3ae976e010907ebff2aab06c29902969f31e", 0x8a}, {&(0x7f0000001e80)="c260cd411fe579951f6bf820d05d3f4bbc5ec3fa0105d07f05d8ff296ef357ac93a74914936b8250ce8086248d74ce1e8b144756aba7a09da896878537f3cc4f1d790af9cc0ff36962c3e160ef7826e0ac1a7bffe7ccc7be67038501a009eb44a91254a9033d280e71d2fb383dd62e533b08228670a2ab65f3798a18fa5497878c99b2", 0x83}, {&(0x7f0000001f40)='E', 0x1}, {&(0x7f0000001f80)="7ed97c8d56cc560fab7f1824c4b8fea8e4e7402e8bf556a0cf738efb060db1b35ccd3877e3c1efa03c0475d7282c456eff752d0343b34610e1fc63b25d7ddcf4ec2792ac7ae9f28dc1393396feb60e93573b666e1f7cacc6df8939108c7afce2228cd8497590c7a2297782951f530e41bd208a9f6a", 0x75}, {&(0x7f0000002000)="cbb939e747911340578fc21902db3b8d82f47f3027197c1af0b3a438a9e50f6b3c44cbf30fde39ab59093994b4252d2b3455e19173a1370c5b3e2e22c9", 0x3d}], 0x7, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x81}}, {{&(0x7f0000004400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004480)="d4aef31635b373de683b64db3170de3582a453ef5a83be13d7170a19364e5ba08b0e5326f6f9806b802fae634744b50e335a4beffbf27f95d0a2efe70c8d1691f4bb787562fe178f7bc8fe5c", 0x4c}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r3]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, r3, r0, r3, r3, r3, r3, r0, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x108}}], 0x5, 0x40800) 8m6.155487503s ago: executing program 45 (id=10982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x50, 0x8000, 0x5, 0x9, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x6, [{@rand_addr=0x64010102, 0xffffffaa}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008014) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000002c0)="695cd6ea1f5a0094ab7a292993d754d92d2e732c5927505201639a1c33dfb1dbb608ac21256955f95ff339fa259eee051b1ff467d279457ccda1a4bf408aeea3c19d5bf852665ec8e0e9198a98c57fb2037a3ca2874d2ce040026d015170c355a7b3944f5944a67f8f57ccd9bebc29c15fe9b8ebe752", 0x76, 0x40, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = syz_clone(0x10a400, &(0x7f0000000900)="2f82b9ced937bfa509980345892ff2114413147372518741d3b256bb4f20f0bbdfa512dec9bcdfabba215275f2d29b1678e90f4528ddb8ae856f684e82dd633151b235d5b4ebd06021ee07ef4d1e96044774357c02995ab24b9e594d7d2a5f2c1bfa5220e45290e05bf68d7a9e922ee8837ca6c9d7a44b95ea807b5b6733", 0x7e, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="88673feb4796bf9c98fc49ca11ab09ab64ce64a8adf2098b7bf23b9695a722ad18c0dd031824b0199a533bdddd7568b62ba5cfad090a7605dc4975b4eb2596c7c9c7a15d9f8b876a40c240251723593523b2aae79f21271660815047411cc40f2bae586c772501f0d2a33b9217b7e532cb3b2d3a90c27fd9") newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) getgroups(0x6, &(0x7f0000000b40)=[0xee00, 0xee01, 0x0, 0x0, 0xee00, 0xee00]) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000f00), 0x40181, 0x0) r11 = syz_mount_image$fuse(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x2000000, &(0x7f0000000fc0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee01}}]}}, 0x1, 0x0, &(0x7f00000010c0)="0c95437b900ad74db79a6b9e43745e2ae1d712e3adb806f10b286a7fe84327027c76fa6716ecf8cf8a4a103ce73af7a5b3a6296b01b850a8afdeb8a8a6637c81be81e68420d9ccd9cefb67a0576d7ab9b048be42e2a069bdbd07f68be1ffc70ea8864bd4405ce6e34314e5873f4c98195a55bd867eae5f2b65044e08360bb7d8f61c05120625ae3309b46c0b3f61b2cd04a420d04f690fa63fb3bd50d5386f17ff0bfa5c98e812d8445592a4b7aa32fd718a8b58991b34e137929f59b6d621d2e808d1203f96fb9a98c71b13c1e0099024a586") fcntl$getownex(r0, 0x10, &(0x7f00000011c0)={0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', 0x800, 0x7ff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001380)={0x5, 0x3, {0x0}, {0xee01}, 0x8, 0xfffffffffffffffc}) getresuid(&(0x7f00000013c0)=0x0, &(0x7f0000001400), &(0x7f0000001440)) newfstatat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0}, &(0x7f0000001580)=0xc) getresuid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) getgroups(0x1, &(0x7f0000001680)=[0xee01]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0xe, 0x7, 0xf, 0x9, 0x1ff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002140)={0x6, 0x2, {}, {0xee00}, 0x2690, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)="4b1a28d59d843137097bf4673e9cae793a8eb360964aed0335929d921499b123f5865ae916b1aaed214e", 0x2a}, {&(0x7f0000000440)="d0d9c538fe8cda8f9709b412a45250cdc6eaba522e4795be46dc09ec12718e2287b2382fb5c6803004d4d34d28597bd186b3de448b78b3f2f3be7c8fa717ad312adcd759a510b7227d43a3112273c351c05f39b4b5e3c973a8615fc5166dc3e4fe60b952fa90047d54ba78a20d62f1f6f3d1e2c5a26d704fdaa5d7f511c8801ae0d2d7b4703fb6fdd6506f83d68727173f90f59a941fbff9c05a78ba0fd98e55dbc38de8863deee98727", 0xaa}, {&(0x7f0000000500)="b8739a96d26b479487acf5b51958771255604147eb745108a5ac2d410803ee6ed1bb76908f7cee1ffc2350a33dd5d58d7504cc3037e2ee24d3e2321fa35b158c81806fb04209baed9884c78791e145ab4cd0f6190f0e3c19a9b8f66e3ed1454110156eba813ad8cc4f0c5eb166cd6ae807772a606734406bc3f61bede1e7d62534dd9894a5a782cd88d07d175e3a9404a83053540c3e98102176b04b94297229be2c8ae17077a8022b086bca3c691651bea6f9dceaf5dcc0cc84d59e2b57e29be6573d737b523fa0288516a2ad07534d10820972b4320ef0a15bf3e8500f33cbfce7da1a747e52de99d38d52af", 0xed}, {&(0x7f0000000600)="02e04e6892925835b1539faa9c10806731fef8aad423812280628dd88c422e0b558bede0129f0deb53c737e358daf5d20ba8c7a010cb5e6a933d71adf30b7d2a115808a270d07f5b204e9313f9e4896adccf4872afc63abbfd919f5ce00245ce7769d29ae18a226dae33df640c9d51f80d6329d25641e69e0476a7a039f5c80e821618ecc505dd275411631028e43d91235152968bb34f6841607b4d24eb62cb8c727a470de036362e1e1b6b1b93cd3196bcca057702c5f3f938275b39b67764d368fd64a6a87634dcbb9f757f4f0e69a18b6ce3963d2323568bcbb2a7186a532909def0acab070620598aea75fb30acc9e108bc50f8", 0xf6}, {&(0x7f0000000700)="944fb164dfb64b792e12b7f1ce236296bb50d0f5c1a011ba54a1aea246473cff24fc000a6126ee2a15fd5964261e1126feb748502f4f90fd4c7ebec3d8417a5ca3a2ddbb4decbe5325889978c43b9e219114c21d76e10451299799980a649f1b1a0fed8bb4f462f831aa0c00974d77a9e719c66af7f0fe4112ffa406291faa1aa4e8f8bc83b0a7594fab1446a74a8c4a32b7afa3276499c9f8a6a869b324da4aa4b5a0", 0xa3}, {&(0x7f00000007c0)="b295f0818a787ad7224b747f1ea93977e44bfc23bc51c7cdcebaf6a6ad4d603f1a018dd5d914b31c6eabf0a7662d7ef8887942227e9e7f75c5413a6c0542e93715e1ccecd418d7a9e71a7178ac997e3d9e31c19e84982e798fd79e70e8250affd9dc1d3615fbe909dffc54dfe3dbd70975", 0x71}, {&(0x7f0000000840)="822f9ad14e6b01868d3a0c125fb8b3", 0xf}], 0x7, &(0x7f0000000bc0)=[@rights={{0x28, 0x1, 0x1, [r4, r3, r3, r3, r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r0]}}], 0x80, 0x20000040}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="293fa6d366869c529b023308bf8f5673443a989ba856f06e8c4532945c33104be9bedbf25f8a8b5fc7b468d610e195c634685a73329c1e9e54a056ebba0c3c236b803661342e89f3bf8add9893dbb41f00f30635a06b11e87610b9ef135e5680d8faae9e72aebccf183821e87d6172e7b5a8f1639c41818510094d20605a2d647731bff8348e54c15708dcc7dc18b396273a14cd9c89983b164fb9e598", 0x9d}, {&(0x7f0000000d80)="6a13f3b27887ee14fc1714bc09323fafc4d7f4e56b942b1d6df6cfb452b83d085039de87b26964c0a1071b33a9a916d721d6d23424f0b5e254a3beb78e810b4430b4972561f27be724e3c9507e9e33515caa18e6826c04167c73bbd35b577578f55f07b042d990a1a82d65ca8cb795d38de41e4be64450583247bc555a3482290f5ab381abee7fce273bcaa2fdaab5edae1a0f8e27353e762f27d656ddff2fb35d39afcea8af9eb8f906ebf544088a6782979b31b35513dc84a0e6d3250d79464ee87783db6a42b6340cfb3a6a6ec68ae3508216de5df6528eb4", 0xda}, {&(0x7f0000000e80)="48731ef1610dc0c744ef748f9b853f5cf6efd48625497fd537a6797170a33002b9f528fedd66ba9d4a93a3b21c2c035b4c2b", 0x32}], 0x3, &(0x7f00000016c0)=[@rights={{0x24, 0x1, 0x1, [r10, r0, r0, r3, r11]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xc8, 0x4085}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001840)="cf5b6fcc4ad1c56e8bbd892a9e4db5f41e6f0e0cb3015682416975babc5190d98ead296aed7c966535130d2ff1c52be2b54535c794", 0x35}, {&(0x7f0000001880)="d2111bd72c372386a98da28f1fc80ce76d8ce8adbc5e36fb356aad", 0x1b}, {&(0x7f00000018c0)="67e638bc7daff161668b5207e0bc3a4a24dc5673c95352b2fac7f73c37293506a2250ce95edf21696474d516fd363e5829feff046cfa3880095ff48702aef13bd494c672075c10356ca8097dfc2c043f7bae05067109ea085765c59090e3abf265494c0776be85e9ed86e715c3ed8aa6c55df2a78b7c701967ae9085abc6437f0d63b562bb4a3560cfb70614f067d8866f9708d7186a1e692b7f65db4a2b5313543458170bc01b9b4c671a1e99c8f55c421d53ba8dfc26b2a1b06cdb1348c367d7d875b06cbd3352b9c0338021db10582127d2ab791b", 0xd6}, {&(0x7f00000019c0)="e0aec61c4069f977f3fd1d25e574", 0xe}, {&(0x7f0000001a00)="99607733391fbcf1b4ee46fd0ebed67c3c80af757728992d2603878245847a49bc15733dbabe5d7c85cbfe32d8721816857392545aa4d9a79751184afadd173b62c4779c64ec4bd421038cd371ce5483daa46809ef83b854872b4869030a16ef56cf0e45b2b2673d7149f9c5cfab9929c4eb25acb3912f73151fc38e7769eb9540054930da877010f33c840f363d9ac84f85e58e20226b3aaf39b0345667b574b16b6a50575cb47593c4bb574b3f25d855083658d0a3debc0120b5f856034679e84609c59735496fb24813aa9d669b27", 0xd0}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001bc0)}}, {{&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c80)="c7e717d1254a016036e1a85f8c647f57d67f0cdb50eef4ea63cb72a949c9123217daf5ac4c542229d148fb7eb7d0f4c81f85b0f44fb6f3a5d8ac4cf9463c9724eab02e26cffa7898b8cb21273e11419fe6fb85ba83684ca6c3aedd80d1f10a", 0x5f}, {&(0x7f0000001d00)="810a0f26c0cd80978c0bcdfd071ee63ddab80a9454fe107d3387d2fc6a25e170d805c839054b590365271c1999a0faeef8ea263537eb31a5a760f7d76d86e6df7315407130e3d2772f7f377cad7dfa511ca6799ab170df4cbb24e749206b3e1c34e9b55fc6aafcb41a5c8b2bf17ae89b20cc8cb7e82e5552343b974b52e4c27329a000ae680c0a7929b5b7fd7e9676280799948aec833df7507f3f2a443fd9e3a3ede213da", 0xa5}, {&(0x7f0000001dc0)="76a4907c05b1c282314d31f4010774264881e5fbfc872eeee92a447c6e5ac5adf7c6bc9efe6b49229b114799bb3d476a10f0dbfaed4783ac82d6a6f0676080ebf40f611d150dd5566d627989bbac18daa7317f5f38134b5f167f2b9149fa6de0ef467a48e4072ce08bf55267f65a2ef8cbc52b8aefbc0d2c3ae976e010907ebff2aab06c29902969f31e", 0x8a}, {&(0x7f0000001e80)="c260cd411fe579951f6bf820d05d3f4bbc5ec3fa0105d07f05d8ff296ef357ac93a74914936b8250ce8086248d74ce1e8b144756aba7a09da896878537f3cc4f1d790af9cc0ff36962c3e160ef7826e0ac1a7bffe7ccc7be67038501a009eb44a91254a9033d280e71d2fb383dd62e533b08228670a2ab65f3798a18fa5497878c99b2", 0x83}, {&(0x7f0000001f40)='E', 0x1}, {&(0x7f0000001f80)="7ed97c8d56cc560fab7f1824c4b8fea8e4e7402e8bf556a0cf738efb060db1b35ccd3877e3c1efa03c0475d7282c456eff752d0343b34610e1fc63b25d7ddcf4ec2792ac7ae9f28dc1393396feb60e93573b666e1f7cacc6df8939108c7afce2228cd8497590c7a2297782951f530e41bd208a9f6a", 0x75}, {&(0x7f0000002000)="cbb939e747911340578fc21902db3b8d82f47f3027197c1af0b3a438a9e50f6b3c44cbf30fde39ab59093994b4252d2b3455e19173a1370c5b3e2e22c9", 0x3d}], 0x7, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x81}}, {{&(0x7f0000004400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004480)="d4aef31635b373de683b64db3170de3582a453ef5a83be13d7170a19364e5ba08b0e5326f6f9806b802fae634744b50e335a4beffbf27f95d0a2efe70c8d1691f4bb787562fe178f7bc8fe5c", 0x4c}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r3]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, r3, r0, r3, r3, r3, r3, r0, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x108}}], 0x5, 0x40800) 6m48.238555431s ago: executing program 3 (id=11303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x2}, 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m43.208513893s ago: executing program 3 (id=11320): openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) accept(r0, &(0x7f0000000300)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x80) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2f, 0x0) (async) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='syz', 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000000)="224c1a2ad8c298259f72a5f7212bc7ed2d68abd2bb20639c59f501d93f28", 0x1e, 0xfffffffffffffffe) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:'], 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) open(0x0, 0x400141042, 0xb9) mount(0x0, 0x0, 0x0, 0x1000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) epoll_create1(0x80000) 6m42.87024611s ago: executing program 3 (id=11324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x54, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x66}, {0xc, 0x90, 0x4000000000002}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044000}, 0x240048c4) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r5) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xfb2, 0x0, 0x4, 0x4, 0xffffffc3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012dbd8a00fedbdf250300000008000400e3beb15f9a068a080000000500054ffc0000000500080002000400000000000000fa3c82b09a1390000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r6, 0x0, 0x5c3295db}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m42.093971325s ago: executing program 3 (id=11326): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x8b7, 0x4) sendto$inet6(r1, 0x0, 0x38, 0x48000, &(0x7f0000000780)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafe}, 0x1c) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x0, 0x200002, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) syz_emit_ethernet(0x160, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x0, 0x0, 0x152, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0xb, 0xef, [@multicast1, @broadcast]}, @cipso={0x86, 0x6}]}}, "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"}}}}, 0x0) 6m41.538790828s ago: executing program 3 (id=11330): socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1fd) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='tracefs\x00', 0x100000, &(0x7f0000000340)='/\x00') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) write$qrtrtun(r1, &(0x7f0000000280)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) (async, rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x200000000000000) (rerun: 32) 6m40.18802658s ago: executing program 46 (id=11330): socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1fd) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='tracefs\x00', 0x100000, &(0x7f0000000340)='/\x00') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) write$qrtrtun(r1, &(0x7f0000000280)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) (async, rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x200000000000000) (rerun: 32) 5m56.897464783s ago: executing program 6 (id=11505): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/244, 0xf4}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/191, 0xbf}], 0x4, &(0x7f00000002c0)=""/64, 0x40}, 0x2003) rt_sigtimedwait(&(0x7f0000000340)={[0x268b279e]}, &(0x7f0000000380), &(0x7f0000000400)={0x0, 0x3938700}, 0x8) name_to_handle_at(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@ceph_nfs_confh={0x10}, &(0x7f00000004c0), 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'erspan0\x00'}) inotify_add_watch(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xa0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0xf) write$snapshot(r0, &(0x7f0000000640)="174b9305d88898e609140b", 0xb) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000680)={0x3, 0x1, 0x3, 0x1ee68a08, 0xffffffff, 0xf8a6}) setxattr(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=@random={'trusted.', '\x00'}, &(0x7f0000000780)='@%-\x00', 0x4, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f00000007c0), 0x80000000, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000880)={0x0, &(0x7f0000000800)="8316cd43886eee89d86d2f93b6326b73fe86676d22a85a56828f07b5da17d63f6dba705a4693a40769389497b030fc07a5f2cdabbfd4ddbfb30426902e66c5864e811dfe5a0bda0b0734b50e20d47b4142740e11e25cc826bd30e67c95512d4317999f839150", 0x66}) execveat(r0, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000980)={[&(0x7f0000000900)='@%-\x00', &(0x7f0000000940)='/dev/snd/pcmC#D#p\x00']}, &(0x7f0000000b40)={[&(0x7f00000009c0)='/\x00', &(0x7f0000000a00)='\\m)&-\x00', &(0x7f0000000a40)='@%-\x00', &(0x7f0000000a80)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000ac0)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000b00)='erspan0\x00']}, 0x100) unshare(0x12000200) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000d00)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000d40)={0x400000, 0x7, {}, {0xee01}, 0x2, 0xcc}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000e80)=0xe8) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00)=0x0, &(0x7f0000000f40)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001080)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) lstat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000bc0)='system.posix_acl_access\x00', &(0x7f00000012c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r3}, {0x2, 0x1, r4}, {0x2, 0x7, 0xee00}, {0x2, 0x8, 0xffffffffffffffff}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x6, r7}], {0x4, 0x3}, [{0x8, 0x5, r8}, {0x8, 0x1, r9}, {0x8, 0x5, r10}, {0x8, 0x1}], {0x10, 0xd6847be4758f1d49}}, 0x7c, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001340)=0x7, 0x4) stat(&(0x7f0000001380)='./file0/file0\x00', &(0x7f00000013c0)) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001440)=0x9) 5m56.713345183s ago: executing program 6 (id=11508): r0 = socket$xdp(0x2c, 0x3, 0x0) timerfd_create(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x24, 0x20000) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000140)={0x0, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa088dece6ffdb507a3c83e130028", 0xfffffffffffffffd, 0x7ffffffffffffffb, 0x100000, 0x3, 0x0, 0xd, 0x0, 0x0, [0x0, 0x10000, 0xfff]}) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x98, 0xfffffffffffffff5, 0xffffffffffffffff, {0x7, 0x0, 0x0, {0x0, 0x800000, 0x0, 0x7f, 0x80000000000000, 0x3, 0x20, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x10}, 0x18) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="73797374656d2e003f5aa98abdc1a310bd48121420a41af863cee54fe9feb9b810a536d1edc65c40bbd56a2c464793a18d0ab590fcc3ba512e52b46683099d0856753a3a03d1a1262947d6ebde86f03191e461c491022be1a26f2fd2c3bd45a9788ea52e6e38fa36"]) write$binfmt_format(r1, &(0x7f0000000240)='-1\x00', 0x3) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x2, 0x4) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r8, r9, 0x0, 0x5) setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r10, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x10000000, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) 5m55.791888677s ago: executing program 6 (id=11510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRES32=r1], 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000080)=0xd8ec, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r4, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x303000, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x0, r6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000100)="2b9797fd919498e265394b9365ae19fe93190e7cefd28035e914c577397bf55b9bd7e73824bdb92226dd535d2d894f41e57346e1986dd643f7fc91ad81eaf2640c783b8c2ec2df820f97d209eb7d082fa3c12433ace792698331bf4c8cd7eb943149c1aed4ba1aebdc612575de5897eac83673850c6bab18c57ae584dbccc56d60915a4f8d9b1544c757ca2bf9a09465512d5346b3d4a65fcde806c8bc2e96506076a883574b005d9667b0358a0f3518fb3b3d153bd49676b6db8ae988030141b98e57b8c856426d20ad9b85430c76b80544451655ca79395f1432c9e033") r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES16=r9, @ANYRESDEC=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8802) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1000006, 0x10, 0xffffffffffffffff, 0x83000000) 5m55.264092728s ago: executing program 6 (id=11515): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8001055, r2, 0x0) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000+40000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000008,\x00'], 0x20, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000200)={0x0, 'bridge_slave_0\x00', {0x4}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r5, &(0x7f0000001900)=""/4079, 0xfef, 0x66) (async) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fremovexattr(r7, &(0x7f0000000100)=@known='user.incfs.id\x00') r8 = dup(r6) (async, rerun: 64) r9 = gettid() (rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) syz_open_procfs(r9, &(0x7f0000000140)='net/psched\x00') (async) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f605430000000000000001000500380046"], 0x78) (async) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m55.084756438s ago: executing program 6 (id=11518): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x50) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = creat(&(0x7f0000000240)='./file1\x00', 0x1bf) close(r3) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000003c0)={0x0, 0xae, 0x803ff, 0x34325241, 0x3, [], [0xfcb, 0x0, 0x4], [0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 5m54.628303779s ago: executing program 47 (id=11518): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x50) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = creat(&(0x7f0000000240)='./file1\x00', 0x1bf) close(r3) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000003c0)={0x0, 0xae, 0x803ff, 0x34325241, 0x3, [], [0xfcb, 0x0, 0x4], [0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 3m11.544183646s ago: executing program 1 (id=12128): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = eventfd2(0x802, 0x800) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r5, &(0x7f0000001c40)=[{&(0x7f0000000740)=""/107, 0x6b}], 0x1, 0x4009, 0x2081) listen(r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000140), 0x8440, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="8277c13d2bbafae09110ee5802000098d16666446e7f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000004c40)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002f40)=""/4088, 0xff8}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000002580)=""/166, 0xa6}, {&(0x7f0000002640)=""/245, 0xf5}], 0x5}, 0x4}, {{&(0x7f00000027c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=""/68, 0x44}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/71, 0x47}, {&(0x7f0000002c00)=""/158, 0x9e}, {&(0x7f0000002e40)=""/229, 0xe5}, {&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002900)=""/258, 0x102}, {&(0x7f0000003f80)=""/115, 0x73}], 0x6, &(0x7f0000004080)=""/72, 0x48}, 0x2007}, {{&(0x7f0000004100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004180)=""/35, 0x23}, {&(0x7f00000041c0)=""/90, 0x5a}, {&(0x7f0000004240)=""/149, 0x95}, {&(0x7f0000004300)=""/151, 0x97}, {&(0x7f00000043c0)=""/128, 0x80}, {&(0x7f0000004440)=""/27, 0x1b}, {&(0x7f0000004480)=""/184, 0xb8}, {&(0x7f0000004540)=""/238, 0xee}, {&(0x7f0000002840)=""/163, 0xa3}, {&(0x7f0000004700)=""/184, 0xb8}], 0xa, &(0x7f0000004880)}, 0x2}, {{&(0x7f00000048c0)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002a40)=""/254, 0xfe}, {&(0x7f0000004a40)=""/109, 0x6d}, {&(0x7f0000002d00)=""/261, 0x105}], 0x3, &(0x7f0000004c00)=""/60, 0x3c}}], 0x5, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0x6004, 0x1000, &(0x7f0000af4000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000004d80)=ANY=[@ANYBLOB="18020000fdffffff000000000700000085000000640000009548817954bd228c739e4af3f29778af10cc0c091c13c1fce3d452438773dc69c7ce0550d7c0b4fb0aba9840e3ad403746bc8d1281ca09566057e070d9c363a0fe6ff8ca7b2cf7ab409b9ec504ac789a0b4ce93a63b3e09da106e905dc19d4886c6ec17256297c2c00748c95f1d7ff86d851a82ae7d4ec560300e9cfdb1f023a23f1b90ad5a815d86f8a1f9df7125ba75360ba1d6e1277963df4d2cb4741c3f1f375b744412ee913c1263ac56bfbd229ab8ee15a9190c68d027975f8b7856af34abcea93aa639dcd6bf7bd2ea7a1fee2cfe0272846d46a8cc8d590c1ff9a62f700"/260], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3m11.073106866s ago: executing program 1 (id=12136): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100000039) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2, 0x57ee1ebc9c2c8c3c}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3m10.133735998s ago: executing program 1 (id=12139): socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000300)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) 3m9.569645667s ago: executing program 1 (id=12143): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, 0x0, 0x0, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040)=0x401, 0x4) 3m9.461759805s ago: executing program 1 (id=12145): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000902000036adc5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x3, 0x24c}, &(0x7f00000001c0), 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r4, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/149, 0x95}, {&(0x7f0000001580)=""/168, 0xa8}, {&(0x7f0000001640)=""/159, 0x9f}], 0x6, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f00000003c0)={[0x4, 0x5, 0x7, 0x8, 0x96, 0xe, 0x3, 0x1, 0x1, 0x7, 0x2, 0xfffffffb, 0x5, 0x4, 0x3ff, 0x95, 0x6, 0xc27, 0x0, 0x3, 0x1, 0x5, 0xd, 0x8, 0x1, 0x0, 0x5, 0xffffffff, 0x1e3, 0x10001, 0x7, 0x6, 0x4, 0x7, 0x84, 0x2, 0x8, 0x592, 0x1f6000, 0x7, 0x2c00000, 0x80000000, 0x0, 0xfffffff9, 0x3, 0x0, 0x40, 0x7, 0x0, 0x6, 0xfff, 0x4, 0x401, 0x0, 0xa0a, 0x9, 0xe, 0x9, 0x2, 0x3df, 0x2, 0x80000001, 0xfffffffb, 0x4, 0x1000, 0x4c9, 0x52, 0x5, 0x5, 0x6, 0x1b22, 0x7, 0x5, 0x2e, 0x0, 0xc5c, 0x4, 0x5, 0x5, 0x9, 0x40, 0x7, 0x8, 0x5, 0xff, 0x5, 0x5, 0x80000001, 0x3, 0xffe00000, 0x3ff, 0x7, 0x7, 0x3ff, 0x81, 0x111, 0x9, 0x6, 0x5, 0x8020000, 0x8001, 0xbe48, 0x5, 0x40d4, 0x7, 0x726, 0xbd8, 0x81, 0x4, 0x2, 0x6, 0x0, 0xcb8, 0xffffffff, 0x4, 0x0, 0x8, 0x8001, 0x104, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x8001, 0x608, 0x81, 0x6, 0x80000001, 0x28, 0x4, 0x2, 0xffff, 0x3, 0x1ec, 0x8a35, 0x4, 0x1, 0x40, 0xf, 0x2, 0x7ff, 0x3, 0xf, 0x6, 0x80000000, 0x7, 0x40000000, 0x8, 0x8, 0xf, 0x7, 0x5, 0x0, 0x2, 0xa, 0x3, 0x1, 0x7, 0x7, 0x2, 0x7, 0x8, 0x7, 0x1ff, 0x3, 0x66, 0x5, 0x1, 0x6, 0x4, 0x5, 0x9, 0xbab, 0x1, 0x100, 0x5, 0x9, 0xfffffffa, 0x6, 0x6, 0xd, 0x3, 0x7ff, 0x81, 0x52d5, 0x4ce, 0x8000, 0x6, 0x9, 0x4, 0x9, 0x0, 0x3ff, 0xfffff1b2, 0x2, 0x2, 0x4, 0x3ff, 0x1ff, 0xfff, 0xc5a4, 0xbf, 0x10, 0x0, 0x4, 0x3dd, 0xd, 0xffffff50, 0x7fffffff, 0x1, 0xf9, 0x6, 0x4, 0x7, 0x9, 0x1, 0x40, 0x7, 0x5, 0x8, 0x9b9, 0xfff, 0xc, 0x0, 0xc, 0x6, 0xfffffff7, 0x11d, 0x0, 0x8000, 0x5, 0x8, 0x0, 0x8, 0x7, 0x7, 0xd8, 0x3, 0x5, 0x5, 0x400, 0x2, 0x3446, 0x1000, 0xfffffffe, 0x800000, 0xb12d, 0x6, 0x0, 0x0, 0x8, 0xfffffffc, 0x6, 0x900, 0x7, 0x9, 0x9bc, 0x5, 0x3ff, 0xfffffff7, 0x6, 0xffffffff, 0x0, 0x5, 0x6, 0xe9, 0x3, 0xda95, 0x8, 0x7, 0xfffffff8, 0x4, 0x9, 0x5, 0xdd, 0x6, 0xf6f9, 0x6, 0x8, 0xb, 0xa, 0x49a, 0xd, 0xcf4a, 0x9, 0x1, 0x3, 0x8dc, 0x7, 0x80000001, 0x2793, 0xfffffffb, 0x1000, 0x4, 0x760c57b5, 0x7, 0x4, 0x6bf, 0xa0, 0x2, 0x1, 0x7f, 0x11b2, 0x4, 0xffff, 0x6, 0x5, 0x5, 0x7, 0x0, 0xc2069140, 0x1, 0xfff, 0x6, 0xef, 0x800, 0x6, 0x1, 0x25cbf378, 0x4, 0x3026, 0x10001, 0xffffffc0, 0x8, 0x0, 0xffffb33d, 0x8, 0x50, 0x1, 0x8, 0x4, 0xb, 0x2, 0x9, 0x0, 0x7f, 0x2, 0x9, 0xd, 0xe, 0x1, 0x653, 0xfea, 0xc2, 0x9c60, 0x7, 0x9, 0x6, 0x77, 0x2, 0x8000000, 0x81, 0x4, 0x9, 0x4, 0x8, 0x2, 0x3ff, 0x603, 0xbf, 0x6, 0x6, 0x2, 0x3, 0x4, 0x5, 0x8, 0x3, 0x3, 0x4, 0xffffffff, 0x4, 0xffffffff, 0xd, 0x2, 0x1000, 0x8, 0x2f, 0x4d3f, 0x3, 0x2, 0x101, 0x2, 0xdc, 0x4, 0x7, 0x8, 0x5, 0x8, 0xada, 0xfffffffc, 0x1, 0x9, 0xffffffff, 0x90, 0x68d0, 0xaa, 0xd7e, 0x1, 0x336, 0x0, 0x7, 0xc, 0x6, 0x100, 0x4, 0x401, 0x4, 0xffffffff, 0x80000000, 0x4, 0xfa, 0xeb8, 0x5, 0xbda, 0x6, 0x6, 0x5, 0x1, 0x6, 0x2, 0xffff, 0xd1, 0x3, 0x10, 0x4, 0x1, 0x2, 0x80, 0xffffffff, 0x9, 0x8d61, 0x400, 0x2, 0x7fff, 0x1ff, 0x7ff, 0x1357ecf5, 0x6, 0x6, 0xffff9508, 0x92, 0x6, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x7, 0x1, 0x3ff, 0x1, 0x80000000, 0x65db, 0x2, 0x7, 0x0, 0xc8f39d7f, 0x4, 0x5, 0x3, 0x9, 0x7ff, 0x4, 0x2, 0x401, 0x7, 0x0, 0x809, 0x80000000, 0x6, 0x3, 0x80, 0xfffffc00, 0x2, 0xc9, 0x4, 0x0, 0xd702, 0x9, 0x6, 0x6, 0xffffffff, 0x8000, 0x2, 0x7, 0x9, 0x400, 0x2de7, 0x60, 0x80000000, 0x10001, 0x4, 0x7fffffff, 0x3, 0x86c2, 0x7, 0x3, 0xe, 0x1, 0x2, 0x330, 0x7fffffff, 0x8, 0x6, 0x9, 0x48, 0x800, 0x5, 0x80000000, 0x5, 0xe, 0x6, 0xffffffff, 0x5, 0x8, 0x6, 0x6, 0xbe, 0xf661, 0x247, 0x200, 0x10001, 0x5, 0x81, 0x6, 0x3, 0x0, 0x5, 0x2c, 0x770a207f, 0x8, 0x8, 0x5, 0x9, 0x4d9e, 0x200, 0x7, 0x7, 0x7b45, 0x2, 0xb, 0x2, 0x3, 0x5, 0x8, 0x3, 0x8, 0xcc, 0x12, 0x3, 0x8, 0x8000, 0xd, 0x7, 0x7, 0x200, 0xcf, 0xf, 0x6, 0x7, 0xcd0, 0x5, 0x3, 0xfffffffa, 0x4ec7, 0xfc34, 0x97c5, 0xcc9, 0x2, 0x1, 0xb, 0x7, 0x10001, 0x2, 0x834, 0x8, 0x5, 0x86, 0x3d74, 0x8000000, 0xff, 0x73, 0x9, 0x7, 0xe471, 0xfffffffb, 0x4c9c, 0x6, 0x7f, 0x4, 0x1, 0x7fffffff, 0x0, 0x1, 0x34b7, 0xaefec771, 0x401, 0x7, 0x10f1, 0x6, 0xfffffffa, 0xff, 0x4, 0x3, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x8, 0x8, 0xbbc, 0x8, 0x7, 0x8, 0x7, 0x9, 0x100, 0x1, 0x10000, 0x7, 0xc, 0x7ff, 0x81, 0xe6e8, 0x1000, 0x8, 0x75047d7, 0x100, 0x200, 0x0, 0x1190c128, 0x40, 0x400, 0x1, 0x2, 0x6c6, 0x2, 0x7, 0x0, 0x8, 0x6, 0x800, 0x8, 0x8, 0x4, 0x52, 0x8, 0x1, 0x2, 0x93, 0x2, 0x6, 0x6, 0xffffffff, 0x6, 0x1, 0x6a6, 0x8, 0x0, 0x12, 0x59c9c463, 0x7, 0x4, 0xe7, 0x100, 0x7, 0x7fff, 0x4, 0x6, 0xa17, 0x9, 0x0, 0x1, 0x734, 0x7ff, 0x1e4, 0x80, 0x63b8, 0x80000001, 0x7, 0x94b, 0x2, 0x6, 0x8, 0xda, 0x0, 0x8001, 0x65, 0xf87, 0x9, 0x0, 0x2, 0x4, 0xd, 0x0, 0xfffffffa, 0x1, 0x8, 0x2, 0x24000000, 0x0, 0x56, 0xfffffffe, 0x4, 0xfdf, 0x9, 0x4, 0x1, 0xa2, 0x7, 0xfff, 0x7fffffff, 0x6, 0x81, 0x9e, 0xc, 0x8, 0x8, 0x2, 0x7, 0x8, 0xff, 0xc, 0x0, 0x9, 0x8001, 0x5f56, 0xaf4, 0x800, 0x1, 0x9, 0x1e, 0x6, 0x2, 0xa, 0x5, 0x7, 0x10001, 0x0, 0x8, 0x9, 0x7, 0x2a6e, 0x8000, 0x400, 0x68f08552, 0x3, 0xfffffffb, 0x0, 0xef, 0x2, 0x9, 0x1, 0x2, 0x3, 0x0, 0x2, 0xffffffff, 0x3, 0x5, 0x2, 0xb, 0x1ff, 0x0, 0x7ff, 0x1, 0x9, 0x6, 0x1000, 0xfffff176, 0x3, 0xf7f, 0x1, 0x9, 0x6, 0x10, 0x0, 0x4, 0x7ff, 0x9, 0x2, 0x7, 0x1ff, 0xffffffff, 0x80000001, 0x80, 0x57eee75b, 0x80000001, 0x8, 0x6, 0x0, 0x2, 0x8, 0x100c, 0x101, 0x1, 0x2, 0x4, 0x8001, 0xffff6d55, 0x10000, 0x5, 0x2, 0x8000, 0x7, 0xfff, 0x3ff, 0x8, 0x9, 0xfffffffa, 0xff, 0x6, 0x8, 0x4, 0x7, 0x10001, 0x3, 0x4, 0x9, 0x6, 0x9, 0x6, 0x6, 0xfffffff7, 0x6, 0x0, 0x8, 0x4, 0x8, 0x67b, 0x4dcdcf82, 0x0, 0x6, 0x3, 0x2, 0x3, 0x3, 0x5, 0x5, 0x3, 0x1, 0x200, 0x0, 0x7, 0x0, 0x1000, 0xfffffffb, 0x2, 0xa426, 0x1, 0x8, 0xad16, 0xc22c, 0x40, 0x4cf0, 0xefa, 0x24, 0x9f, 0xfffffffb, 0x489, 0x7fff, 0x660f, 0xd, 0x4, 0xbf, 0x8, 0x2, 0xa, 0x5, 0x2, 0x3, 0x3, 0xffffffff, 0x1, 0x7f, 0x2, 0x100, 0xff, 0xff, 0x8000, 0xfffffffc, 0x4, 0x3c2, 0x53a, 0x2a, 0x136, 0x401, 0x6, 0x3e9, 0x4, 0x0, 0x8784, 0x95d, 0x7, 0x9, 0x5, 0x1, 0x7, 0x6, 0x80000000, 0x6, 0x6, 0x5, 0x7, 0xf650, 0xfffffff4, 0x169, 0x0, 0x0, 0x8, 0x3ff, 0x8, 0x8, 0x6, 0x1000, 0x6, 0x7ff, 0x6f, 0x7, 0x7, 0x9, 0x9, 0x1e, 0xe, 0x9993, 0xef, 0x1, 0x9, 0x7f, 0x2, 0x6, 0x2, 0xfffffffe, 0x8, 0x8, 0x4, 0xac3, 0x3, 0x7f, 0xc14, 0x9, 0x8, 0x1, 0xffffffc0, 0x1, 0x6, 0x2, 0x1ab5, 0xe8da, 0xff, 0x4, 0x7, 0x3, 0x0, 0x0, 0x80000001, 0xfffffff8, 0x52, 0x3cb, 0x9, 0xfffffff9, 0x7, 0xa, 0x800, 0xd02c, 0x3, 0xcc24, 0x1, 0x9, 0x0, 0x6, 0x200000, 0x7ff8, 0x2, 0x69d7d372, 0x5, 0x7d, 0x80000000, 0x6679, 0x1, 0xff, 0x4000000, 0xe419, 0x0, 0x6, 0x263, 0x7, 0x4, 0x8, 0x5, 0x38000, 0x60, 0x6, 0x0, 0x2, 0x989, 0x7, 0x100, 0x10001, 0x406, 0x200, 0x5, 0x5, 0x7, 0x400, 0x40, 0x100, 0x4, 0x8, 0x0, 0x2, 0x1, 0xf622, 0xffffffff, 0x1, 0x0, 0x3, 0x8, 0x5]}) 2m54.353606602s ago: executing program 48 (id=12145): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000902000036adc5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x3, 0x24c}, &(0x7f00000001c0), 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r4, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/149, 0x95}, {&(0x7f0000001580)=""/168, 0xa8}, {&(0x7f0000001640)=""/159, 0x9f}], 0x6, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f00000003c0)={[0x4, 0x5, 0x7, 0x8, 0x96, 0xe, 0x3, 0x1, 0x1, 0x7, 0x2, 0xfffffffb, 0x5, 0x4, 0x3ff, 0x95, 0x6, 0xc27, 0x0, 0x3, 0x1, 0x5, 0xd, 0x8, 0x1, 0x0, 0x5, 0xffffffff, 0x1e3, 0x10001, 0x7, 0x6, 0x4, 0x7, 0x84, 0x2, 0x8, 0x592, 0x1f6000, 0x7, 0x2c00000, 0x80000000, 0x0, 0xfffffff9, 0x3, 0x0, 0x40, 0x7, 0x0, 0x6, 0xfff, 0x4, 0x401, 0x0, 0xa0a, 0x9, 0xe, 0x9, 0x2, 0x3df, 0x2, 0x80000001, 0xfffffffb, 0x4, 0x1000, 0x4c9, 0x52, 0x5, 0x5, 0x6, 0x1b22, 0x7, 0x5, 0x2e, 0x0, 0xc5c, 0x4, 0x5, 0x5, 0x9, 0x40, 0x7, 0x8, 0x5, 0xff, 0x5, 0x5, 0x80000001, 0x3, 0xffe00000, 0x3ff, 0x7, 0x7, 0x3ff, 0x81, 0x111, 0x9, 0x6, 0x5, 0x8020000, 0x8001, 0xbe48, 0x5, 0x40d4, 0x7, 0x726, 0xbd8, 0x81, 0x4, 0x2, 0x6, 0x0, 0xcb8, 0xffffffff, 0x4, 0x0, 0x8, 0x8001, 0x104, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x8001, 0x608, 0x81, 0x6, 0x80000001, 0x28, 0x4, 0x2, 0xffff, 0x3, 0x1ec, 0x8a35, 0x4, 0x1, 0x40, 0xf, 0x2, 0x7ff, 0x3, 0xf, 0x6, 0x80000000, 0x7, 0x40000000, 0x8, 0x8, 0xf, 0x7, 0x5, 0x0, 0x2, 0xa, 0x3, 0x1, 0x7, 0x7, 0x2, 0x7, 0x8, 0x7, 0x1ff, 0x3, 0x66, 0x5, 0x1, 0x6, 0x4, 0x5, 0x9, 0xbab, 0x1, 0x100, 0x5, 0x9, 0xfffffffa, 0x6, 0x6, 0xd, 0x3, 0x7ff, 0x81, 0x52d5, 0x4ce, 0x8000, 0x6, 0x9, 0x4, 0x9, 0x0, 0x3ff, 0xfffff1b2, 0x2, 0x2, 0x4, 0x3ff, 0x1ff, 0xfff, 0xc5a4, 0xbf, 0x10, 0x0, 0x4, 0x3dd, 0xd, 0xffffff50, 0x7fffffff, 0x1, 0xf9, 0x6, 0x4, 0x7, 0x9, 0x1, 0x40, 0x7, 0x5, 0x8, 0x9b9, 0xfff, 0xc, 0x0, 0xc, 0x6, 0xfffffff7, 0x11d, 0x0, 0x8000, 0x5, 0x8, 0x0, 0x8, 0x7, 0x7, 0xd8, 0x3, 0x5, 0x5, 0x400, 0x2, 0x3446, 0x1000, 0xfffffffe, 0x800000, 0xb12d, 0x6, 0x0, 0x0, 0x8, 0xfffffffc, 0x6, 0x900, 0x7, 0x9, 0x9bc, 0x5, 0x3ff, 0xfffffff7, 0x6, 0xffffffff, 0x0, 0x5, 0x6, 0xe9, 0x3, 0xda95, 0x8, 0x7, 0xfffffff8, 0x4, 0x9, 0x5, 0xdd, 0x6, 0xf6f9, 0x6, 0x8, 0xb, 0xa, 0x49a, 0xd, 0xcf4a, 0x9, 0x1, 0x3, 0x8dc, 0x7, 0x80000001, 0x2793, 0xfffffffb, 0x1000, 0x4, 0x760c57b5, 0x7, 0x4, 0x6bf, 0xa0, 0x2, 0x1, 0x7f, 0x11b2, 0x4, 0xffff, 0x6, 0x5, 0x5, 0x7, 0x0, 0xc2069140, 0x1, 0xfff, 0x6, 0xef, 0x800, 0x6, 0x1, 0x25cbf378, 0x4, 0x3026, 0x10001, 0xffffffc0, 0x8, 0x0, 0xffffb33d, 0x8, 0x50, 0x1, 0x8, 0x4, 0xb, 0x2, 0x9, 0x0, 0x7f, 0x2, 0x9, 0xd, 0xe, 0x1, 0x653, 0xfea, 0xc2, 0x9c60, 0x7, 0x9, 0x6, 0x77, 0x2, 0x8000000, 0x81, 0x4, 0x9, 0x4, 0x8, 0x2, 0x3ff, 0x603, 0xbf, 0x6, 0x6, 0x2, 0x3, 0x4, 0x5, 0x8, 0x3, 0x3, 0x4, 0xffffffff, 0x4, 0xffffffff, 0xd, 0x2, 0x1000, 0x8, 0x2f, 0x4d3f, 0x3, 0x2, 0x101, 0x2, 0xdc, 0x4, 0x7, 0x8, 0x5, 0x8, 0xada, 0xfffffffc, 0x1, 0x9, 0xffffffff, 0x90, 0x68d0, 0xaa, 0xd7e, 0x1, 0x336, 0x0, 0x7, 0xc, 0x6, 0x100, 0x4, 0x401, 0x4, 0xffffffff, 0x80000000, 0x4, 0xfa, 0xeb8, 0x5, 0xbda, 0x6, 0x6, 0x5, 0x1, 0x6, 0x2, 0xffff, 0xd1, 0x3, 0x10, 0x4, 0x1, 0x2, 0x80, 0xffffffff, 0x9, 0x8d61, 0x400, 0x2, 0x7fff, 0x1ff, 0x7ff, 0x1357ecf5, 0x6, 0x6, 0xffff9508, 0x92, 0x6, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x7, 0x1, 0x3ff, 0x1, 0x80000000, 0x65db, 0x2, 0x7, 0x0, 0xc8f39d7f, 0x4, 0x5, 0x3, 0x9, 0x7ff, 0x4, 0x2, 0x401, 0x7, 0x0, 0x809, 0x80000000, 0x6, 0x3, 0x80, 0xfffffc00, 0x2, 0xc9, 0x4, 0x0, 0xd702, 0x9, 0x6, 0x6, 0xffffffff, 0x8000, 0x2, 0x7, 0x9, 0x400, 0x2de7, 0x60, 0x80000000, 0x10001, 0x4, 0x7fffffff, 0x3, 0x86c2, 0x7, 0x3, 0xe, 0x1, 0x2, 0x330, 0x7fffffff, 0x8, 0x6, 0x9, 0x48, 0x800, 0x5, 0x80000000, 0x5, 0xe, 0x6, 0xffffffff, 0x5, 0x8, 0x6, 0x6, 0xbe, 0xf661, 0x247, 0x200, 0x10001, 0x5, 0x81, 0x6, 0x3, 0x0, 0x5, 0x2c, 0x770a207f, 0x8, 0x8, 0x5, 0x9, 0x4d9e, 0x200, 0x7, 0x7, 0x7b45, 0x2, 0xb, 0x2, 0x3, 0x5, 0x8, 0x3, 0x8, 0xcc, 0x12, 0x3, 0x8, 0x8000, 0xd, 0x7, 0x7, 0x200, 0xcf, 0xf, 0x6, 0x7, 0xcd0, 0x5, 0x3, 0xfffffffa, 0x4ec7, 0xfc34, 0x97c5, 0xcc9, 0x2, 0x1, 0xb, 0x7, 0x10001, 0x2, 0x834, 0x8, 0x5, 0x86, 0x3d74, 0x8000000, 0xff, 0x73, 0x9, 0x7, 0xe471, 0xfffffffb, 0x4c9c, 0x6, 0x7f, 0x4, 0x1, 0x7fffffff, 0x0, 0x1, 0x34b7, 0xaefec771, 0x401, 0x7, 0x10f1, 0x6, 0xfffffffa, 0xff, 0x4, 0x3, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x8, 0x8, 0xbbc, 0x8, 0x7, 0x8, 0x7, 0x9, 0x100, 0x1, 0x10000, 0x7, 0xc, 0x7ff, 0x81, 0xe6e8, 0x1000, 0x8, 0x75047d7, 0x100, 0x200, 0x0, 0x1190c128, 0x40, 0x400, 0x1, 0x2, 0x6c6, 0x2, 0x7, 0x0, 0x8, 0x6, 0x800, 0x8, 0x8, 0x4, 0x52, 0x8, 0x1, 0x2, 0x93, 0x2, 0x6, 0x6, 0xffffffff, 0x6, 0x1, 0x6a6, 0x8, 0x0, 0x12, 0x59c9c463, 0x7, 0x4, 0xe7, 0x100, 0x7, 0x7fff, 0x4, 0x6, 0xa17, 0x9, 0x0, 0x1, 0x734, 0x7ff, 0x1e4, 0x80, 0x63b8, 0x80000001, 0x7, 0x94b, 0x2, 0x6, 0x8, 0xda, 0x0, 0x8001, 0x65, 0xf87, 0x9, 0x0, 0x2, 0x4, 0xd, 0x0, 0xfffffffa, 0x1, 0x8, 0x2, 0x24000000, 0x0, 0x56, 0xfffffffe, 0x4, 0xfdf, 0x9, 0x4, 0x1, 0xa2, 0x7, 0xfff, 0x7fffffff, 0x6, 0x81, 0x9e, 0xc, 0x8, 0x8, 0x2, 0x7, 0x8, 0xff, 0xc, 0x0, 0x9, 0x8001, 0x5f56, 0xaf4, 0x800, 0x1, 0x9, 0x1e, 0x6, 0x2, 0xa, 0x5, 0x7, 0x10001, 0x0, 0x8, 0x9, 0x7, 0x2a6e, 0x8000, 0x400, 0x68f08552, 0x3, 0xfffffffb, 0x0, 0xef, 0x2, 0x9, 0x1, 0x2, 0x3, 0x0, 0x2, 0xffffffff, 0x3, 0x5, 0x2, 0xb, 0x1ff, 0x0, 0x7ff, 0x1, 0x9, 0x6, 0x1000, 0xfffff176, 0x3, 0xf7f, 0x1, 0x9, 0x6, 0x10, 0x0, 0x4, 0x7ff, 0x9, 0x2, 0x7, 0x1ff, 0xffffffff, 0x80000001, 0x80, 0x57eee75b, 0x80000001, 0x8, 0x6, 0x0, 0x2, 0x8, 0x100c, 0x101, 0x1, 0x2, 0x4, 0x8001, 0xffff6d55, 0x10000, 0x5, 0x2, 0x8000, 0x7, 0xfff, 0x3ff, 0x8, 0x9, 0xfffffffa, 0xff, 0x6, 0x8, 0x4, 0x7, 0x10001, 0x3, 0x4, 0x9, 0x6, 0x9, 0x6, 0x6, 0xfffffff7, 0x6, 0x0, 0x8, 0x4, 0x8, 0x67b, 0x4dcdcf82, 0x0, 0x6, 0x3, 0x2, 0x3, 0x3, 0x5, 0x5, 0x3, 0x1, 0x200, 0x0, 0x7, 0x0, 0x1000, 0xfffffffb, 0x2, 0xa426, 0x1, 0x8, 0xad16, 0xc22c, 0x40, 0x4cf0, 0xefa, 0x24, 0x9f, 0xfffffffb, 0x489, 0x7fff, 0x660f, 0xd, 0x4, 0xbf, 0x8, 0x2, 0xa, 0x5, 0x2, 0x3, 0x3, 0xffffffff, 0x1, 0x7f, 0x2, 0x100, 0xff, 0xff, 0x8000, 0xfffffffc, 0x4, 0x3c2, 0x53a, 0x2a, 0x136, 0x401, 0x6, 0x3e9, 0x4, 0x0, 0x8784, 0x95d, 0x7, 0x9, 0x5, 0x1, 0x7, 0x6, 0x80000000, 0x6, 0x6, 0x5, 0x7, 0xf650, 0xfffffff4, 0x169, 0x0, 0x0, 0x8, 0x3ff, 0x8, 0x8, 0x6, 0x1000, 0x6, 0x7ff, 0x6f, 0x7, 0x7, 0x9, 0x9, 0x1e, 0xe, 0x9993, 0xef, 0x1, 0x9, 0x7f, 0x2, 0x6, 0x2, 0xfffffffe, 0x8, 0x8, 0x4, 0xac3, 0x3, 0x7f, 0xc14, 0x9, 0x8, 0x1, 0xffffffc0, 0x1, 0x6, 0x2, 0x1ab5, 0xe8da, 0xff, 0x4, 0x7, 0x3, 0x0, 0x0, 0x80000001, 0xfffffff8, 0x52, 0x3cb, 0x9, 0xfffffff9, 0x7, 0xa, 0x800, 0xd02c, 0x3, 0xcc24, 0x1, 0x9, 0x0, 0x6, 0x200000, 0x7ff8, 0x2, 0x69d7d372, 0x5, 0x7d, 0x80000000, 0x6679, 0x1, 0xff, 0x4000000, 0xe419, 0x0, 0x6, 0x263, 0x7, 0x4, 0x8, 0x5, 0x38000, 0x60, 0x6, 0x0, 0x2, 0x989, 0x7, 0x100, 0x10001, 0x406, 0x200, 0x5, 0x5, 0x7, 0x400, 0x40, 0x100, 0x4, 0x8, 0x0, 0x2, 0x1, 0xf622, 0xffffffff, 0x1, 0x0, 0x3, 0x8, 0x5]}) 2m38.133476415s ago: executing program 4 (id=12287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c000000000a01090224000100000000090400000103000200092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x109283) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x40000002, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x163600, 0x100) (async) r5 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r6 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0xa557, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000600)={0x0, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f00000008c0)={0x2a, "0d3154df30934d68ef49e4b2441112bfb76bb765c95269ffaaecd78543c000bd838c3b34c19c0b3b86c975437807198ab3f65989d7dc4e2125b0c2fcd6f37aa41cfa6e9a72cb7947686fc6d92dfa46764381984a91391bf4b64fbc9ea7ac8dd41590ac1c9920e92e6700eec3ac1747a85e9ca97aeef90db125b488f9d7852905"}) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="020006d9", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x34, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty}, 0x20) (async) connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES8], 0x0) (async) getdents64(r7, &(0x7f0000000240)=""/90, 0x5a) (async) ioctl$EVIOCGBITKEY(r5, 0x80404521, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x20200, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m36.01342637s ago: executing program 4 (id=12300): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0xa0000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0x7, [0x9, 0x2, 0x8001, 0x2, 0xa1, 0x4, 0xdb2, 0x0, 0x7ff, 0x8, 0xb000, 0x7f, 0x6b12, 0x3, 0x5, 0x9, 0x8, 0x400, 0x7, 0x8, 0x7, 0x3, 0x6, 0x234, 0x2, 0x10, 0x1, 0xa1, 0x3, 0x7, 0x8, 0x0, 0x9, 0x1, 0x1, 0x7fff, 0x2, 0x65, 0x6, 0x8, 0x6, 0xd56, 0x3, 0x1, 0x5, 0xa83, 0x800, 0x2], 0x3}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) 2m36.007153602s ago: executing program 4 (id=12301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$l2tp(0x2, 0x2, 0x73) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003b00), 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffe, 0x0, 0x10000, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000080}, {0x6, 0x2080, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d, 0x1000}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @loopback}, &(0x7f0000000800)=0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0/../file0/file0/file0\x00', 0x0, 0x4018, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001040000000000000500000018260000", @ANYRES32=0x1, @ANYBLOB="00000000edb7000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001858000004000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000443000000200000018000000de0700000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffae02000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x10, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, r7], 0x0, 0x10, 0x101}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 2m34.987270887s ago: executing program 2 (id=12305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) prctl$PR_MCE_KILL(0x4c, 0x0, 0x2) sendto$inet6(r1, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/174, 0xae, 0x1, 0x0}, &(0x7f0000000180)=0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0fc71d260f50e966b9800000c00f326635000100000f300f01ca66b96e02000066b8f7ffff7f66ba000000000f30660f38370366b9550200000f32f3a50f01cf0f0014"}], 0x1, 0x43, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m34.858819599s ago: executing program 9 (id=12306): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002000000228bd7000fadbf88cb5be4ecc085b30082edf250a4d2dd4040008030200000014000100fe80000000"], 0x30}, 0x1, 0x0, 0x0, 0x480b4}, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async, rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4da201, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x260081, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000380)=[{0x20, 0x0, 0x1, 0xfffff024}, {0x20, 0x0, 0x4, 0xffff7038}, {0x16, 0x9, 0x0, 0x6}]}, 0x10) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) (async, rerun: 32) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/50) 2m34.829673198s ago: executing program 9 (id=12307): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000240)=0x9, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x7, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000300)={0x700, 0x2, &(0x7f00000005c0)=[r5, 0x0], &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000008c0)={0x0, 0x0, r2}) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0x12) sendfile(r11, r10, 0x0, 0x4) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="02c9000c0008000500077f04"], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r12}, &(0x7f00000001c0), &(0x7f0000000040)) 2m34.742033187s ago: executing program 2 (id=12308): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x930, {0x0}, {}, 0x7, 0xbb75}) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x202c0e2, 0x0, 0x0, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m33.871826074s ago: executing program 2 (id=12310): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x13, 0x1c, 0x178, &(0x7f0000000000)="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"}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000440)) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xd) r1 = fsopen(&(0x7f0000000480)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x110, r0, 0x88793000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000210}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4040081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x42100, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000680)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000700)=@req={0x28, &(0x7f00000006c0)={'vxcan1\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/40}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x10800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000840)={{0xd}, 'port0\x00', 0x0, 0x40, 0x1, 0x53bba43d, 0x6, 0xae, 0x266, 0x0, 0x5, 0x9}) r6 = dup3(r1, r2, 0x80000) connect$unix(r6, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, 0xfffffffffffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000009c0)={'lo\x00', 0x1000}) r7 = accept4$ax25(r6, &(0x7f0000000a00)={{0x3, @netrom}, [@remote, @rose, @netrom, @default, @remote, @bcast, @netrom, @netrom]}, &(0x7f0000000a80)=0x48, 0x800) close_range(r1, r7, 0xa293c4208231061e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000ac0)={0x79, 0x0, 0x7e0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x10, 0x8b8d, 0xff, 0x49a, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x23, 0x2, [@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @loopback, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x9, [{@local, 0x4}]}, @lsrr={0x83, 0x17, 0x2e, [@rand_addr=0x64010102, @rand_addr=0x64010102, @rand_addr=0x64010101, @local, @multicast2]}, @rr={0x7, 0x1b, 0x89, [@rand_addr=0x64010100, @private=0xa010100, @empty, @broadcast, @multicast1, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x6, [{@loopback, 0x8d3c}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@multicast2, 0x5}]}, @end, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001900)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1c4, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x804cda71da2870b}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m33.482442188s ago: executing program 9 (id=12311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000c40)={0x81, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040100, &(0x7f0000003700)={0x77359400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="56fb000010000100e5ffffffffffffff0000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x181000) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000340)=0xa, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x3000, 0x3, 0x9, 0x8, 0x7, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0x4, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0xff, 0x3, 0x8, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x4000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd5000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x0, 0xd, 0x1000, 0xdddd0000, [0x3, 0x401, 0x7, 0xc5]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = accept$ax25(r5, &(0x7f0000000540)={{0x3, @default}, [@remote, @rose, @default, @null, @netrom, @null, @null, @rose]}, &(0x7f00000006c0)=0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000b40)) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2511000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES16=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3324444f38020000000000000800caf503e0d1658cee37d32ae45f64b0017ee507b01a4ecc75052ec2ebfe95e8dd1136c7fc", @ANYRESOCT=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) recvmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/19, 0x13}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m33.413419031s ago: executing program 2 (id=12312): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0), 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x1, &(0x7f0000000140), 0x1}, 0xc000) (async) socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0), 0x100000000000007a}, 0x10000) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x1}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) (async) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000180)={[0x7]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x110, 0xffffffffffffffff, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f30", 0x1c}], 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 2m32.964229805s ago: executing program 2 (id=12313): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) (async) read(r0, 0x0, 0x20) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) 2m30.61242682s ago: executing program 7 (id=12315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f0f000908100300", @ANYRES32=r3, @ANYBLOB="70000e008024ff00080211000001080211000001080211000000340002000000000000000100868000000100030104040600020c0056ff0602060025030000032a01012d1a000000050000000000000004000200190000000008ff00000004720603030303030371070101ffff02040010000e80050002006f00000004000100080026006c09000008000c006400000008000d0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f0f000908100300", @ANYRES32=r3, @ANYBLOB="70000e008024ff00080211000001080211000001080211000000340002000000000000000100868000000100030104040600020c0056ff0602060025030000032a01012d1a000000050000000000000004000200190000000008ff00000004720603030303030371070101ffff02040010000e80050002006f00000004000100080026006c09000008000c006400000008000d0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) 2m30.605226098s ago: executing program 4 (id=12316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.538934958s ago: executing program 7 (id=12317): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x10000000, 0x6, 0x1, 0xfffffffffffffffc, 0x7, 0x7, 0x400, 0xfffffff7}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)) readv(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000004c0)={0x1, 'netpci0\x00', 0x2}, 0x18) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000580)={&(0x7f0000000500)="a501780b2a01b67aec9c3c1110576d4ede7b03b6fa7b69a8397af0dc6d0eb4390aefd0af8fe02db8009c59bc1dff58b7006c5c8760c929daf40c9bdd2cc28e5aa60b4e02bbe03d1417483a616b144cc41311", 0x52, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000780)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000840)={0x601, 0x1, &(0x7f00000005c0)=[r2], &(0x7f0000000600)=[0x8, 0x6b, 0x7f, 0x9, 0x9], &(0x7f00000007c0)=[r3, 0x0, r4], &(0x7f0000000800)=[0xfffffffffffffff9, 0x5, 0x0], 0x0, 0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=r1, 0x33, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0}, 0x40) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@fallback=r7, r1, 0x8, 0x2038, 0x0, @void, @void, @value, @void, r6}, 0x20) r8 = accept4$x25(r1, &(0x7f0000000a00)={0x9, @remote}, &(0x7f0000000a40)=0x12, 0x800) listen(r8, 0x1) read$msr(r1, &(0x7f0000000a80)=""/254, 0xfe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000cc0)={0x8, @raw_data="418fe37a96a6b33e02d7ca5b5246cfd076b3685eb381d9be4707a2aa1893871384c49951c6f9b3f5442100f0ead3de3c0fc00d61f5dbcf30378f8362537d28359e94a9cd7ea1cba3462ab87d0765de9df7acdbf304f87df6c593fbd497a4871fc66bd2064815fd95723bd058664fbcbb998753516c847d6d31eec3405d87cfd770e86a9293bd51b04bc8d3f5f6f81d375ed383e52996000d48cc4504f982b25d22e7525091f029e4b8722f7368e7ff027b7eea7528032bfe70842e01a68ae104df71b1debe1bb33f"}) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x701800, 0xd9, 0x36}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000e40)=@v1={0x0, @aes256, 0x3, @desc2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000ec0)={@private1, r10}, 0x14) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000f40)={0x0, 0x3, 0x400, '\x00', &(0x7f0000000f00)=0x7}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r1) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xac, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7168}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40040}, 0x20004044) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000001140)={0xc}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000011c0)={0x0, 0x1, {0x26, 0xe, 0x13, 0x2, 0x5, 0x4, 0x3, 0x5c}}) 2m30.507680863s ago: executing program 7 (id=12319): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0x9}, {0x1, 0xe}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x72}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7fff, "46d300bb04b56ad8d5618239031a2433"}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x8c}}, 0x2000a804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000001000000000100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB], 0x5c}}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019300)={&(0x7f00000004c0)={0x60, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x4b8, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r13}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4003}, 0x92) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.50313687s ago: executing program 7 (id=12321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000021c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x404d091}, 0x24000004) 2m30.496644075s ago: executing program 7 (id=12322): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = gettid() prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044061}, 0x40000) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'bridge_slave_0\x00', 0x4088}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000000080)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp950'}}, {@type={'type', 0x3d, "05f2875e"}}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000040)={0x8000064, 0xa, 0x1003}, 0xc) 2m30.485923511s ago: executing program 4 (id=12323): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$caif_seqpacket(0x25, 0x5, 0x1) r6 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000400)={0x1, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r7 = socket(0xa, 0x1, 0x84) r8 = dup3(r7, r6, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, 0x0, 0x190) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r9, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2m30.483662132s ago: executing program 9 (id=12324): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000150010020001280080001006774700014000280050005000000000008000300", @ANYRES32], 0x48}}, 0x2400c080) close_range(r0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) write(r3, &(0x7f0000000440)="96", 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r3, r3, 0x0, 0x800000a1e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x3f, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x46}, 0x28) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000e00)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000480)={0x0, 0x8, 0x0, [0x8, 0x101, 0x97, 0x4516, 0x1a], [0x3, 0x1d39, 0xfffffffffffffffa, 0x10, 0xe1cf, 0x6b38, 0x0, 0x400, 0xde2, 0x2, 0x8, 0x81, 0x101, 0xffffffff80000000, 0x1, 0x5, 0x2, 0x3, 0xbb69, 0xa12, 0x1, 0x7, 0x4, 0xfffffffffffffff7, 0x76bc, 0x9, 0xc, 0x7632, 0xfffffffffffffffb, 0xc, 0xa, 0x8000000000000001, 0x3d58, 0xfffffffffffffffa, 0x100000000, 0x4, 0x800, 0x44, 0x8000, 0xfffffffffffffffe, 0xd93a, 0x2, 0x2, 0x5, 0x2, 0x200, 0xfff, 0xffffffffffffffa9, 0x6b, 0x4, 0x2, 0x1, 0x6, 0x4, 0x1, 0x5, 0x3, 0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x4, 0x4, 0x6, 0x7, 0x0, 0x55ca4b12, 0xd7b, 0x80, 0xb7, 0x3b20, 0x290, 0xdaa, 0x2, 0xfffffffffffffffb, 0x9, 0xfffffffffffffa06, 0x8, 0x7, 0x7fff, 0x8000000000000000, 0x5, 0xfffffffffffffffb, 0x7b0a, 0x6, 0x2003, 0x7, 0xfffffffffffffff5, 0x6, 0xdfbb, 0x74bc, 0x0, 0x47, 0x100, 0x6, 0xfffffffffffffffb, 0x80000000, 0x6, 0x800, 0x0, 0x3ff, 0xffffffffffffff7f, 0x7ff, 0x4, 0x1, 0xf953, 0x687b, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x100, 0x2, 0x4, 0x8, 0x8000000000000001, 0xffffffff00000001, 0xffffffffffff8258, 0x7f]}) r10 = syz_open_dev$mouse(&(0x7f0000000240), 0x3b46, 0x200622) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000005d00)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000008c0)="4de2bb909d662f5ca7a961cca1f029668cfd29c3e02d0442fb0ae991bf2eae1cfe36d13a6d95dc7ac0fb2ad679b29b1a08643d398a03ad3752dc798783fabc74fe49bda6687c654604b78a03c02b9bebbdb774fc26e577fcf33305cffe39bf3923052cc58fad67b0c7965dea211050461b5b75869240061b0e98923e4e8ebe588edd3f71878c8498cda7e9c456ed22f5546ff8e524ec2ec6b1db5581e5b056e2fb4e13aa45757d51370403e022bacf4e39e7af86324ff122ff32ec5bb1a2f99287b367ac3d0251b26950d3c3189dd33c738f64b7c0e9badf79d82841", 0xdc}, {&(0x7f00000003c0)="79d6f70ab69bca44e14117285e09045d7cfe4c2daf7c241c47423e2c47a0c46465915606", 0x24}, {&(0x7f00000009c0)="00d31d62a5f905aae4d1328d1f6ccd4589cb46bb3b3fe5af09cee678c7dce440b1dbd267fbadd093c180a0d4ca470bb5d39e0c8871947f8c46108952b6f4d829fd020482219cda2e42c2b6c1564c63208cb32953907ad0795cf2a3f58dd84c484f606eab80bc2f6e6c4cb7e12c935f1068bc77d4b0c43adf084341c46fbc2d47e0662c1ce1ecfff8e1980abe916f9e93121c6ae38765058cea8830b48e00e043393a076689024da1ec21444d3f4115ceb26ac203a09cc74901fff4a9051832e118146316c9945b7cbd7a87002fbf01af7131d8ecbf00e6", 0xd7}, {&(0x7f0000000400)="b082b2143981060be759", 0xa}, {&(0x7f0000000ac0)="dce2b5202cff6a2c532800af5fe781207ef91b48ad4020ef61261ba6468c1e257891578427a2987bd12459a474ea06e396bc770a3aa206eeede025d4307bb03340144bde9d9287c594aad371de6b8f358e677fb6770bc3df51e85a829e77d542", 0x60}, {&(0x7f0000000b40)="348629c28e98e0a06ce944a217d40a90a57251f3b3937c345c8b20326afae0e8f0cdb86e05518b4a6a583c3feadd8a6a82891c99283b8a28b8a2aa2a77d5f910a77efdfac0da7e3343a6a365e7bb6de0e1c764faec04da17d4f4e74890a078a740a5b0b4e6583f2d6d0c36883c0ddb10277112ceee7c7e79001fedc2ad18901d5a6930985838fd27acf555182319d54c57c672b74c85473ed9c2b015ee09993179a867d7016748b7e73ddb0b35b7bfdd0433d744e0aaa46005b33f0a3cf0cc3303f733726fe083254d93a13dc01f0a190becd3", 0xd3}, {&(0x7f0000000c40)="838ea9773703a3b7d230076ff162f0a9cd59fefc7236fc57b9eb42e9542d520a76ebea993d7494920a66cbe42687e7fc992a98aee6189aa7afab2a3bedc9998f6cfe0311e34a4dfca53c1dc4de1e383d5fc3ef98ca06e174c9c761b7aa9daeb62d5db166050dd3ac5e2b3f4cd0274efcd996b1293629b6bde682625e73d623bddc83b664427d93297e23a13714c81b78b7046b656eb8c2ec931c9cce7dfdfd35b8aed8edc965f6a85993f2530571df5739f64db0e427a1b55bd2e1ca265ddf399e2a438ee2541105b1df0ae936", 0xcd}], 0x7, &(0x7f00000010c0)=[@rights={{0x24, 0x1, 0x1, [r5, r7, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r12, r2]}}, @rights={{0x38, 0x1, 0x1, [r6, r3, r10, r7, r7, r3, r12, r0, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, r12, r8]}}], 0x150, 0x1}}, {{&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000012c0)="d9384365086bcc0385953f762ce46ab7f7ecea11fc225ccb26f16f293104bf2815f6b5d738543b9e92eb2cb56ec7c9262bf683e138aa565054bb255ab8e9639a07d4769a9adbd97a08d4344e", 0x4c}, {&(0x7f0000001340)="c84353dd86c11b88516647b3fe815f77496f6d3417db7381c5448bad7bcab79dc0f32711a949a00ba1c4fb8b8db3b5e820bbb35490c73918a94a7d4a9d9a590802d11e", 0x43}, {&(0x7f00000013c0)="6163cb989502391bf36e99a423319ca34176633cc5c9db15655dbccae7519654649d391f59c6cd66eb387719be362697ca7c229fc6f392d5fc12f94353fa4a2da76bbaaf6085eeb68bf71a277c6477084fa71e1e05a8bf4df95dc0c18df0403449ab4a9a087d940b7a8e65733875bf8f9f7602aafe76e7fb0c14e8", 0x7b}, {&(0x7f0000001440)="eaf1ed32e60c63688c17e372536be0c84707ca1ea7cf325582e456f6ebfbe494e7b8089fea9c5fea19c3c3b4a92896d0e3db72246e02a8ead9d53fb24be5146d7f18e94a5e61beb6fc3653a560cc8e2379484b6c17d931a206b3200f620887faaf59bbcc08aa07466aecede1e0916d5dd274a0f7236ba5caf9ed10374155acf368bbfc81d487fd9ccdb706eaea65f8310babee52329dffeff4ff38a2b3386ba9dd6be7ba60e549e6c70b25c46c4939dc0ad86c34a0a540cedfa37207922263ffc9f8ec86da174ba1f2189abab52cbffc65910b345a3e94145ecd642269943c8c16ac64e70aa7d560ac3bb82ddd3462f973", 0xf1}, {&(0x7f0000005680)="c07cad66b6dec35df34ba90bfcaa0d6ee6a696f888ad8141c18dff6b19a6bd3ebdde008f3fffe41ddee820dc7747428360ecff5fe461316dd35322d7db5e267535f2754f966c5eefa378edf9f4f059c6afda87667527e68b8c84297975eae5eccff3a135e2e0a10a9d4cb6a01f9ba5169209485bd40a72482559be5e3203955a5ef4d7bdb531b5130dd6144e967ccbf14bdf910083e350ab3e15cc478d44947789a8bc4bfd0efbce2e3d437ff327343fb97951fe7154768211206d838450ecacfeeb93c5b17fa8e6b8945be325abe40ef89b30ce82958c92c24676f3c7031095d05761e83b4b209d8cd3a6c378c6f5d7cdf041cd2f513b", 0xf7}, {&(0x7f0000005780)="c5d92f5823c824cf71b075119875f8c585f84ed7726e1619437bcca2173a77b182cfa3c7262f0dad9929cd84c07a8514884998c11178ee1e63ee46cbf6fe445b4c98e4c6ef61a26594bfadddbff22e6043620b250970103e6f0a5a11fac362dcedac8994665b70ad506f61823ccef5cc76146b621dcbf8325c2d4cc652f4767d14fea7eab94ce5c55eca402a00", 0x8d}], 0x6, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r11, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x18, 0x1, 0x1, [r5, r10]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138, 0x24000004}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)="40ed8e224a6dad06881aa57850ba1b476ef0c60e5c7d4864", 0x18}, {&(0x7f0000005c00)="5776b7b0a9200464f80384704982830d1a6ff47ed5f8d2b2d487e133db87e696ec18d8f817885ffda50ba4a8b17572cd7c11549f25aa4d13dc1be452a8014ef20de0066fbbd43d60a602d24ed4c442b1b88971a1304f706cd140ef758773c64ec8d66b9ec3d557c3e3308a232d5c9d0457c0ae38d2", 0x75}, {&(0x7f0000005c80)="1b52b759521f7d81d8f096d83a03de", 0xf}], 0x3, 0x0, 0x0, 0x4000800}}], 0x3, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m30.463811271s ago: executing program 2 (id=12327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="3e660faebfb17966b9640a000066b8e2ee000066ba000000000f30ba2100ec26f00fba7f1559b800078ec0baf80c66b8249bcb8466efbafc0cb80c00eff30f205b66b80a0000000f23c80f21f86635080030000f23f8ba4200b80090ef440f20c0663501000000440f22c0", 0x6b}], 0x1, 0xc, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006c40)=ANY=[@ANYBLOB="1c0000000c0601010000000000000000000053b3a25f010007000000"], 0x1c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000200)="0f3801b2c2cb66b9800000c00f320f300f350f636dffbaf80c66b8b01e588c66efbafc0ced660f2b140fc75e3b66b80c0000000f23c80f21f86635000070000f23f80f0d8c00000f2242", 0x4a}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x148, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x3, 0x10, 0x0, 0x2, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 2m30.463140993s ago: executing program 4 (id=12328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xc, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f80, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) symlink(0x0, &(0x7f0000000380)='./file2\x00') 2m30.462028789s ago: executing program 7 (id=12329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000000340)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x24020030}, 0x20008040) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000000340)) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) (async) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x24020030}, 0x20008040) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) read(r3, &(0x7f0000001400)=""/4076, 0xfec) (async) 2m26.849200315s ago: executing program 8 (id=12331): r0 = getpid() capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffff8, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a0b200000000", 0x0, 0x0, 0x3, 0x0, 0x0}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd030100000000006f000000000000006916320000000000bf670000000000001706000007ff07006706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127041d45611d56502ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5de000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c50ba7dffca2f8cc88ed96f4b781ffc9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba2045f120067510ba4857df4425d4b9e8a0b66e18145d6c947dabe94bcac353d8cb4b9ac15af8438fdade2445df04d21c50522f90bc48cbb52e23bc103b8ce002126ee0d15e5c401318fa808d4f4b1946c0f3ffd6c14d9874321dc99c546218939fa47bfe065fd3f67f115be05cf83fc182963ad729e526288e9a1200000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getpid() (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffff8, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a0b200000000", 0x0, 0x0, 0x3, 0x0, 0x0}) (async) socket(0x2, 0x80805, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) 2m26.834839692s ago: executing program 9 (id=12332): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r7) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r5}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r8, 0x5501) syz_open_dev$evdev(0x0, 0x72, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r9, 0x8044610a, &(0x7f0000000180)) 2m15.612420313s ago: executing program 9 (id=12333): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="26bd062959a5e692d9b39b2fcf78753fdf5fe498850fd5af85a58cee897a539c5ed9014f8e2038a582f87fd0de8ce8ed96c8e786afc9a4ed99ff971803f32f213e0454229f50e3796b67bdf0c1770fe4c3cf74e0496de4312e55c3a0a87d0afbb5e485d633d7cd0e5c72e1f1d4c07a2b96d0598068116263c2389bf43f63dddf32c5f9362cf1c18dce2608063bbab35394bff81da2d3c0", @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001a192fa402104f501da5702000001090240000101007490090479ff000202ff000d240f0102000000faff040040052406000005240008000d240f01"], 0x0) 2m14.649550562s ago: executing program 8 (id=12334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0xbd8, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x0, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.289664703s ago: executing program 49 (id=12327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="3e660faebfb17966b9640a000066b8e2ee000066ba000000000f30ba2100ec26f00fba7f1559b800078ec0baf80c66b8249bcb8466efbafc0cb80c00eff30f205b66b80a0000000f23c80f21f86635080030000f23f8ba4200b80090ef440f20c0663501000000440f22c0", 0x6b}], 0x1, 0xc, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006c40)=ANY=[@ANYBLOB="1c0000000c0601010000000000000000000053b3a25f010007000000"], 0x1c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000200)="0f3801b2c2cb66b9800000c00f320f300f350f636dffbaf80c66b8b01e588c66efbafc0ced660f2b140fc75e3b66b80c0000000f23c80f21f86635000070000f23f80f0d8c00000f2242", 0x4a}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x148, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x3, 0x10, 0x0, 0x2, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 2m8.308653325s ago: executing program 50 (id=12328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xc, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f80, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) symlink(0x0, &(0x7f0000000380)='./file2\x00') 2m2.143517668s ago: executing program 51 (id=12329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000000340)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x24020030}, 0x20008040) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000000340)) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) (async) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x24020030}, 0x20008040) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) read(r3, &(0x7f0000001400)=""/4076, 0xfec) (async) 1m59.112455917s ago: executing program 52 (id=12333): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="26bd062959a5e692d9b39b2fcf78753fdf5fe498850fd5af85a58cee897a539c5ed9014f8e2038a582f87fd0de8ce8ed96c8e786afc9a4ed99ff971803f32f213e0454229f50e3796b67bdf0c1770fe4c3cf74e0496de4312e55c3a0a87d0afbb5e485d633d7cd0e5c72e1f1d4c07a2b96d0598068116263c2389bf43f63dddf32c5f9362cf1c18dce2608063bbab35394bff81da2d3c0", @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001a192fa402104f501da5702000001090240000101007490090479ff000202ff000d240f0102000000faff040040052406000005240008000d240f01"], 0x0) 1m59.10054185s ago: executing program 8 (id=12339): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="524144494f0a434420274d6963204374707475726520537769746368272030303030303030303030413030303030303030300a494741494e0a545245424c45202743442043617074757265205377697463682720303030b0303030103030303030303030303030300a524144494f0a535045414b455220a3fbf0bddbd6c758726520537769746368271db3540d5a0309"], 0xd3) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.695697958s ago: executing program 8 (id=12340): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m41.496225923s ago: executing program 8 (id=12341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb6}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000002c0), 0x4) (async) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="14840000", @ANYRESHEX=r4, @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x20000004) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x8003, 0xbffd, 0xe652, 0x0, 0x4, 0x8, 0x1}, 0x9c) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @mcast2, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0xa63d395b82aff154, 0x0, 0x1b}, 0x9c) (async, rerun: 64) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14f4ffffef00010000000000000000000700000a20000000030a010800000000000000000a0000040c0002400000000000000002140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000340), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) (async, rerun: 32) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r5 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) (async, rerun: 64) setresuid(0x0, r6, 0x0) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m31.389210192s ago: executing program 8 (id=12342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000b40)=[@timestamp, @window={0x3, 0x400, 0xb9}, @timestamp, @window={0x3, 0x6, 0x2020}, @timestamp, @mss={0x2, 0x42}, @timestamp, @timestamp], 0x20000000000000cc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000)) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x9}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0xeeee0000, 0x1000, &(0x7f0000cd1000/0x1000)=nil}) 1m31.386076781s ago: executing program 0 (id=12335): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x54, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2a]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1b9e}, @broadcast, @device_a, @random="95c2978aa78b", {0x8, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x3, @val=0x7, @void, @void}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000001380)={'sit0\x00', 0x0, 0x10, 0x20, 0x0, 0xdb, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4, 0x35, 0x1, 0x3}, @rr={0x7, 0x3, 0xda}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x400}, {@private=0xa010102, 0x1}]}, @generic={0x89, 0x2}]}}}}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f0000000380)=0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095", @ANYBLOB="6380ffbc58452c87dd398d26fc0bd2463a52582f96969acfbebf5e7f897e048ea154749cebd3a884195750da1058ed9a4f4d14aa34588439558d9f9c77b1a8dcf4fde1721b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r11, 0x0, 0xa}, 0x18) 1m30.390580224s ago: executing program 3 (id=12337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001800835e000000000000000002008000020000020000000006001c004e2400000c0016800600060000180000080005000000000008000100ac14"], 0x60}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x4040000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="000029bd7000ffdb"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m5.075287745s ago: executing program 53 (id=12342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000b40)=[@timestamp, @window={0x3, 0x400, 0xb9}, @timestamp, @window={0x3, 0x6, 0x2020}, @timestamp, @mss={0x2, 0x42}, @timestamp, @timestamp], 0x20000000000000cc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000)) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x9}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0xeeee0000, 0x1000, &(0x7f0000cd1000/0x1000)=nil}) 30.697621046s ago: executing program 0 (id=12335): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x54, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2a]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1b9e}, @broadcast, @device_a, @random="95c2978aa78b", {0x8, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x3, @val=0x7, @void, @void}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000001380)={'sit0\x00', 0x0, 0x10, 0x20, 0x0, 0xdb, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4, 0x35, 0x1, 0x3}, @rr={0x7, 0x3, 0xda}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x400}, {@private=0xa010102, 0x1}]}, @generic={0x89, 0x2}]}}}}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f0000000380)=0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095", @ANYBLOB="6380ffbc58452c87dd398d26fc0bd2463a52582f96969acfbebf5e7f897e048ea154749cebd3a884195750da1058ed9a4f4d14aa34588439558d9f9c77b1a8dcf4fde1721b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r11, 0x0, 0xa}, 0x18) 7.321955205s ago: executing program 6 (id=12338): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400010000000016fffffff7"], 0x18}}, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000080), 0x5, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000340)={[0x6]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$unix(r6, 0x0, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x60100, 0x30) preadv(r9, &(0x7f0000000180), 0x0, 0x401, 0x2) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 0s ago: executing program 1 (id=12343): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="00000020707e481afde2e35cc38f0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000c72f506d33e991fc0000850000000100000095f4cd06b4eb2b69aa9e41d022b338ce1995b418b1668026f991efe9b8ab2af1f7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xfffffffffffffd4b, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000000080)=0x40) kernel console output (not intermixed with test programs): AULT_INJECTION: forcing a failure. [ 2867.630104][T18289] name failslab, interval 1, probability 0, space 0, times 0 [ 2867.642978][T18289] CPU: 0 UID: 0 PID: 18289 Comm: syz.8.11747 Not tainted syzkaller #0 PREEMPT(full) [ 2867.643003][T18289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2867.643014][T18289] Call Trace: [ 2867.643022][T18289] [ 2867.643029][T18289] dump_stack_lvl+0x189/0x250 [ 2867.643046][T18289] ? irqentry_exit+0x74/0x90 [ 2867.643060][T18289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2867.643076][T18289] ? dump_stack+0x9/0x20 [ 2867.643091][T18289] should_fail_ex+0x414/0x560 [ 2867.643107][T18289] should_failslab+0xa8/0x100 [ 2867.643120][T18289] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2867.643136][T18289] ? __alloc_skb+0x112/0x2d0 [ 2867.643147][T18289] ? __lock_acquire+0xab9/0xd20 [ 2867.643163][T18289] __alloc_skb+0x112/0x2d0 [ 2867.643176][T18289] _sctp_make_chunk+0x5e/0x430 [ 2867.643188][T18289] ? __lock_acquire+0xab9/0xd20 [ 2867.643202][T18289] sctp_make_heartbeat+0xa7/0x470 [ 2867.643217][T18289] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 2867.643232][T18289] ? is_bpf_text_address+0x26/0x2b0 [ 2867.643251][T18289] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 2867.643270][T18289] sctp_do_sm+0x1e7/0x5a20 [ 2867.643279][T18289] ? __pfx_sctp_pname+0x10/0x10 [ 2867.643288][T18289] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2867.643299][T18289] ? arch_stack_walk+0xfc/0x150 [ 2867.643316][T18289] ? __pfx_sctp_do_sm+0x10/0x10 [ 2867.643324][T18289] ? stack_trace_save+0x9c/0xe0 [ 2867.643334][T18289] ? __pfx_stack_trace_save+0x10/0x10 [ 2867.643365][T18289] ? __lock_acquire+0xab9/0xd20 [ 2867.643382][T18289] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 2867.643400][T18289] sctp_apply_peer_addr_params+0xdf/0x1880 [ 2867.643415][T18289] ? do_raw_spin_unlock+0x122/0x240 [ 2867.643428][T18289] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 2867.643455][T18289] sctp_setsockopt+0x709/0x1200 [ 2867.643468][T18289] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2867.643485][T18289] do_sock_setsockopt+0x17c/0x1b0 [ 2867.643500][T18289] __x64_sys_setsockopt+0x13f/0x1b0 [ 2867.643514][T18289] do_syscall_64+0xfa/0xfa0 [ 2867.643527][T18289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.643537][T18289] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2867.643546][T18289] ? clear_bhb_loop+0x60/0xb0 [ 2867.643558][T18289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.643568][T18289] RIP: 0033:0x7f8df518ec29 [ 2867.643577][T18289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2867.643587][T18289] RSP: 002b:00007f8df5f98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2867.643598][T18289] RAX: ffffffffffffffda RBX: 00007f8df53d6090 RCX: 00007f8df518ec29 [ 2867.643606][T18289] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000009 [ 2867.643612][T18289] RBP: 00007f8df5f98090 R08: 000000000000009c R09: 0000000000000000 [ 2867.643618][T18289] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 2867.643625][T18289] R13: 00007f8df53d6128 R14: 00007f8df53d6090 R15: 00007ffee4db9a38 [ 2867.643642][T18289] [ 2867.936665][ C0] vkms_vblank_simulate: vblank timer overrun [ 2868.010638][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.024632][ T6000] usb 5-1: Product: syz [ 2868.028986][ T6000] usb 5-1: Manufacturer: syz [ 2868.061287][ T6000] usb 5-1: SerialNumber: syz [ 2868.259737][T18296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2868.267236][T18296] EXT4-fs: Ignoring removed bh option [ 2868.274615][T18296] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2868.290953][T18296] EXT4-fs (loop1): unable to read superblock [ 2868.299255][ T6000] usb 5-1: config 0 descriptor?? [ 2868.317449][ T10] usb 10-1: USB disconnect, device number 103 [ 2868.411994][T18298] fuse: Unknown parameter '@' [ 2868.708213][ T5979] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2868.716562][ T6000] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 2868.731298][ T6000] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 2868.847961][ T5979] usb 3-1: device descriptor read/64, error -71 [ 2868.874672][T18308] mkiss: ax0: crc mode is auto. [ 2869.017281][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11753'. [ 2869.034822][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11753'. [ 2869.292676][ T5979] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 2869.447946][ T5979] usb 3-1: device descriptor read/64, error -71 [ 2869.568319][ T5979] usb usb3-port1: attempt power cycle [ 2870.018597][ T5979] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 2870.144660][ T5979] usb 3-1: device descriptor read/8, error -71 [ 2870.834988][T13478] usb 5-1: USB disconnect, device number 34 [ 2871.248334][ T5979] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 2871.415526][ T5979] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2871.440712][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2871.474666][ T5979] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2871.494691][ T5979] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2871.510454][ T5979] usb 3-1: Manufacturer: syz [ 2871.527248][T18358] adf_ctl_ioctl: 15 callbacks suppressed [ 2871.527266][T18358] QAT: Invalid ioctl 21531 [ 2871.556902][ T5979] usb 3-1: config 0 descriptor?? [ 2871.749219][T18370] fuse: Unknown parameter '@' [ 2871.834468][ T5979] rc_core: IR keymap rc-hauppauge not found [ 2871.841153][T14107] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2871.958351][ T5979] Registered IR keymap rc-empty [ 2871.976370][ T5979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2872.029545][ T5979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input150 [ 2872.148016][T14107] usb 5-1: Using ep0 maxpacket: 32 [ 2872.155227][T14107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2872.170155][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 106 [ 2872.180239][T14107] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2872.193129][T14107] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2872.213419][T14107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2872.279351][T14107] usb 5-1: config 0 descriptor?? [ 2872.381863][T14107] usb 3-1: USB disconnect, device number 60 [ 2872.758866][T18358] tipc: Started in network mode [ 2872.764821][T18358] tipc: Node identity ac14140f, cluster identity 4711 [ 2872.820209][T18358] tipc: New replicast peer: 255.255.255.255 [ 2872.874606][T18358] tipc: Enabled bearer , priority 1 [ 2872.926049][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11764'. [ 2872.991913][T26146] usb 5-1: USB disconnect, device number 35 [ 2873.026045][T18388] netlink: 'syz.9.11769': attribute type 10 has an invalid length. [ 2873.135892][T18388] team0: Port device dummy0 added [ 2873.195975][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11770'. [ 2873.238139][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11770'. [ 2873.620116][T14107] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2873.646237][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11774'. [ 2873.767978][ T5979] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 2873.858526][T18751] tipc: Node number set to 2886997007 [ 2873.978879][T14107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2874.006025][T14107] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 2874.014769][T14107] usb 3-1: config 0 has no interface number 0 [ 2874.023633][T14107] usb 3-1: config 0 interface 185 has no altsetting 0 [ 2874.034851][T14107] usb 3-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=3c.dd [ 2874.054311][T14107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2874.062589][ T5979] usb 10-1: Using ep0 maxpacket: 8 [ 2874.085643][ T5979] usb 10-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 2874.102302][T14107] usb 3-1: Product: syz [ 2874.118827][ T5979] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2874.130499][T14107] usb 3-1: Manufacturer: syz [ 2874.135474][T14107] usb 3-1: SerialNumber: syz [ 2874.152454][ T5979] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2874.176726][T14107] usb 3-1: config 0 descriptor?? [ 2874.209391][ T5979] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2874.219344][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2874.228540][ T5979] usb 10-1: Product: syz [ 2874.233493][ T5979] usb 10-1: Manufacturer: syz [ 2874.239570][ T5979] usb 10-1: SerialNumber: syz [ 2874.263922][ T5979] usb 10-1: config 0 descriptor?? [ 2874.435114][T14107] usb 3-1: bad CDC descriptors [ 2874.480553][T14107] usb 3-1: USB disconnect, device number 61 [ 2874.480628][T26146] usb 10-1: USB disconnect, device number 104 [ 2874.813388][ C1] vkms_vblank_simulate: vblank timer overrun [ 2875.694005][T18429] tmpfs: Bad value for 'mpol' [ 2876.254086][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11785'. [ 2876.263401][T18455] openvswitch: netlink: Flow key attr not present in new flow. [ 2876.435109][T18456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11786'. [ 2877.146342][T18465] netlink: 'syz.9.11789': attribute type 10 has an invalid length. [ 2877.300991][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2877.375597][T18465] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2878.121098][T18478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11793'. [ 2878.138891][T18478] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2879.292083][T18511] overlay: Bad value for 'uuid' [ 2879.539375][T18518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11802'. [ 2880.028297][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2880.211737][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2880.246320][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.278607][ T10] usb 5-1: Product: syz [ 2880.282805][ T10] usb 5-1: Manufacturer: syz [ 2880.302339][ T10] usb 5-1: SerialNumber: syz [ 2880.321671][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2880.361097][T26146] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2880.379605][T18491] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2880.410243][T18491] FAT-fs (loop2): unable to read boot sector [ 2880.599913][ T10] usb 5-1: USB disconnect, device number 36 [ 2880.970455][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11805'. [ 2880.993219][T18534] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2881.001037][T18534] team0: Device ipvlan2 is already an upper device of the team interface [ 2881.499633][T26146] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2881.506682][T26146] ath9k_htc: Failed to initialize the device [ 2881.515596][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 2881.745110][T18541] netlink: 'syz.2.11810': attribute type 2 has an invalid length. [ 2882.071266][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 2882.637954][T14107] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 2882.649164][T18751] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2883.250448][T14107] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2883.268798][T18751] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2883.293894][T14107] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2883.308038][T18751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.308089][T26146] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2883.323891][T18751] usb 5-1: Product: syz [ 2883.329710][T18751] usb 5-1: Manufacturer: syz [ 2883.335226][T18751] usb 5-1: SerialNumber: syz [ 2883.368210][T14107] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2883.381528][T14107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2883.394262][T18751] usb 5-1: config 0 descriptor?? [ 2883.399648][T14107] usb 10-1: SerialNumber: syz [ 2883.407304][T18751] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2883.422097][T18751] usb 5-1: setting power ON [ 2883.430166][T18751] dvb-usb: bulk message failed: -22 (2/0) [ 2883.439464][T18751] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2883.497983][T26146] usb 9-1: Using ep0 maxpacket: 16 [ 2884.464377][T18751] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 2884.480945][T26146] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2884.506678][T18751] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 2891.891102][T14107] usb 10-1: 0:2 : does not exist [ 2891.896128][T14107] usb 10-1: unit 1 not found! [ 2891.908866][ T5877] usb 5-1: USB disconnect, device number 37 [ 2891.976151][T14107] usb 10-1: USB disconnect, device number 105 [ 2891.991228][T26146] usb 9-1: string descriptor 0 read error: -71 [ 2891.997559][T26146] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 2892.052492][T26146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.086315][T18594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11828'. [ 2892.093808][T26146] usb 9-1: config 0 descriptor?? [ 2892.102821][T18593] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11825'. [ 2892.369176][T26146] usb 9-1: can't set config #0, error -71 [ 2892.400527][T14107] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2892.402592][T26146] usb 9-1: USB disconnect, device number 19 [ 2892.619894][T14107] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 2892.694872][T14107] usb 10-1: config 0 has no interface number 0 [ 2892.695897][T18602] overlayfs: failed to resolve './file2': -2 [ 2893.093938][T14107] usb 10-1: string descriptor 0 read error: -71 [ 2893.101149][T14107] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2893.117982][T14107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.126259][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11829'. [ 2893.179256][T14107] usb 10-1: config 0 descriptor?? [ 2893.212367][T14107] usb 10-1: can't set config #0, error -71 [ 2893.246269][T14107] usb 10-1: USB disconnect, device number 106 [ 2894.626594][T18651] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11842'. [ 2895.140429][T18656] netlink: 'syz.1.11844': attribute type 10 has an invalid length. [ 2895.175924][T18656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11844'. [ 2895.195378][T18656] team0: entered promiscuous mode [ 2895.200805][T18656] team0: entered allmulticast mode [ 2895.213245][T18656] bridge0: port 1(team0) entered blocking state [ 2895.221835][T18656] bridge0: port 1(team0) entered disabled state [ 2895.647403][T18660] ext4: Unknown parameter 'smackfshat' [ 2895.844877][T18669] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 2895.847006][ T4318] Bluetooth: hci3: hcon ffff8880854c0000 sent 1 < count 32780 [ 2896.192719][ T30] audit: type=1326 audit(4433.145:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.331916][ T30] audit: type=1326 audit(4433.145:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.355132][ T30] audit: type=1326 audit(4433.175:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.377428][ T30] audit: type=1326 audit(4433.175:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.400411][ T30] audit: type=1326 audit(4433.175:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.467015][T18684] Bluetooth: MGMT ver 1.23 [ 2896.489919][T18684] new mount options do not match the existing superblock, will be ignored [ 2896.498607][ T30] audit: type=1326 audit(4433.175:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.524366][T18684] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 2896.531062][ T30] audit: type=1326 audit(4433.175:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.577032][ T30] audit: type=1326 audit(4433.175:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.599453][ T30] audit: type=1326 audit(4433.175:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.623678][ T30] audit: type=1326 audit(4433.175:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713638ec29 code=0x7ffc0000 [ 2896.694468][T18689] macvtap1: entered promiscuous mode [ 2897.178580][T18708] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 2897.188323][T18708] SQUASHFS error: Failed to read block 0x0: -5 [ 2897.195257][T18708] unable to read squashfs_super_block [ 2897.868325][T18713] netlink: 64 bytes leftover after parsing attributes in process `syz.9.11859'. [ 2898.056823][T18716] IPVS: dh: FWM 3 0x00000003 - no destination available [ 2898.869072][ T4318] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2898.871377][T31680] Bluetooth: hci2: command 0x0406 tx timeout [ 2899.148692][T15690] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2899.508690][T15690] usb 2-1: Using ep0 maxpacket: 8 [ 2900.007502][T15690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2900.016687][T15690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2900.068699][T15690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2900.468819][T15690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2900.511127][T15690] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 2900.528951][T15690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2900.548784][T15690] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 392 [ 2900.584021][T18723] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2900.600232][T15690] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2900.611104][T18723] I/O error, dev loop8, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2900.635983][T15690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.651823][T18723] Mount JFS Failure: -5 [ 2900.656307][T15690] usb 2-1: Product: syz [ 2900.666481][T15690] usb 2-1: Manufacturer: syz [ 2900.675610][T15690] usb 2-1: SerialNumber: syz [ 2900.704412][T15690] usb 2-1: config 0 descriptor?? [ 2900.726419][T18719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2900.772915][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11868'. [ 2900.773249][T18719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2900.798157][T18743] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11867'. [ 2900.820689][T18740] IPVS: Unknown mcast interface: ipvlan1 [ 2901.134317][T15690] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2901.275631][T18753] fuse: Unknown parameter '@' [ 2901.413528][T15690] usb 2-1: USB disconnect, device number 116 [ 2901.518536][T18763] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2901.534682][T18761] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.535804][T18763] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2901.547808][T18761] I/O error, dev loop9, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.561392][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2901.578342][T18761] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.588680][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 2901.590376][T18763] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 2901.598564][T18761] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2901.614045][T18763] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2901.621007][T18761] UDF-fs: Scanning with blocksize 512 failed [ 2901.631130][T18761] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.638873][T18763] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2901.641575][T18761] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.657641][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2901.661708][T18763] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2901.667899][T18761] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.685727][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 2901.689126][T18763] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2901.695792][T18761] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2901.709790][T18761] UDF-fs: Scanning with blocksize 1024 failed [ 2901.716670][T18761] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2901.718951][T18763] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2901.728602][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2901.743905][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 2901.749592][T18763] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2901.754180][T18761] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2901.767999][T18761] UDF-fs: Scanning with blocksize 2048 failed [ 2901.776487][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2901.779846][T18763] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2901.786758][T18761] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 2901.802557][T18761] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2901.809036][T18763] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 2901.811580][T18761] UDF-fs: Scanning with blocksize 4096 failed [ 2901.816626][T18763] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2901.816697][T18763] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 2901.823087][T18761] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 2901.834074][T18743] (syz.4.11867,18743,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 2901.855231][T18763] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 2901.856078][T18761] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11873'. [ 2901.863203][T18743] (syz.4.11867,18743,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 2901.872828][T26146] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2901.885148][T18763] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 2901.896543][T18763] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 2901.899753][T18743] (syz.4.11867,18743,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2901.913538][T18743] (syz.4.11867,18743,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 2902.039041][T26146] usb 9-1: Using ep0 maxpacket: 16 [ 2902.046065][T26146] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 2902.055506][T26146] usb 9-1: config 0 has no interface number 0 [ 2902.064747][T26146] usb 9-1: config 0 interface 237 has no altsetting 0 [ 2902.117169][T26146] usb 9-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 2902.126541][T26146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.154849][T26146] usb 9-1: Product: syz [ 2902.174467][T26146] usb 9-1: Manufacturer: syz [ 2902.179423][T26146] usb 9-1: SerialNumber: syz [ 2902.189478][T26146] usb 9-1: config 0 descriptor?? [ 2902.198401][T26146] snd_usb_podhd 9-1:0.237: Line 6 POD HD300 found [ 2902.306956][T11166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.409081][ T5979] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2902.421086][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11878'. [ 2902.462001][T18776] wg1: entered promiscuous mode [ 2902.466897][T18776] wg1: entered allmulticast mode [ 2902.484070][T11166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.497124][T26146] snd_usb_podhd 9-1:0.237: cannot get proper max packet size [ 2902.519559][T26146] snd_usb_podhd 9-1:0.237: Line 6 POD HD300 now disconnected [ 2902.540974][T26146] snd_usb_podhd 9-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 2902.558994][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 2902.566346][ T5979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2902.581085][ T5979] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2902.590673][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.600057][ T5979] usb 5-1: Product: syz [ 2902.603009][T11166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.604318][ T5979] usb 5-1: Manufacturer: syz [ 2902.619385][ T5979] usb 5-1: SerialNumber: syz [ 2902.631288][ T5979] usb 5-1: config 0 descriptor?? [ 2902.647046][ T5979] usb 5-1: bad CDC descriptors [ 2902.657803][ T5979] usb 5-1: unsupported MDLM descriptors [ 2902.697968][T11166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.862265][T14107] usb 5-1: USB disconnect, device number 38 [ 2902.935698][T11166] bridge0: port 1(team0) entered disabled state [ 2903.085996][T12261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2903.101187][T12261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2903.116645][T12261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2903.128447][T12261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2903.136668][T12261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2903.540034][T18796] netlink: 'syz.9.11885': attribute type 8 has an invalid length. [ 2903.631553][ C0] vkms_vblank_simulate: vblank timer overrun [ 2903.681303][ C0] vkms_vblank_simulate: vblank timer overrun [ 2904.170725][T11166] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2904.316285][T11166] bond0 (unregistering): Released all slaves [ 2904.664483][ C0] vkms_vblank_simulate: vblank timer overrun [ 2904.670801][T14107] usb 9-1: USB disconnect, device number 20 [ 2904.728636][T11166] bond1 (unregistering): Released all slaves [ 2905.168038][ C0] vkms_vblank_simulate: vblank timer overrun [ 2905.270093][T12261] Bluetooth: hci1: command tx timeout [ 2905.346044][T18826] 9pnet_fd: Insufficient options for proto=fd [ 2905.776774][T11166] hsr_slave_0: left promiscuous mode [ 2905.779535][T15690] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2905.790083][T11166] hsr_slave_1: left promiscuous mode [ 2905.811007][T11166] veth1_macvtap: left promiscuous mode [ 2905.816670][T11166] veth0_macvtap: left promiscuous mode [ 2905.823095][T11166] veth1_vlan: left promiscuous mode [ 2905.828469][T11166] veth0_vlan: left promiscuous mode [ 2905.990036][T12261] Bluetooth: hci4: command 0x206a tx timeout [ 2905.996179][T18717] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 2906.076384][T15690] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2906.129544][T15690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.171346][T15690] usb 10-1: Product: syz [ 2906.177736][T15690] usb 10-1: Manufacturer: syz [ 2906.190849][T15690] usb 10-1: SerialNumber: syz [ 2906.208107][T15690] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2906.239958][ T5877] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2906.458028][T18831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.499953][T18831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2906.651603][T26146] usb 10-1: USB disconnect, device number 107 [ 2907.437061][T18717] Bluetooth: hci1: command tx timeout [ 2907.447627][ T5877] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2907.875280][ T5877] ath9k_htc: Failed to initialize the device [ 2907.921448][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11898'. [ 2907.937100][T18856] binder: Unknown parameter 'dont_appraise' [ 2907.948924][T26146] usb 10-1: ath9k_htc: USB layer deinitialized [ 2908.455541][ T5877] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2908.637754][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 2908.645096][T14107] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 2908.645339][ T5877] usb 5-1: config 0 has an invalid interface number: 232 but max is 0 [ 2908.664024][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2908.698814][ T5877] usb 5-1: config 0 has no interface number 0 [ 2908.705678][ T5877] usb 5-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2908.744591][ T5877] usb 5-1: config 0 interface 232 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2908.755043][ T5877] usb 5-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2908.794433][ T5877] usb 5-1: config 0 interface 232 has no altsetting 0 [ 2908.807849][ T5877] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 2908.817424][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.829851][ T5877] usb 5-1: Product: syz [ 2908.858041][ T5877] usb 5-1: Manufacturer: syz [ 2908.862910][ T5877] usb 5-1: SerialNumber: syz [ 2908.875695][ T5877] usb 5-1: config 0 descriptor?? [ 2908.885207][ T5877] s2255 5-1:0.232: Could not find bulk-in endpoint [ 2908.892497][ T5877] Sensoray 2255 driver load failed: 0xfffffff4 [ 2908.899901][ T5877] s2255 5-1:0.232: probe with driver s2255 failed with error -12 [ 2909.091373][ T5979] usb 5-1: USB disconnect, device number 39 [ 2909.511994][T18717] Bluetooth: hci1: command tx timeout [ 2910.018272][T18848] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 2910.040154][T18849] macsec1: entered promiscuous mode [ 2910.093564][T18783] chnl_net:caif_netlink_parms(): no params data found [ 2910.724221][T18783] bridge0: port 1(bridge_slave_0) entered blocking state [ 2910.731881][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 2910.739678][T18783] bridge_slave_0: entered allmulticast mode [ 2910.990908][T18783] bridge_slave_0: entered promiscuous mode [ 2911.033637][T18783] bridge0: port 2(bridge_slave_1) entered blocking state [ 2911.043179][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 2911.043566][T11166] IPVS: stop unused estimator thread 0... [ 2911.060668][T18783] bridge_slave_1: entered allmulticast mode [ 2911.073623][T18783] bridge_slave_1: entered promiscuous mode [ 2911.134152][T14107] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2911.167180][T14107] usb 9-1: can't read configurations, error -71 [ 2911.224226][T18783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2911.236948][T18783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2911.300618][T18899] vivid-002: disconnect [ 2911.328375][T18783] team0: Port device team_slave_0 added [ 2911.362789][T18783] team0: Port device team_slave_1 added [ 2911.389786][T18899] vivid-002: reconnect [ 2911.518514][T18783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2911.526212][T18783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2911.560811][T18783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2911.580406][T18783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2911.590232][T18717] Bluetooth: hci1: command tx timeout [ 2911.605724][T18783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2911.644401][T18783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2911.668304][T18906] tmpfs: Bad value for 'mpol' [ 2911.690229][ T5979] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2911.759127][T18783] hsr_slave_0: entered promiscuous mode [ 2911.767316][T18783] hsr_slave_1: entered promiscuous mode [ 2911.774503][T18783] debugfs: 'hsr0' already exists in 'hsr' [ 2911.781348][T18783] Cannot create hsr debugfs directory [ 2911.820178][ T5979] usb 3-1: device descriptor read/64, error -71 [ 2912.081162][ T5979] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2912.280657][ T5979] usb 3-1: device descriptor read/64, error -71 [ 2912.406904][ T5979] usb usb3-port1: attempt power cycle [ 2912.770515][ T5979] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2912.881912][ T5979] usb 3-1: device descriptor read/8, error -71 [ 2912.904967][T18936] fuse: Bad value for 'fd' [ 2913.150509][ T5979] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2913.181620][ T5979] usb 3-1: device descriptor read/8, error -71 [ 2913.207523][T18949] netlink: 'syz.9.11926': attribute type 5 has an invalid length. [ 2913.292028][ T5979] usb usb3-port1: unable to enumerate USB device [ 2913.529793][T18783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2913.673241][T18959] QAT: failed to copy from user. [ 2914.153305][T18717] Bluetooth: hci4: command 0x206a tx timeout [ 2914.772356][T18783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2915.045050][T18783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2915.295229][T18783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2915.659573][T18959] blk_print_req_error: 6 callbacks suppressed [ 2915.659697][T18959] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2915.683389][T18959] I/O error, dev loop9, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2915.696044][T18959] Mount JFS Failure: -5 [ 2915.700259][T18959] jfs_mount failed w/return code = -5 [ 2916.222924][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 2916.244779][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 2916.251401][T18962] ceph: No mds server is up or the cluster is laggy [ 2916.782200][T18783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2917.138445][T18783] 8021q: adding VLAN 0 to HW filter on device team0 [ 2917.506082][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2917.513358][T12361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2918.324617][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2918.332001][T12361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2918.581076][T18994] hpfs: Unknown parameter 'chkds@' [ 2918.956002][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11937'. [ 2919.441229][T18783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2919.625090][T18783] veth0_vlan: entered promiscuous mode [ 2919.659834][T18783] veth1_vlan: entered promiscuous mode [ 2919.665564][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2920.039079][T18783] veth0_macvtap: entered promiscuous mode [ 2920.180153][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2920.260478][T18783] veth1_macvtap: entered promiscuous mode [ 2920.274220][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2920.293699][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2920.318973][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2920.331584][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.339916][ T10] usb 3-1: Product: syz [ 2920.344432][ T10] usb 3-1: Manufacturer: syz [ 2920.346408][T18783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2920.349156][ T10] usb 3-1: SerialNumber: syz [ 2920.364348][ T10] usb 3-1: config 0 descriptor?? [ 2920.378880][T18994] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2920.397258][T18783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2920.405998][T18994] bcachefs (/dev/loop8): error reading default superblock: IO error: -5 [ 2920.415665][T18994] I/O error, dev loop8, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2920.427695][T18994] bcachefs (/dev/loop8): error reading superblock: IO error: -5 [ 2920.440690][ T1466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.470247][T18994] bcachefs: bch2_fs_get_tree() error: EIO [ 2920.500651][ T1466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.550210][ T1466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.640033][ T1466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.818183][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2920.836036][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2920.896847][T12361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2920.905819][T12361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2922.355116][T14107] usb 3-1: USB disconnect, device number 66 [ 2923.256785][T19054] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2923.899673][T19065] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2923.930049][T19065] SQUASHFS error: Failed to read block 0x0: -5 [ 2923.962050][T19065] unable to read squashfs_super_block [ 2925.183565][T19071] EXT4-fs: Ignoring removed i_version option [ 2925.189741][T19071] EXT4-fs: Ignoring removed nobh option [ 2925.196101][T19071] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 2925.205679][T19071] EXT4-fs (loop1): unable to read superblock [ 2925.736808][T19099] netlink: 'syz.9.11963': attribute type 1 has an invalid length. [ 2925.838832][T19101] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2926.259347][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11963'. [ 2927.282019][T18923] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2927.310347][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11971'. [ 2927.373897][T19124] 9pnet_fd: Insufficient options for proto=fd [ 2927.616003][T18923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2927.662041][T18923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2927.687062][T19128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2927.726943][T18923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2927.782145][T18923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2927.858123][T18923] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2927.888836][T18923] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2927.922142][T18923] usb 2-1: Manufacturer: syz [ 2928.002184][ T5877] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2928.133043][T18923] usb 2-1: config 0 descriptor?? [ 2928.374661][ T5877] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2928.451838][ T5877] usb 3-1: config 1 has no interface number 0 [ 2928.620872][ T5877] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2928.657953][T18923] hid_parser_main: 6 callbacks suppressed [ 2928.657975][T18923] appleir 0003:05AC:8243.0070: unknown main item tag 0x0 [ 2928.678743][ T5877] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 65 [ 2928.709003][T18923] appleir 0003:05AC:8243.0070: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2928.717202][ T5877] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2928.758384][ T5877] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2928.778268][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.871088][ T5877] usb 3-1: Product: syz [ 2928.925115][ T5877] usb 3-1: Manufacturer: syz [ 2928.929834][ T5877] usb 3-1: SerialNumber: syz [ 2928.974191][T19132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2928.997962][ T10] usb 2-1: USB disconnect, device number 117 [ 2929.234524][T19132] all: renamed from bridge_slave_0 (while UP) [ 2930.428907][ T5877] usb 3-1: Error in usbnet_get_endpoints (-71) [ 2930.469875][ T5877] usb 3-1: USB disconnect, device number 67 [ 2931.478388][T19178] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11988'. [ 2932.336767][ T5877] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2932.504336][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2932.544131][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2932.600635][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2932.648778][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2932.668162][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.709594][ T5877] usb 3-1: config 0 descriptor?? [ 2932.944318][T19200] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2933.000776][T19200] EXT4-fs (loop4): unable to read superblock [ 2935.250107][T19207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11994'. [ 2935.260927][T19208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11994'. [ 2935.365727][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 2935.371758][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2935.433363][ T5877] usb 3-1: USB disconnect, device number 68 [ 2935.743333][ T5877] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2936.044208][ T5877] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 2936.100356][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.153471][ T5877] usb 3-1: config 0 descriptor?? [ 2936.255313][T26146] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 2936.377357][ T5877] hid (null): report_id 0 is invalid [ 2936.529692][T26146] usb 10-1: Using ep0 maxpacket: 32 [ 2937.216958][T26146] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2937.300026][T26146] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.344345][T26146] usb 10-1: config 0 descriptor?? [ 2937.380856][T26146] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2937.512253][ T5877] usb 3-1: string descriptor 0 read error: -71 [ 2937.561978][T19257] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2937.562858][ T5877] uclogic 0003:5543:3031.0071: failed retrieving string descriptor #200: -71 [ 2937.611714][T19257] EXT4-fs (loop4): unable to read superblock [ 2937.640524][ T5877] uclogic 0003:5543:3031.0071: failed retrieving pen parameters: -71 [ 2937.663236][ T5877] uclogic 0003:5543:3031.0071: failed probing pen v2 parameters: -71 [ 2937.718636][ T5877] uclogic 0003:5543:3031.0071: failed probing parameters: -71 [ 2937.904751][ T5877] uclogic 0003:5543:3031.0071: probe with driver uclogic failed with error -71 [ 2938.507102][T26146] gspca_sunplus: reg_r err -32 [ 2938.511977][T26146] sunplus 10-1:0.0: probe with driver sunplus failed with error -32 [ 2938.524835][ T5877] usb 3-1: USB disconnect, device number 69 [ 2939.148588][T19276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2939.227356][T19276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2939.248421][T19275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2939.629098][T19280] syzkaller0: entered promiscuous mode [ 2939.634721][T19280] syzkaller0: entered allmulticast mode [ 2939.643685][T18923] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2940.270645][T19289] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2940.283625][T19289] exFAT-fs (loop1): unable to read boot sector [ 2940.289924][T19289] exFAT-fs (loop1): failed to read boot sector [ 2940.296423][T19289] exFAT-fs (loop1): failed to recognize exfat type [ 2940.311555][T18923] usb 3-1: device descriptor read/64, error -71 [ 2940.401471][T26129] usb 10-1: USB disconnect, device number 108 [ 2940.423794][T19292] kvm_intel: kvm [19291]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3030303030303003 [ 2940.529495][T19288] overlayfs: statfs failed on './file0' [ 2940.773351][T18923] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2941.650050][T19321] overlay: ./cgroup.net/cgroup.procs is not a directory [ 2941.926355][ C0] vkms_vblank_simulate: vblank timer overrun [ 2942.576260][ C0] vkms_vblank_simulate: vblank timer overrun [ 2947.872039][T19328] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 2948.216272][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12029'. [ 2948.318090][T19343] vfat: Unknown parameter 'shorwin95' [ 2948.464918][T18751] usb 10-1: new full-speed USB device number 109 using dummy_hcd [ 2948.629020][T18751] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2948.642060][T18751] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2948.655775][T18751] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2948.667701][T18751] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2948.680492][T18751] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2948.688783][T19353] can0: slcan on ptm0. [ 2948.699675][T18751] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2948.710014][T18751] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2948.718561][T18751] usb 10-1: Product: syz [ 2948.723101][T18751] usb 10-1: Manufacturer: syz [ 2948.730237][T18751] usb 10-1: SerialNumber: syz [ 2948.737997][T18751] usb 10-1: config 0 descriptor?? [ 2948.794776][T14107] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2948.854801][ T6000] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2948.946954][ T5877] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2948.953200][T18751] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2948.965858][T14107] usb 5-1: Using ep0 maxpacket: 32 [ 2948.971140][T18751] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2948.987022][ T6000] usb 3-1: device descriptor read/64, error -71 [ 2948.989672][T14107] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2949.002378][T14107] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2949.011279][T14107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2949.020987][T14107] usb 5-1: config 1 has no interface number 0 [ 2949.027223][T14107] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2949.038526][T14107] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2949.048840][T14107] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2949.062632][T14107] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2949.072127][T14107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.094282][T14107] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2949.124678][ T5877] usb 9-1: Using ep0 maxpacket: 32 [ 2949.140346][ T5877] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2949.163378][T18751] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 2949.181668][T18751] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2949.186483][ T5877] usb 9-1: config 255 has an invalid interface number: 81 but max is 0 [ 2949.217639][T18751] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2949.230759][ T5877] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.245030][ T6000] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2949.285603][ T5877] usb 9-1: config 255 has no interface number 0 [ 2949.296971][ T5877] usb 9-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2949.301326][T14107] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 2949.324742][ T5877] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2949.344828][ T5877] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2949.355016][T14107] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2949.357367][T14107] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 2949.377335][ T5877] usb 9-1: config 255 interface 81 has no altsetting 0 [ 2949.394141][T18751] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 2949.406975][ T5877] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 2949.426941][ T6000] usb 3-1: device descriptor read/64, error -71 [ 2949.434992][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.443007][ T5877] usb 9-1: Product: syz [ 2949.477057][ T5877] usb 9-1: Manufacturer: syz [ 2949.481778][ T5877] usb 9-1: SerialNumber: syz [ 2949.535264][ T6000] usb usb3-port1: attempt power cycle [ 2949.576438][T26146] usb 5-1: USB disconnect, device number 40 [ 2949.753394][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12035'. [ 2949.774035][ T5877] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:255.81/input/input153 [ 2949.817178][ T5877] usb 9-1: USB disconnect, device number 23 [ 2949.889900][ T6000] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2949.916656][ T6000] usb 3-1: device descriptor read/8, error -71 [ 2949.920007][T18751] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2949.932539][T18751] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 2949.941889][T19352] can0 (unregistered): slcan off ptm0. [ 2949.954388][T18751] usb 10-1: USB disconnect, device number 109 [ 2950.155382][ T6000] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2950.176752][ T6000] usb 3-1: device descriptor read/8, error -71 [ 2950.286049][ T6000] usb usb3-port1: unable to enumerate USB device [ 2950.306920][T19375] netlink: 'syz.4.12038': attribute type 10 has an invalid length. [ 2950.315172][T19375] team0: Device dummy0 is up. Set it down before adding it as a team port [ 2951.155266][T14107] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2951.273418][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12042'. [ 2951.433496][T19393] vivid-002: disconnect [ 2951.470964][T14107] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 2951.487123][T14107] usb 5-1: config 0 has no interface number 1 [ 2951.493410][T14107] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2951.503798][T14107] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2951.516158][T14107] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2951.534854][T14107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2951.550043][T14107] usb 5-1: SerialNumber: syz [ 2951.591066][T14107] usb 5-1: config 0 descriptor?? [ 2951.608928][T14107] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 2951.617360][T14107] uvcvideo 5-1:0.199: No valid video chain found. [ 2951.675830][ T5877] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2951.825409][ T5877] usb 2-1: device descriptor read/64, error -71 [ 2951.914533][T19407] bond1: entered allmulticast mode [ 2951.920639][T19407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2952.065137][ T5877] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2952.137256][ T6000] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2952.195491][ T5877] usb 2-1: device descriptor read/64, error -71 [ 2952.197345][ C1] vkms_vblank_simulate: vblank timer overrun [ 2952.216540][T14107] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 2952.296774][ T6000] usb 3-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 2952.308085][ T5877] usb usb2-port1: attempt power cycle [ 2952.314278][ T6000] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 2952.329883][ T6000] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 2952.339266][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.349457][ T6000] usb 3-1: config 0 descriptor?? [ 2952.365888][T26146] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2952.375144][T14107] usb 10-1: Using ep0 maxpacket: 32 [ 2952.383035][T14107] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2952.393506][T14107] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2952.406534][T14107] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2952.415982][T14107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.424158][T14107] usb 10-1: Product: syz [ 2952.428482][T14107] usb 10-1: Manufacturer: syz [ 2952.433201][T14107] usb 10-1: SerialNumber: syz [ 2952.515555][T26146] usb 9-1: Using ep0 maxpacket: 8 [ 2952.523282][T26146] usb 9-1: config 127 has an invalid interface number: 171 but max is 1 [ 2952.532022][T26146] usb 9-1: config 127 has no interface number 1 [ 2952.538436][T26146] usb 9-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81 [ 2952.550538][T26146] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2952.560945][T26146] usb 9-1: config 127 interface 171 has no altsetting 0 [ 2952.568318][T26146] usb 9-1: config 127 interface 0 has no altsetting 0 [ 2952.579942][T26146] usb 9-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2952.589383][T26146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.598043][T26146] usb 9-1: Product: syz [ 2952.602448][T26146] usb 9-1: Manufacturer: syz [ 2952.607338][T26146] usb 9-1: SerialNumber: syz [ 2952.661785][T14107] usb 10-1: Cannot retrieve CPort count: 0 [ 2952.661808][ T5877] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2952.671452][T14107] usb 10-1: Cannot retrieve CPort count: -5 [ 2952.688016][T14107] es2_ap_driver 10-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 2952.903116][ T5877] usb 2-1: device descriptor read/8, error -71 [ 2953.206471][ T5877] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2953.279296][ T5877] usb 2-1: device descriptor read/8, error -71 [ 2953.318547][T26129] usb 5-1: USB disconnect, device number 41 [ 2953.392692][T26146] xr_serial 9-1:127.171: xr_serial converter detected [ 2953.417918][ T5877] usb usb2-port1: unable to enumerate USB device [ 2953.427711][T26146] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2953.455261][T26146] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2953.472663][ T6000] usb 3-1: string descriptor 0 read error: -71 [ 2953.494034][T26146] usb 9-1: USB disconnect, device number 24 [ 2953.502512][ T6000] usb 3-1: USB disconnect, device number 76 [ 2953.510166][T26146] xr_serial 9-1:127.171: device disconnected [ 2953.749032][T19434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2953.758291][T19434] (syz.4.12057,19434,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2953.766283][T19434] (syz.4.12057,19434,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2953.773741][T19434] (syz.4.12057,19434,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2953.782529][T19434] (syz.4.12057,19434,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2954.552350][T19393] vivid-002: reconnect [ 2954.641149][T19443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12060'. [ 2955.215144][T14107] usb 10-1: USB disconnect, device number 110 [ 2955.344704][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12062'. [ 2955.562889][T19455] bridge_slave_1: left allmulticast mode [ 2955.568870][T19455] bridge_slave_1: left promiscuous mode [ 2955.575079][T19455] bridge0: port 2(bridge_slave_1) entered disabled state [ 2955.636699][T19455] bridge_slave_0: left allmulticast mode [ 2955.643426][T19455] bridge_slave_0: left promiscuous mode [ 2955.649402][T19455] bridge0: port 1(bridge_slave_0) entered disabled state [ 2955.670611][T19450] ceph: No mds server is up or the cluster is laggy [ 2956.911495][T14107] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2957.104873][T14107] usb 3-1: Using ep0 maxpacket: 16 [ 2957.127846][T14107] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2957.137090][T14107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.149959][T14107] usb 3-1: config 0 descriptor?? [ 2957.475906][T26129] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2957.486157][T18751] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 2957.569502][T14107] lenovo 0003:17EF:6047.0072: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 2957.647810][T18751] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 2957.660869][T26129] usb 5-1: not running at top speed; connect to a high speed hub [ 2957.671112][T26129] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2957.684632][T26129] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2957.692613][T18751] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2957.709747][T18751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.721194][T18751] usb 9-1: Product: syz [ 2957.725991][T18751] usb 9-1: Manufacturer: syz [ 2957.731651][T18751] usb 9-1: SerialNumber: syz [ 2957.737503][T26129] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.40 [ 2957.750112][T26129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.762167][T18751] usb 9-1: config 0 descriptor?? [ 2957.767546][T26129] usb 5-1: Product: 㛓评篽 [ 2957.772616][T19484] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2957.781881][T18751] streamzap 9-1:0.0: streamzap_probe: endpoint doesn't match input device 020c [ 2957.799887][T26129] usb 5-1: Manufacturer: ఁ [ 2957.807712][T26129] usb 5-1: SerialNumber: 쾈⋡牙圝ː๓歐銄䄖墟ꮃ [ 2958.005784][T19484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.014400][T19484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.232721][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.252615][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12070'. [ 2958.468607][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.747552][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.766399][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.781925][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.792047][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.805015][T14107] usb 9-1: USB disconnect, device number 25 [ 2958.805579][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.821857][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.859022][T26129] usbhid 5-1:1.0: can't add hid device: -71 [ 2958.866463][T18751] usb 3-1: USB disconnect, device number 77 [ 2958.880328][T26129] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2958.898166][T26129] usb 5-1: USB disconnect, device number 42 [ 2958.997321][T19489] netlink: 'syz.9.12073': attribute type 13 has an invalid length. [ 2959.116307][T19489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2959.686742][T19503] tmpfs: Unknown parameter ' ' [ 2959.816229][T18923] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2960.274878][T18923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2960.385727][T18923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2960.436660][T18923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2960.467733][T19524] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12082'. [ 2960.487976][T18923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2960.516347][T26146] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2960.537516][T18923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.569873][T18923] usb 3-1: config 0 descriptor?? [ 2960.636195][ T5877] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2960.677215][T26146] usb 9-1: Using ep0 maxpacket: 32 [ 2960.698095][T26146] usb 9-1: config 0 has an invalid interface number: 66 but max is 1 [ 2960.808308][ T5877] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2960.998292][T18923] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2961.011452][T26146] usb 9-1: config 0 has no interface number 1 [ 2961.019003][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.032679][T26146] usb 9-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 2961.054774][ T5877] usb 2-1: config 0 descriptor?? [ 2961.062205][T26146] usb 9-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 2961.108481][T26146] usb 9-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 2961.136504][T26146] usb 9-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 2961.177010][T26146] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2961.193227][T26146] usb 9-1: config 0 interface 66 has no altsetting 0 [ 2961.221202][T26146] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 2961.248426][T26146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2961.266258][T26146] usb 9-1: SerialNumber: syz [ 2961.282691][T26146] usb 9-1: config 0 descriptor?? [ 2961.299190][ T5877] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2961.329670][T26146] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2961.352551][T26146] usb-storage 9-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 2961.533001][T26146] usb-storage 9-1:0.66: USB Mass Storage device detected [ 2961.552187][ T5877] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2961.568229][T26146] usb-storage 9-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 2961.594316][ T5877] [drm] Initialized udl on minor 2 [ 2961.625833][T19534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2961.670052][T26146] usb 9-1: USB disconnect, device number 26 [ 2961.692748][T19534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.709169][ T5877] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2961.728210][ T5877] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2962.546376][T18923] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 2962.611491][T19547] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 2962.788294][T18923] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2962.824113][T18923] usb 10-1: can't read configurations, error -61 [ 2963.736559][T26146] usb 3-1: USB disconnect, device number 78 [ 2963.886530][T18923] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 2964.141533][T18923] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2964.161689][T18923] usb 10-1: can't read configurations, error -61 [ 2964.178225][T18923] usb usb10-port1: attempt power cycle [ 2964.296610][T14107] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2964.398767][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12097'. [ 2964.442403][ T6000] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2964.475362][ T6000] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2964.485236][ T5877] usb 2-1: USB disconnect, device number 122 [ 2964.489657][T14107] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2964.496737][ T6000] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2964.525310][T14107] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2964.539399][T18923] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 2964.611606][T18923] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2964.633150][T14107] usb 9-1: string descriptor 0 read error: -22 [ 2964.644656][T14107] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2964.667451][T18923] usb 10-1: can't read configurations, error -61 [ 2964.713256][T14107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2964.857043][T18923] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 2965.197312][T18923] usb 10-1: device descriptor read/8, error -71 [ 2965.341291][T18923] usb usb10-port1: unable to enumerate USB device [ 2965.358576][T14107] usb 9-1: reset high-speed USB device number 27 using dummy_hcd [ 2965.655937][T19596] netlink: 'syz.9.12099': attribute type 1 has an invalid length. [ 2965.768770][T19596] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12099'. [ 2965.829125][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2965.966934][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.321525][T19602] IPv6: NLM_F_CREATE should be specified when creating new route [ 2966.353787][T14107] usb 9-1: device descriptor read/64, error -71 [ 2966.638678][T18923] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2966.736931][T14107] usb 9-1: reset high-speed USB device number 27 using dummy_hcd [ 2966.776187][T19613] 9pnet_fd: Insufficient options for proto=fd [ 2966.936928][T18923] usb 3-1: Using ep0 maxpacket: 32 [ 2967.135962][T18923] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2967.180366][T14107] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2967.205662][T18923] usb 3-1: config 0 has no interface number 0 [ 2967.262850][T18923] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2967.285376][T14107] usb 9-1: device firmware changed [ 2967.316149][T18923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.388522][T18923] usb 3-1: Product: syz [ 2967.428630][T18923] usb 3-1: Manufacturer: syz [ 2967.499213][T18923] usb 3-1: SerialNumber: syz [ 2967.520566][T14107] usb 9-1: USB disconnect, device number 27 [ 2967.531200][T18923] usb 3-1: config 0 descriptor?? [ 2967.548669][T18923] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2967.557002][ T5877] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 2967.713386][ T5877] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2967.748776][ T5877] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2967.776535][ T5877] usb 10-1: can't read configurations, error -71 [ 2967.859510][T18923] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2967.961677][T18923] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2968.350827][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2968.367705][ T8123] usb 3-1: USB disconnect, device number 79 [ 2968.405997][ T8123] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2968.469622][ T8123] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2968.491013][ T8123] quatech2 3-1:0.51: device disconnected [ 2968.507094][T26146] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2968.677430][T26146] usb 5-1: Using ep0 maxpacket: 32 [ 2968.684800][T26146] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2968.694738][T26146] usb 5-1: config 0 has no interface number 0 [ 2968.701197][T26146] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2968.710282][T26146] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2968.719648][T26146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.728105][T26146] usb 5-1: Product: syz [ 2968.732283][T26146] usb 5-1: Manufacturer: syz [ 2968.736910][T26146] usb 5-1: SerialNumber: syz [ 2968.744056][T26146] usb 5-1: config 0 descriptor?? [ 2968.753101][T26146] smsc75xx v1.0.0 [ 2968.897136][T14107] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2969.051125][T14107] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 2969.064656][T14107] usb 9-1: config 0 has no interface number 0 [ 2969.071218][T14107] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2969.081976][T14107] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2969.104727][T14107] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2969.114408][T14107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2969.123451][T14107] usb 9-1: Product: syz [ 2969.128119][T14107] usb 9-1: Manufacturer: syz [ 2969.133054][T14107] usb 9-1: SerialNumber: syz [ 2969.142266][T14107] usb 9-1: config 0 descriptor?? [ 2969.148337][T19659] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2969.161617][T14107] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2969.174618][T14107] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2969.261443][T19664] 9pnet_fd: Insufficient options for proto=fd [ 2969.325764][T19667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2969.334708][T19667] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2969.347801][T19667] overlayfs: missing 'lowerdir' [ 2969.737997][ T6000] usb 9-1: USB disconnect, device number 28 [ 2969.761356][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 2969.795034][ T6000] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2969.825761][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2969.839423][ T6000] cyberjack 9-1:0.69: device disconnected [ 2969.857659][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2969.878431][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2969.903460][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2969.921129][T26146] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2969.931481][T26146] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 2969.944452][T19685] syzkaller1: entered promiscuous mode [ 2969.947262][T26146] usb 5-1: USB disconnect, device number 43 [ 2969.960922][T19685] syzkaller1: entered allmulticast mode [ 2970.282152][T19700] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12129'. [ 2970.295646][T19700] netlink: 'syz.9.12129': attribute type 8 has an invalid length. [ 2970.348018][T19703] 9pnet_fd: Insufficient options for proto=fd [ 2970.505877][T19701] 9pnet_fd: Insufficient options for proto=fd [ 2970.759265][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12135'. [ 2971.037191][T19728] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 2971.046765][T19728] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 2971.055233][T19728] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 2971.064753][T19728] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 2971.072703][T19728] bcachefs: bch2_fs_get_tree() error: EIO [ 2971.841722][T19739] 9pnet_fd: Insufficient options for proto=fd [ 2972.071484][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2972.071502][ T30] audit: type=1804 audit(4509.016:1515): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.12140" name="/newroot/450/cgroup.controllers" dev="tmpfs" ino=2503 res=1 errno=0 [ 2972.186851][ T30] audit: type=1800 audit(4509.016:1516): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.12140" name="cgroup.controllers" dev="tmpfs" ino=2503 res=0 errno=0 [ 2972.620403][T19764] msdos: Unknown parameter 'dos1xfLoppy' [ 2972.848044][ T8123] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2972.994903][T19777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12151'. [ 2973.009838][ T8123] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2973.027677][ T8123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.050723][ T8123] usb 2-1: config 0 descriptor?? [ 2973.069876][ T8123] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2973.117923][T26146] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2973.209207][T19787] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2973.260592][ T8123] gp8psk: usb in 128 operation failed. [ 2973.277981][T26146] usb 9-1: Using ep0 maxpacket: 8 [ 2973.286237][T26146] usb 9-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 2973.297775][ T5877] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 2973.305631][T26146] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2973.317361][T26146] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2973.326638][T26146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.335122][T26146] usb 9-1: Product: syz [ 2973.339862][T26146] usb 9-1: Manufacturer: syz [ 2973.344488][T26146] usb 9-1: SerialNumber: syz [ 2973.351990][T26146] usb 9-1: config 0 descriptor?? [ 2973.407975][ T6000] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2973.467423][ T8123] gp8psk: usb in 146 operation failed. [ 2973.473829][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2973.475384][ T8123] gp8psk: failed to get FW version [ 2973.498108][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2973.509918][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2973.527696][ T5877] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2973.536977][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.548249][ T5877] usb 10-1: config 0 descriptor?? [ 2973.555449][ T5877] hub 10-1:0.0: USB hub found [ 2973.569984][ T10] usb 9-1: USB disconnect, device number 29 [ 2973.587713][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 2973.595363][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2973.605897][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2973.618045][ T6000] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2973.630237][ T6000] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2973.645242][ T6000] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2973.654535][ T6000] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2973.662993][ T6000] usb 3-1: Manufacturer: syz [ 2973.672404][ T6000] usb 3-1: config 0 descriptor?? [ 2973.689095][T26146] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2974.219945][T14107] usb 3-1: USB disconnect, device number 80 [ 2974.221416][ T5877] hub 10-1:0.0: 14 ports detected [ 2974.248978][ T5877] hub 10-1:0.0: insufficient power available to use all downstream ports [ 2974.350791][T19782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2974.361355][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.370518][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.414049][T26146] usb 5-1: config 0 has no interfaces? [ 2974.422799][T26146] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2974.432063][T26146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2974.440471][T26146] usb 5-1: Product: syz [ 2974.445423][T26146] usb 5-1: Manufacturer: syz [ 2974.450247][T26146] usb 5-1: SerialNumber: syz [ 2974.458342][T26146] usb 5-1: config 0 descriptor?? [ 2974.567999][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2974.585965][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.595594][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.612866][ T5877] usb 10-1: USB disconnect, device number 117 [ 2974.666856][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.675795][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.684837][T14107] usb 5-1: USB disconnect, device number 44 [ 2974.718755][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 2974.725869][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2974.734517][ T10] usb 9-1: config 0 has no interface number 0 [ 2974.740886][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2974.752056][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2974.761607][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2974.772553][ T10] usb 9-1: config 0 descriptor?? [ 2974.783357][ T10] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2974.934022][T14107] IPVS: starting estimator thread 0... [ 2975.027925][T19804] IPVS: using max 29 ests per chain, 69600 per kthread [ 2975.518939][ T8123] gp8psk: usb in 149 operation failed. [ 2975.525617][ T8123] gp8psk: failed to get FPGA version [ 2975.532372][ T8123] gp8psk: usb in 138 operation failed. [ 2975.538425][ T8123] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2975.558062][ T8123] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2975.656465][T19818] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.697199][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2975.720535][T19818] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.732049][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2975.742327][T19818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2975.768025][T19818] UDF-fs: Scanning with blocksize 512 failed [ 2975.785045][T19818] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.808272][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2975.825993][T19818] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.839166][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2975.851388][T19818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2975.860177][T19818] UDF-fs: Scanning with blocksize 1024 failed [ 2975.869684][T19818] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.880483][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2975.895166][T19818] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.905135][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2975.915187][T19818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2975.927698][T19818] UDF-fs: Scanning with blocksize 2048 failed [ 2975.944032][T19818] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.955332][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2975.965559][T19818] I/O error, dev loop4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2975.975145][T19818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2975.985098][T19818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2975.993062][T19818] UDF-fs: Scanning with blocksize 4096 failed [ 2975.999432][T19818] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 2976.025202][T14107] usb 9-1: USB disconnect, device number 30 [ 2976.323960][T19848] EXT4-fs: Ignoring removed nobh option [ 2976.336486][T19848] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2976.348294][T19848] EXT4-fs (loop4): unable to read superblock [ 2976.367476][T19848] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2976.377120][T19848] EXT4-fs (loop4): unable to read superblock [ 2976.384747][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2976.548324][ T10] usb 3-1: device descriptor read/64, error -71 [ 2976.788161][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2976.858385][ T5979] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2976.908338][T14107] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2976.918198][ T10] usb 3-1: device descriptor read/64, error -71 [ 2977.028557][ T5979] usb 5-1: Using ep0 maxpacket: 16 [ 2977.028828][ T10] usb usb3-port1: attempt power cycle [ 2977.038890][ T5979] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2977.049558][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2977.064748][ T5979] usb 5-1: Product: syz [ 2977.069121][ T5979] usb 5-1: Manufacturer: syz [ 2977.073713][ T5979] usb 5-1: SerialNumber: syz [ 2977.084145][T14107] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2977.094926][ T5979] usb 5-1: config 0 descriptor?? [ 2977.100160][T14107] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2977.171354][ T5979] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 2977.181165][T14107] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2977.190972][T14107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2977.200807][T14107] usb 9-1: SerialNumber: syz [ 2977.313877][T18923] usb 5-1: USB disconnect, device number 45 [ 2977.379231][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2977.399017][ T10] usb 3-1: device descriptor read/8, error -71 [ 2977.411116][T19858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2977.419954][T19858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.436951][T14107] usb 9-1: 0:2 : does not exist [ 2977.464166][T14107] usb 9-1: USB disconnect, device number 31 [ 2977.528161][ T5979] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 2977.638391][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2977.658894][ T10] usb 3-1: device descriptor read/8, error -71 [ 2977.769082][ T10] usb usb3-port1: unable to enumerate USB device [ 2977.875427][T19867] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2977.885129][T19867] hfs: can't find a HFS filesystem on dev loop4 [ 2977.900943][T19867] iso9660: Unknown parameter '̧7WuGVOŅQȾaȓm/uK|JӾon' [ 2979.194363][T19880] sp0: Synchronizing with TNC [ 2979.290491][T19885] Device name cannot be null; rc = [-22] [ 2979.984848][T19893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12186'. [ 2980.043810][T18466] Bluetooth: hci5: Frame reassembly failed (-84) [ 2980.055200][T19893] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2980.602505][T19898] netlink: 52 bytes leftover after parsing attributes in process `syz.9.12187'. [ 2980.655405][T19899] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12185'. [ 2980.839031][T19904] netlink: 'syz.9.12189': attribute type 1 has an invalid length. [ 2981.162567][ T10] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2981.830506][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2981.843788][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2981.854190][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2981.864451][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2981.872817][ T10] usb 3-1: SerialNumber: syz [ 2981.883338][ T10] usb 3-1: 0:2 : does not exist [ 2982.048902][T14107] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 2982.079072][T18717] Bluetooth: hci5: command 0x1003 tx timeout [ 2982.088075][T12261] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2982.167697][T12862] usb 3-1: USB disconnect, device number 85 [ 2982.209228][T14107] usb 10-1: Using ep0 maxpacket: 32 [ 2982.224835][T14107] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2982.235977][T14107] usb 10-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 2982.248024][T14107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.260373][T14107] usb 10-1: config 0 descriptor?? [ 2982.653547][T19927] binder: 19926:19927 unknown command 0 [ 2982.659450][T19927] binder: 19926:19927 ioctl c0306201 200000000080 returned -22 [ 2982.693645][T14107] input: HID 28bd:1903 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:1903.0074/input/input154 [ 2982.775542][T14107] uclogic 0003:28BD:1903.0074: input,hidraw0: USB HID v0.02 Mouse [HID 28bd:1903] on usb-dummy_hcd.9-1/input0 [ 2983.267915][ T5877] usb 10-1: USB disconnect, device number 119 [ 2983.592731][T12862] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2983.698197][T19950] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 2983.706994][T19950] netlink: 268 bytes leftover after parsing attributes in process `syz.4.12205'. [ 2983.770144][T12862] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2983.780773][T12862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.791913][T12862] usb 9-1: config 0 descriptor?? [ 2983.806491][T12862] cp210x 9-1:0.0: cp210x converter detected [ 2983.918313][T19951] ext4: Unknown parameter 'dont_appraise' [ 2984.202356][T12862] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2984.229542][T12862] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2984.428289][T19937] binder: BINDER_SET_CONTEXT_MGR already set [ 2984.441482][T19937] binder: 19936:19937 ioctl 4018620d 200000000040 returned -16 [ 2984.455917][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2984.463896][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2984.488601][ T5877] usb 9-1: USB disconnect, device number 32 [ 2984.498583][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2984.526741][ T5877] cp210x 9-1:0.0: device disconnected [ 2984.556394][T19964] fuse: Bad value for 'fd' [ 2984.563545][T19964] tmpfs: Unknown parameter 'uid<00000000000000016877' [ 2984.805618][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2984.835515][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2985.319355][T26146] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2985.370675][T18466] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.385095][T18466] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.394476][T18466] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.403733][T18466] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.559448][T26146] usb 9-1: Using ep0 maxpacket: 16 [ 2985.723207][T26146] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 2985.745550][T26146] usb 9-1: config 166 has an invalid interface number: 34 but max is 1 [ 2985.770478][T26146] usb 9-1: config 166 has no interface number 0 [ 2985.789214][T26146] usb 9-1: config 166 has no interface number 1 [ 2985.800632][T26146] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2985.822160][T26146] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2985.846610][T26146] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2985.861100][T26146] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2985.875535][T26146] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2985.887565][T26146] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2985.903592][T26146] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2985.914932][T26146] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2985.925662][T26146] usb 9-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2985.939013][T26146] usb 9-1: config 166 interface 177 has no altsetting 0 [ 2985.954015][T26146] usb 9-1: config 166 interface 34 has no altsetting 0 [ 2985.987285][T26146] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2985.998165][T26146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.009280][T26146] usb 9-1: Product: syz [ 2986.013561][T26146] usb 9-1: Manufacturer: syz [ 2986.020136][T26146] usb 9-1: SerialNumber: syz [ 2986.266225][T26146] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 2986.487661][T26146] ums-realtek 9-1:166.34: USB Mass Storage device detected [ 2986.734756][T26146] ums-realtek 9-1:166.34: probe with driver ums-realtek failed with error -5 [ 2986.755633][T26146] uvcvideo 9-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2986.771981][T26146] uvcvideo 9-1:166.34: No valid video chain found. [ 2986.795475][T26146] usb 9-1: USB disconnect, device number 33 [ 2988.667006][T18717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2988.679951][T18717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2988.688880][T18717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2988.699840][T18717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2988.707392][T18717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2989.156598][T20033] chnl_net:caif_netlink_parms(): no params data found [ 2989.280674][T18923] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2989.338374][T20033] bridge0: port 1(bridge_slave_0) entered blocking state [ 2989.346254][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2989.354153][T20033] bridge_slave_0: entered allmulticast mode [ 2989.362760][T20033] bridge_slave_0: entered promiscuous mode [ 2989.369786][T26146] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2989.371986][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2989.384662][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2989.392053][T20033] bridge_slave_1: entered allmulticast mode [ 2989.399622][T20033] bridge_slave_1: entered promiscuous mode [ 2989.439657][T18923] usb 5-1: Using ep0 maxpacket: 32 [ 2989.447300][T20033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2989.458096][T18923] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2989.467188][T18923] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2989.483235][T20033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2989.492683][T18923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2989.502801][T18923] usb 5-1: config 1 has no interface number 0 [ 2989.515818][T18923] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2989.552517][T18923] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2989.572998][T18923] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2989.600271][T20033] team0: Port device team_slave_0 added [ 2989.605997][T18923] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2989.619426][T18923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.628343][T20033] team0: Port device team_slave_1 added [ 2989.675520][T18923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2989.695216][T20033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2989.702550][T20033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2989.729731][T20033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2989.743359][T20033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2989.751442][T20033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2989.777712][T20033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2989.789061][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 2989.810174][ T6000] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 2989.820333][T26146] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 2989.830716][T26146] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2989.844524][T26146] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2989.856521][T26146] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2989.874682][T26146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.877196][T18923] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 2989.885548][T26146] usb 3-1: Product: Nj稯뱅⫻僄毘⎴욀쮲ν稾巓㆘䎱履甸帺쟀躑巽תּ쉭罗饓蟲鑃픵蜭ᕻ슷䓷蹓솓쑩䨻㮂⋾鸇ꗩ⏲ㄥাff죵㝛⽦콶딧轔ඐ⸒쟧쮑嘊餣禂ူԩ鱝ᬫ♒럄蘊 [ 2989.909953][T18923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2989.919226][T18923] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 2989.937225][T26146] usb 3-1: Manufacturer: చ [ 2989.943991][T20033] hsr_slave_0: entered promiscuous mode [ 2989.951812][T26146] usb 3-1: SerialNumber: 籵 [ 2989.960405][T20033] hsr_slave_1: entered promiscuous mode [ 2989.967777][T20033] debugfs: 'hsr0' already exists in 'hsr' [ 2989.976298][ T6000] usb 10-1: device descriptor read/64, error -71 [ 2989.983774][T20033] Cannot create hsr debugfs directory [ 2989.989967][T20049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2989.998581][T20049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2990.219815][ T6000] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 2990.379893][ T6000] usb 10-1: device descriptor read/64, error -71 [ 2990.490479][ T6000] usb usb10-port1: attempt power cycle [ 2990.802600][T18717] Bluetooth: hci5: command tx timeout [ 2990.837672][T26146] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 5 proto 1 vid 0x04B8 pid 0x0202 [ 2990.903919][T26146] usb 3-1: USB disconnect, device number 86 [ 2990.927294][T26146] usblp0: removed [ 2991.008709][T20033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2991.021115][T20033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2991.033298][T20033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2991.046539][T20033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2991.182276][T20033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2991.213702][T20033] 8021q: adding VLAN 0 to HW filter on device team0 [ 2991.228669][T22978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2991.235987][T22978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2991.250951][T15581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2991.258079][T15581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2991.265676][ T6000] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 2991.299922][ T6000] usb 10-1: device descriptor read/8, error -71 [ 2991.600727][ T6000] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 2991.677223][ T6000] usb 10-1: device descriptor read/8, error -71 [ 2991.776434][T20082] program syz.2.12236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2991.800951][ T6000] usb usb10-port1: unable to enumerate USB device [ 2992.063867][T20096] minix: Unknown parameter '' [ 2992.086188][ T6000] usb 5-1: USB disconnect, device number 46 [ 2992.138655][T20033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2992.353867][T20103] netlink: 220 bytes leftover after parsing attributes in process `syz.8.12240'. [ 2992.581253][T20112] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718123 (3907436246 ns) > initial count (3201876712 ns). Using initial count to start timer. [ 2992.748194][T20119] lo speed is unknown, defaulting to 1000 [ 2992.781030][T20119] lo speed is unknown, defaulting to 1000 [ 2992.791986][T20119] lo speed is unknown, defaulting to 1000 [ 2992.880265][T18717] Bluetooth: hci5: command tx timeout [ 2993.030222][ T6000] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 2993.214565][ T6000] usb 10-1: Using ep0 maxpacket: 8 [ 2993.257318][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2993.346743][ T6000] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2993.439478][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2993.556247][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2993.804203][ T6000] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2993.884362][ T6000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.937132][ T6000] usb 10-1: Product: syz [ 2993.967736][ T6000] usb 10-1: Manufacturer: syz [ 2993.989426][ T6000] usb 10-1: SerialNumber: syz [ 2994.001659][T20033] veth0_vlan: entered promiscuous mode [ 2994.026526][ T6000] usb 10-1: config 0 descriptor?? [ 2994.034413][T20119] infiniband syz2: set active [ 2994.039574][T20119] infiniband syz2: added lo [ 2994.047546][T14107] lo speed is unknown, defaulting to 1000 [ 2994.050649][T20118] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2994.066023][T20119] syz2: rxe_create_cq: returned err = -12 [ 2994.076295][T20033] veth1_vlan: entered promiscuous mode [ 2994.094190][T20119] infiniband syz2: Couldn't create ib_mad CQ [ 2994.112189][T20119] infiniband syz2: Couldn't open port 1 [ 2994.178786][T20119] RDS/IB: syz2: added [ 2994.193254][T20119] smc: adding ib device syz2 with port count 1 [ 2994.206756][T20119] smc: ib device syz2 port 1 has no pnetid [ 2994.228638][T20033] veth0_macvtap: entered promiscuous mode [ 2994.261832][T18923] lo speed is unknown, defaulting to 1000 [ 2994.274760][T20033] veth1_macvtap: entered promiscuous mode [ 2994.308725][ T6000] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2994.320681][T20119] lo speed is unknown, defaulting to 1000 [ 2994.363345][T20033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2994.396636][T20033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2994.429205][ T6000] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input155 [ 2994.477043][ T1464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.522011][ T1464] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.575785][ T1464] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.590642][T26146] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2994.637064][ T1464] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.737051][ C0] powermate: config urb returned -71 [ 2994.742620][ C0] powermate: config urb returned -71 [ 2994.748076][ C0] powermate: config urb returned -71 [ 2994.767063][T15690] usb 10-1: USB disconnect, device number 124 [ 2994.780878][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2994.810364][T26146] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2994.852165][T26146] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2994.903963][T26146] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2994.927755][T26146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2994.941483][T18466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2994.949540][T26146] usb 9-1: SerialNumber: syz [ 2994.960523][T18717] Bluetooth: hci5: command tx timeout [ 2994.965160][T18466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.082356][T18466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.105986][T18466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.159843][T20119] lo speed is unknown, defaulting to 1000 [ 2995.242152][T20146] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2995.731336][T26146] usb 9-1: 0:2 : does not exist [ 2995.798194][T20119] lo speed is unknown, defaulting to 1000 [ 2995.830087][T26146] usb 9-1: USB disconnect, device number 34 [ 2995.834495][T20162] tipc: Started in network mode [ 2995.853889][T20162] tipc: Node identity 26ba314ad406, cluster identity 4711 [ 2995.863826][T20162] tipc: Enabled bearer , priority 0 [ 2995.880950][T20162] syzkaller0: entered promiscuous mode [ 2995.911081][T20162] syzkaller0: entered allmulticast mode [ 2996.066530][T20164] tipc: Resetting bearer [ 2996.312148][T20169] fuse: Bad value for 'fd' [ 2996.422572][T20161] tipc: Resetting bearer [ 2996.508129][T20161] tipc: Disabling bearer [ 2996.543376][T20119] lo speed is unknown, defaulting to 1000 [ 2996.693289][T20184] sctp: [Deprecated]: syz.7.12257 (pid 20184) Use of int in max_burst socket option deprecated. [ 2996.693289][T20184] Use struct sctp_assoc_value instead [ 2996.867852][T20119] lo speed is unknown, defaulting to 1000 [ 2997.030600][T26146] psmouse serio5: Failed to reset mouse on : -5 [ 2997.041151][T18717] Bluetooth: hci5: command tx timeout [ 2997.147995][T20119] lo speed is unknown, defaulting to 1000 [ 2997.313780][T20190] lo speed is unknown, defaulting to 1000 [ 2997.456508][T20203] openvswitch: netlink: Duplicate key (type 32). [ 2997.558065][T20119] lo speed is unknown, defaulting to 1000 [ 2997.839681][T20119] lo speed is unknown, defaulting to 1000 [ 2998.127933][T20119] lo speed is unknown, defaulting to 1000 [ 2998.236181][T20207] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2998.269980][T20207] (syz.4.12264,20207,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2998.288194][T20207] (syz.4.12264,20207,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2998.300862][T20207] (syz.4.12264,20207,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2998.319951][T20207] (syz.4.12264,20207,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2998.345319][T20207] CIFS mount error: No usable UNC path provided in device string! [ 2998.345319][T20207] [ 2998.370752][T20207] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2998.399620][T20119] lo speed is unknown, defaulting to 1000 [ 2998.927438][T20119] lo speed is unknown, defaulting to 1000 [ 2999.063498][T20119] lo speed is unknown, defaulting to 1000 [ 2999.600332][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12268'. [ 2999.706425][T20227] team1: entered promiscuous mode [ 2999.717869][T20227] team1: entered allmulticast mode [ 2999.968665][T20233] netlink: 256 bytes leftover after parsing attributes in process `syz.9.12270'. [ 3000.591913][T20243] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 3000.598433][T20243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3000.611117][T26146] misc userio: Buffer overflowed, userio client isn't keeping up [ 3000.646817][T20246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12272'. [ 3000.676497][T20243] vhci_hcd vhci_hcd.0: Device attached [ 3000.676602][T20246] tipc: MTU too low for tipc bearer [ 3000.851816][T15690] vhci_hcd: vhci_device speed not set [ 3000.910990][T15690] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 3000.922314][T20250] program syz.2.12273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3000.942756][T20251] program syz.2.12273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3001.203534][T12261] Bluetooth: hci3: command 0x0406 tx timeout [ 3001.271590][T20244] vhci_hcd: connection reset by peer [ 3001.323864][T18466] vhci_hcd: stop threads [ 3001.328288][T18466] vhci_hcd: release socket [ 3001.332859][T18466] vhci_hcd: disconnect device [ 3001.390216][T20274] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 3001.541125][T12862] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 3001.622390][ T5877] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 3001.631259][ T6000] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3001.781104][ T5877] usb 9-1: Using ep0 maxpacket: 32 [ 3001.791545][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 3001.797472][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3001.810115][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3001.822768][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3001.831798][ T5877] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3001.847609][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3001.856099][ T6000] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3001.866446][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3001.874937][ T6000] usb 5-1: Product: syz [ 3001.879495][ T6000] usb 5-1: Manufacturer: syz [ 3001.888351][ T5877] usb 9-1: config 0 descriptor?? [ 3001.894181][ T6000] usb 5-1: SerialNumber: syz [ 3001.909549][ T6000] usb 5-1: config 0 descriptor?? [ 3001.917488][T26146] input: PS/2 Generic Mouse as /devices/serio5/input/input156 [ 3001.949666][T12862] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 3001.958330][T12862] usb 3-1: config 0 has no interface number 0 [ 3001.964669][T12862] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 3001.976630][T12862] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3001.981113][T19967] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 3001.987119][T12862] usb 3-1: config 0 interface 113 has no altsetting 0 [ 3002.014499][T12862] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 3002.037612][T12862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.045867][T12862] usb 3-1: Product: syz [ 3002.050275][T12862] usb 3-1: Manufacturer: syz [ 3002.054968][T12862] usb 3-1: SerialNumber: syz [ 3002.063409][T12862] usb 3-1: config 0 descriptor?? [ 3002.099981][ T5877] ft260 0003:0403:6030.0075: unknown main item tag 0x7 [ 3002.141188][T26146] psmouse serio5: Failed to enable mouse on [ 3002.181338][T19967] usb 10-1: config 0 has an invalid interface number: 9 but max is 0 [ 3002.189827][T19967] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3002.210568][T19967] usb 10-1: config 0 has no interface number 0 [ 3002.237262][T12862] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 3002.251793][T19967] usb 10-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 3002.267670][T19967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3002.307024][T19967] usb 10-1: config 0 descriptor?? [ 3002.307811][ T5877] ft260 0003:0403:6030.0075: chip code: 6424 8183 [ 3002.332208][T19967] rndis_host 10-1:0.9: More than one union descriptor, skipping ... [ 3002.340343][T19967] usb 10-1: bad CDC descriptors [ 3002.349522][T19967] cdc_acm 10-1:0.9: More than one union descriptor, skipping ... [ 3002.395883][ T6000] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 3002.520056][ T5877] ft260 0003:0403:6030.0075: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 3002.553805][ T5877] ft260 0003:0403:6030.0075: failed to retrieve status: -71, no wakeup [ 3002.564583][ T5877] ft260 0003:0403:6030.0075: failed to retrieve status: -71 [ 3002.581062][ T5877] ft260 0003:0403:6030.0075: failed to reset I2C controller: -71 [ 3002.889611][ T6000] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 3003.019175][ T5877] usb 9-1: USB disconnect, device number 35 [ 3003.066204][T19967] usb 5-1: USB disconnect, device number 47 [ 3003.082438][T20295] 9pnet_fd: Insufficient options for proto=fd [ 3003.110648][ T6000] usb 10-1: USB disconnect, device number 125 [ 3003.441358][T18717] Bluetooth: hci0: command tx timeout [ 3003.831443][ T6000] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3004.016614][T20310] FAULT_INJECTION: forcing a failure. [ 3004.016614][T20310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3004.048269][T20310] CPU: 1 UID: 0 PID: 20310 Comm: syz.9.12290 Not tainted syzkaller #0 PREEMPT(full) [ 3004.048296][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3004.048308][T20310] Call Trace: [ 3004.048316][T20310] [ 3004.048325][T20310] dump_stack_lvl+0x189/0x250 [ 3004.048352][T20310] ? __pfx____ratelimit+0x10/0x10 [ 3004.048372][T20310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3004.048392][T20310] ? __pfx__printk+0x10/0x10 [ 3004.048415][T20310] ? __might_fault+0xb0/0x130 [ 3004.048449][T20310] should_fail_ex+0x414/0x560 [ 3004.048477][T20310] _copy_from_iter+0x1de/0x1790 [ 3004.048507][T20310] ? rcu_is_watching+0x15/0xb0 [ 3004.048535][T20310] ? kmalloc_reserve+0xbd/0x290 [ 3004.048554][T20310] ? __pfx__copy_from_iter+0x10/0x10 [ 3004.048581][T20310] ? __build_skb_around+0x262/0x3f0 [ 3004.048603][T20310] ? netlink_sendmsg+0x642/0xb30 [ 3004.048620][T20310] ? skb_put+0x11b/0x210 [ 3004.048643][T20310] netlink_sendmsg+0x6b2/0xb30 [ 3004.048671][T20310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3004.048694][T20310] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3004.048717][T20310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3004.048742][T20310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3004.048762][T20310] __sock_sendmsg+0x21c/0x270 [ 3004.048789][T20310] ____sys_sendmsg+0x52d/0x830 [ 3004.048816][T20310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3004.048845][T20310] ? import_iovec+0x74/0xa0 [ 3004.048867][T20310] ___sys_sendmsg+0x21f/0x2a0 [ 3004.048890][T20310] ? __pfx____sys_sendmsg+0x10/0x10 [ 3004.048947][T20310] ? __fget_files+0x2a/0x420 [ 3004.048964][T20310] ? __fget_files+0x3a0/0x420 [ 3004.048990][T20310] __sys_sendmmsg+0x227/0x430 [ 3004.049017][T20310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3004.049046][T20310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3004.049085][T20310] ? ksys_write+0x22a/0x250 [ 3004.049111][T20310] ? __pfx_ksys_write+0x10/0x10 [ 3004.049140][T20310] __x64_sys_sendmmsg+0xa0/0xc0 [ 3004.049161][T20310] do_syscall_64+0xfa/0xfa0 [ 3004.049180][T20310] ? lockdep_hardirqs_on+0x9c/0x150 [ 3004.049199][T20310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3004.049215][T20310] ? clear_bhb_loop+0x60/0xb0 [ 3004.049235][T20310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3004.049252][T20310] RIP: 0033:0x7f6f4e98ec29 [ 3004.049268][T20310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3004.049284][T20310] RSP: 002b:00007f6f4cbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3004.049307][T20310] RAX: ffffffffffffffda RBX: 00007f6f4ebd6090 RCX: 00007f6f4e98ec29 [ 3004.049321][T20310] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3004.049333][T20310] RBP: 00007f6f4cbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 3004.049344][T20310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3004.049355][T20310] R13: 00007f6f4ebd6128 R14: 00007f6f4ebd6090 R15: 00007ffeb0a9f538 [ 3004.049386][T20310] [ 3004.388153][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3004.404091][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3004.454250][ T6000] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 3004.463616][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=10 [ 3004.475909][ T6000] usb 5-1: SerialNumber: syz [ 3004.484656][ T6000] usb 5-1: config 0 descriptor?? [ 3004.638055][T19967] usb 3-1: USB disconnect, device number 87 [ 3005.181985][ T6000] usbhid 5-1:0.0: can't add hid device: -71 [ 3005.189921][ T6000] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3005.200977][ T6000] usb 5-1: USB disconnect, device number 48 [ 3005.399753][T20329] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 3005.791665][T18923] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 3006.031281][T20348] ALSA: mixer_oss: invalid OSS volume '' [ 3006.073377][T15690] vhci_hcd: vhci_device speed not set [ 3006.151875][T18923] usb 9-1: Using ep0 maxpacket: 32 [ 3006.190901][T18923] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 3006.224202][T18923] usb 9-1: config 0 has no interface number 0 [ 3006.230649][T18923] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 3006.252254][T18923] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 3006.282316][T18923] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 3006.292455][T18923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.308827][T18923] usb 9-1: Product: syz [ 3006.313684][T18923] usb 9-1: Manufacturer: syz [ 3006.318913][T18923] usb 9-1: SerialNumber: syz [ 3006.360662][T18923] usb 9-1: config 0 descriptor?? [ 3006.374155][T20337] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 3006.384488][T20337] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 3006.411656][T12862] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3006.528286][T18923] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3006.605131][T18923] usb 9-1: USB disconnect, device number 36 [ 3006.673028][T12862] usb 5-1: Using ep0 maxpacket: 32 [ 3006.731123][T12862] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 3006.759859][T12862] usb 5-1: config 0 has no interface number 0 [ 3006.779339][T12862] usb 5-1: config 0 interface 184 has no altsetting 0 [ 3006.814830][T12862] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3006.834028][T12862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.846801][T12862] usb 5-1: Product: syz [ 3006.853437][T12862] usb 5-1: Manufacturer: syz [ 3006.858060][T12862] usb 5-1: SerialNumber: syz [ 3006.865773][T12862] usb 5-1: config 0 descriptor?? [ 3006.876458][T12862] smsc75xx v1.0.0 [ 3007.138628][T12862] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 3007.163251][T12862] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 3007.728199][T12862] usb 5-1: USB disconnect, device number 49 [ 3007.754017][T20374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3007.762873][T20374] batadv_slave_0: entered promiscuous mode [ 3008.844904][T20387] veth1_to_bridge: entered promiscuous mode [ 3008.851321][T20387] veth1_to_bridge: left promiscuous mode [ 3008.894355][T20391] netlink: 160 bytes leftover after parsing attributes in process `syz.7.12315'. [ 3009.094994][T20406] erofs (device loop8): cannot find valid erofs superblock [ 3009.132306][T14107] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3009.473013][T20412] hpfs: Unexpected value for 'help' [ 3009.577969][T20410] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.12322'. [ 3009.587467][T20410] openvswitch: netlink: Message has 512 unknown bytes. [ 3009.604191][T20410] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 3009.614118][T20410] hfsplus: unable to find HFS+ superblock [ 3009.767201][T14107] usb 3-1: Using ep0 maxpacket: 16 [ 3009.782831][T14107] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 3009.792706][T14107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.801024][T14107] usb 3-1: Product: syz [ 3009.805972][T14107] usb 3-1: Manufacturer: syz [ 3009.810714][T14107] usb 3-1: SerialNumber: syz [ 3009.846277][T14107] usb 3-1: config 0 descriptor?? [ 3010.058341][T15690] usb 3-1: USB disconnect, device number 88 [ 3011.165057][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12324'. [ 3011.241965][T20423] kAFS: unparsable volume name [ 3012.324988][T12261] Bluetooth: hci5: command 0x0405 tx timeout [ 3012.508347][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12329'. [ 3012.519025][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12327'. [ 3013.507407][T20441] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12329'. [ 3017.693905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.071092][T18717] Bluetooth: hci1: command 0x0406 tx timeout [ 3032.138684][ C0] sched: DL replenish lagged too much [ 3046.486548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3063.248968][T12261] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 3066.311622][T20474] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 3066.329208][T18717] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 3066.339897][T31680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3068.233557][T20477] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 3069.294094][ T4318] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3070.280712][T20485] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3070.285423][ T4318] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3070.319438][ T4318] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3070.328414][ T4318] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3071.287624][ T4318] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3071.329810][T20485] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3072.353364][T20485] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3074.333299][T20491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12342'. [ 3074.341145][T18717] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3075.355654][T18717] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3086.701367][T12261] Bluetooth: hci9: command tx timeout [ 3086.701510][T18717] Bluetooth: hci8: command tx timeout [ 3088.742426][T18717] Bluetooth: hci9: command tx timeout [ 3088.771702][T12261] Bluetooth: hci8: command tx timeout [ 3092.262838][T18717] Bluetooth: hci9: command tx timeout [ 3092.324961][T12261] Bluetooth: hci8: command tx timeout [ 3094.593420][T12261] Bluetooth: hci9: command tx timeout [ 3094.593696][T20485] Bluetooth: hci8: command tx timeout [ 3106.394453][T12261] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3106.654413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.358161][T18717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3107.387625][T12261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3107.399064][T12261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3107.409467][T12261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3109.395475][T12261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3111.444829][T12261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3118.486134][T20485] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3119.480328][T20505] Bluetooth: hci3: command tx timeout [ 3120.508447][T31680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3120.518775][T20505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3121.535905][T31680] Bluetooth: hci3: command tx timeout [ 3121.541741][T20502] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3125.626316][T12261] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3125.671292][T20505] Bluetooth: hci3: command tx timeout [ 3125.671944][T31680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3127.667636][T20505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3127.686229][T12261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3128.659825][T12261] Bluetooth: hci3: command tx timeout [ 3129.746464][T20505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3131.784561][T31680] Bluetooth: hci6: Opcode 0x1009 failed: -110 [ 3131.797195][T12261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3131.811069][T12261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3132.760021][T12261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3132.775865][T12261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3132.785962][T12261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3134.809540][T31680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3134.818728][T20505] Bluetooth: hci4: command tx timeout [ 3134.826001][T31680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3134.833525][T31680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3135.840762][T20485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3136.854883][T20485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3137.859061][T12261] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3138.834439][T20485] Bluetooth: hci4: command tx timeout [ 3138.835942][T12261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3138.849256][T20505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3138.863662][T12261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3140.897671][T20507] Bluetooth: hci6: Opcode 0x0c38 failed: -110 [ 3140.899266][T20511] Bluetooth: hci5: Opcode 0x1001 failed: -110 [ 3140.918733][T31680] Bluetooth: hci4: command tx timeout [ 3141.898271][T20505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3143.887979][T20505] Bluetooth: hci4: command tx timeout [ 3161.701147][ T31] INFO: task syz.4.12328:20431 blocked for more than 144 seconds. [ 3161.709009][ T31] Not tainted syzkaller #0 [ 3161.717107][ T31] Blocked by coredump. [ 3161.721930][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3162.711656][ T31] task:syz.4.12328 state:D stack:24936 pid:20431 tgid:20428 ppid:12260 task_flags:0x400548 flags:0x00080005 [ 3162.741039][ T31] Call Trace: [ 3162.744399][ T31] [ 3162.747321][ T31] __schedule+0x1798/0x4cc0 [ 3163.778145][ T31] ? __pfx___schedule+0x10/0x10 [ 3164.721513][ T31] ? schedule+0x91/0x360 [ 3164.725778][ T31] schedule+0x165/0x360 [ 3164.729923][ T31] schedule_timeout+0x9a/0x270 [ 3164.735931][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3164.741594][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3164.746805][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3164.752089][ T31] ? wait_for_completion+0x267/0x5d0 [ 3164.757370][ T31] wait_for_completion+0x2bf/0x5d0 [ 3165.740495][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 3165.746188][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 3166.771417][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 3166.777942][ T31] io_wq_put_and_exit+0x316/0x650 [ 3168.792024][ T31] io_uring_clean_tctx+0x11f/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3168.798028][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 3170.906189][ T31] ? io_uring_drop_tctx_refs+0x131/0x1c0