last executing test programs: 24m29.242733023s ago: executing program 32 (id=181): mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0), &(0x7f00000020c0)) (async) r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000280), 0x64, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x64, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000a0000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r7, r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r7, r6}, 0xc) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10003, 0x2c0, 0x100, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fe, 0x5, 0x0, 0x9, 0x8, 0x100400000000, 0x69, 0x1000000003, 0x2, 0x2, 0x6, 0x27, 0x3, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x3, 0x8, 0x6, 0x6, 0x3, 0x0, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0x3, 0x80000003, 0xfffffffffffffc02, 0x2, 0x4, 0x4, 0xcdb, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x1, 0x6, 0x4, 0x6, 0x5, 0x0, 0x0, 0xfff, 0xffffffffffffff7e, 0x9, 0xff, 0x6, 0x28000000, 0x1, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x400000000000006, 0x800000200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb694, 0x3ffc00000, 0x2, 0x4000000000000003]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10003, 0x2c0, 0x100, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fe, 0x5, 0x0, 0x9, 0x8, 0x100400000000, 0x69, 0x1000000003, 0x2, 0x2, 0x6, 0x27, 0x3, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x3, 0x8, 0x6, 0x6, 0x3, 0x0, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0x3, 0x80000003, 0xfffffffffffffc02, 0x2, 0x4, 0x4, 0xcdb, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x1, 0x6, 0x4, 0x6, 0x5, 0x0, 0x0, 0xfff, 0xffffffffffffff7e, 0x9, 0xff, 0x6, 0x28000000, 0x1, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x400000000000006, 0x800000200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb694, 0x3ffc00000, 0x2, 0x4000000000000003]}) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) (async) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r8, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r11, 0x4068aea3, &(0x7f0000000040)) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 23m13.237635182s ago: executing program 3 (id=435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86"], 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 23m12.02470118s ago: executing program 3 (id=437): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc812) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x0, {r0}}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x80000) (async) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4002, @local}, 0xffffffffffffffdc, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r3, 0x6, 0x25, &(0x7f00000000c0), 0x4) (async) sendmmsg(r6, &(0x7f0000002980), 0x0, 0x4000855) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x9f) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRES8=0x0, @ANYRES16, @ANYRES8]) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 23m9.767714933s ago: executing program 3 (id=446): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$isdn(0x22, 0x3, 0x3) pidfd_getfd(0xffffffffffffffff, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="a0", 0x1}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="15060000000002000000010000003000018014000400fc0100000000000000000000000000010600050000000000060001000a"], 0x44}, 0x5}, 0x0) 23m9.535766957s ago: executing program 3 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r1 = socket$inet6(0xa, 0x4, 0x9) sendfile(r0, r1, &(0x7f0000000280)=0x5, 0x886) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffff7, 0xce, 0x2f}) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) r8 = getpgid(0x0) sched_setscheduler(r8, 0x1, &(0x7f0000000380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) 23m8.737876193s ago: executing program 3 (id=451): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000200)={0x10, 0xf, 0x33b986077776e131}, 0x10}, {&(0x7f0000004ec0)={0x10, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x2}, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) 23m7.896937018s ago: executing program 3 (id=453): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x2f, 0x66, 0x33, 0x73, 0x10, @local, @mcast1, 0x8, 0x20, 0x3, 0x3}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x3e, 0x1a, 0x0, 0xb8, &(0x7f0000000800)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec970f7c6e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c306000000df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369210e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1020414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e82bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc311525385b50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bdf041f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f496760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r5, @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) memfd_create(0x0, 0x1f) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="4482b606ff23d1c61a6cca13a2e1643a3e44fa3ebb4007250397ed6f438961197a1057cdcbbf7f1a9a1b3c85d0b0fda3019bf9efaa19be12a3165bc510e7862146d819950ba62d182e715401c069052fc2a603d7c076b96c", @ANYRESHEX=r6, @ANYBLOB=',dfltuid=', @ANYRESHEX=r8, @ANYBLOB=',cache=readahead,\x00']) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) 23m6.920117714s ago: executing program 33 (id=453): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x2f, 0x66, 0x33, 0x73, 0x10, @local, @mcast1, 0x8, 0x20, 0x3, 0x3}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x3e, 0x1a, 0x0, 0xb8, &(0x7f0000000800)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec970f7c6e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c306000000df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369210e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1020414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e82bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc311525385b50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bdf041f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f496760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r5, @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) memfd_create(0x0, 0x1f) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="4482b606ff23d1c61a6cca13a2e1643a3e44fa3ebb4007250397ed6f438961197a1057cdcbbf7f1a9a1b3c85d0b0fda3019bf9efaa19be12a3165bc510e7862146d819950ba62d182e715401c069052fc2a603d7c076b96c", @ANYRESHEX=r6, @ANYBLOB=',dfltuid=', @ANYRESHEX=r8, @ANYBLOB=',cache=readahead,\x00']) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) 17m8.005478234s ago: executing program 4 (id=1326): r0 = socket(0x10, 0x3, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x42, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000001c0)={0x0, 0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r8, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000073019f000000000095000000000000009ae50dcddbbbcc43b3f59d9ec25bed920c52f309c48989a45c66f1bda882a835ab268f9ae6938687f7f310633c7f315302df947c826265c40a51b7762705aa44d9ac1aa0d52a86daad"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121300000000009500000000000000c91f49b5e4acf8c3d9551580e663b0a811576bd1d330cdbfce572f65ce87320ed480a448dc276afec3aae4b70b75ede3f30dd71223cc70eb309eb27d858503a58b744830b6d1a7989b3658302c6ffacfe407c031dc59840542f442eaa7d4a6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xb}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x2, 0x5, 0x0, 0x40, 0x3, 0x2}}, {0x8, 0x2, [0x8001, 0x0]}}, {{0x1c, 0x1, {0x29, 0x9, 0x4, 0x3, 0x0, 0xd, 0x4, 0x5}}, {0xe, 0x2, [0x7f, 0x9, 0xffff, 0xab, 0x5]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20}, 0x0) 17m7.035009118s ago: executing program 4 (id=1331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x2000, 0x6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070010012600010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000001800038014000080040001800c000540fffffffffffffffe140000001000010000000000000000000084000ae07ba1d72b9e168c4e83f2d3fc3bd66a7c0919ff073b009374a514ebe156126dc55f1b6a53e98b280407c5b7ff8097923db97174152e947c4daa04ca7fb32005f9d62e1be222f93e875e2f811f13dab1eeefcb481f4400d1874e70e68d22574e26a6697f6690e773253c43e6ca7a20f8950867c5de803e14bff0"], 0xc8}}, 0x0) 17m4.631673555s ago: executing program 4 (id=1341): unshare(0x400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) recvmmsg(r5, &(0x7f0000000300)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)=""/248}, {&(0x7f0000000540)=""/114}, {&(0x7f0000000400)=""/55}, {&(0x7f00000005c0)=""/158}, {&(0x7f00000001c0)=""/20}, {&(0x7f0000000680)=""/131}], 0x0, &(0x7f00000007c0)=""/191}, 0x9}], 0x23, 0x10003, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 17m4.303649944s ago: executing program 4 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000de63d310720528134fa501f10b6bb3a8d955d694a1f8b77e49d50203010902120001000000000904d20000ea322200"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000de63d310720528134fa501f10b6bb3a8d955d694a1f8b77e49d50203010902120001000000000904d20000ea322200"], 0x0) 17m1.149748378s ago: executing program 4 (id=1358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) 17m0.983039202s ago: executing program 4 (id=1360): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x62, &(0x7f0000006140)={&(0x7f0000000000)={0xffffffffffffff5b, r2, 0x11, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004090) 17m0.70766866s ago: executing program 34 (id=1360): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x62, &(0x7f0000006140)={&(0x7f0000000000)={0xffffffffffffff5b, r2, 0x11, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004090) 15m11.52964555s ago: executing program 6 (id=1702): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) syz_open_dev$vim2m(&(0x7f0000000240), 0x7fffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfe2e, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r2, 0xfffffff8}, 0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x130, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x991}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7e67}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff67d}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2004010}, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) mount$binder(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000010903000000000000000000030000001800020014000180080001007f000081080002007f000001"], 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0x8040) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2, 0x7, 0x10}, 0xc) 15m8.290962609s ago: executing program 6 (id=1714): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a0caccf05a94a66bb55a2a630b00c145f94cd977", 0xf0e4, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x46) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15m6.653487345s ago: executing program 6 (id=1716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x541e, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000950000000000000024e60d9835af87e73dbf08159e96cdeffc40bbe0244cbe2ab746f6a01f9f4560a10e68c39b092b84924764a38f0530de8eac76cf8f7e8c77a8980828bcce6758d49b6f043a5a9ca127a23148f4fbb318cb5869d4463734119bc9cfd6dd254b097adda268b80000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, r2}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39a8b7102609f852ca6192e57466b36d248e5d7034551876f8823ee4395368bca72621f33d99aa1379e8e98e555c4db5eabecd21d0099d8756e82d7021d1a91478d758c582aa"], 0x54}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x8000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffd}, 0x0, &(0x7f0000000280)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 15m4.646416547s ago: executing program 6 (id=1722): r0 = socket$inet6(0xa, 0x3, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0xa0, 0x13, 0x1, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80120}, [@IFLA_NET_NS_FD={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_VFINFO_LIST={0x58, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x38, 0x7bbf}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x5d4, 0x6b2b}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x203, 0x101}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x27b, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2a6, 0x7}}]}]}, @IFLA_LINKMODE={0xffffffffffffff24, 0x11, 0x8}, @IFLA_NET_NS_FD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x30008054}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x0, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 15m4.483303525s ago: executing program 6 (id=1725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040884}, 0x4004) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) syz_open_dev$dri(0x0, 0x8, 0x200000) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019480)=""/102400, 0x19000) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x2, 0x5004) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a2030303030302181775603e430303030304b30303030745cd688f12188a196bc073b462afa213ca0df33b97c473eefb3f052b4af034ddf23b7f20935e62a4dcc51720e23468cc1983c9c7e0dd324453fb7e3f5b01235177e7d552fc91e3700b48aa5f4999fcb0871b9efd18b5d3aa4278d601ff767b21f2271eabfdcf3dda9d2342c7e749c55aeef29f24110a04e3e5362569842a3d00b4a0332098a663876a08bc2107f450ff6e2f911b120db13d44e9e43556ab70d66b9d4f2f5adbe0859b443f3158242c7565a4e789e95c9a949d999db3499772033000000000000000000"], 0x2a, 0x0) (async) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x4}]}, 0x20}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) (rerun: 32) 15m3.937391681s ago: executing program 6 (id=1728): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async, rerun: 32) r3 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) (rerun: 32) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000000c0)={0x2, "b60dc9f542f6a09d7ab2e531e382e34ec16b35dbd228d3e02a829163d48166ab", 0x4, 0x1, 0x7, 0x0, 0x4, 0x2, 0xd, 0x10000}) (async) r4 = dup(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00178008000180040006"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x80000000, 0x53}}, 0x30) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x129) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) (async, rerun: 32) pwritev2(r6, &(0x7f0000000200)=[{&(0x7f0000001580)='2', 0x1}, {&(0x7f0000000340)="1f22daa4c0840188a7d927986c240aaaf92eaa4558ef8d1d159c37c85a3bc9e13bd35811dfc5967a1df8304183e60afd96917eb006f09f7227953c59178c195ccff4a0074491e740af80fdde2b4aa6e3d16734018c3f90250c038ac046e1ea33a686afdc779834a8dce9caf475c01c73cd6a7fcd5d6c9aab677cb54a74d5b6d48aef352a417e221a206762bb0f0e5d7e713a459ebc9ec095d495abff371a3501b20f40a14d4a8440e170dc4f3a2f5f23de38fb150706a821884a9af567", 0xbd}, {&(0x7f0000000540)="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", 0xf42}], 0x3, 0x8, 0x7, 0x17) (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000015e2fc203c419b81c0a7010203010902440001000000000904000003020600000524061f"], 0x0) 14m48.252878504s ago: executing program 35 (id=1728): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async, rerun: 32) r3 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) (rerun: 32) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000000c0)={0x2, "b60dc9f542f6a09d7ab2e531e382e34ec16b35dbd228d3e02a829163d48166ab", 0x4, 0x1, 0x7, 0x0, 0x4, 0x2, 0xd, 0x10000}) (async) r4 = dup(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00178008000180040006"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x80000000, 0x53}}, 0x30) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x129) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) (async, rerun: 32) pwritev2(r6, &(0x7f0000000200)=[{&(0x7f0000001580)='2', 0x1}, {&(0x7f0000000340)="1f22daa4c0840188a7d927986c240aaaf92eaa4558ef8d1d159c37c85a3bc9e13bd35811dfc5967a1df8304183e60afd96917eb006f09f7227953c59178c195ccff4a0074491e740af80fdde2b4aa6e3d16734018c3f90250c038ac046e1ea33a686afdc779834a8dce9caf475c01c73cd6a7fcd5d6c9aab677cb54a74d5b6d48aef352a417e221a206762bb0f0e5d7e713a459ebc9ec095d495abff371a3501b20f40a14d4a8440e170dc4f3a2f5f23de38fb150706a821884a9af567", 0xbd}, {&(0x7f0000000540)="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", 0xf42}], 0x3, 0x8, 0x7, 0x17) (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000015e2fc203c419b81c0a7010203010902440001000000000904000003020600000524061f"], 0x0) 10m59.226014001s ago: executing program 8 (id=2527): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) getpgrp(0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000000100)="043073c7", 0x4) r5 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) (async, rerun: 32) io_uring_enter(r5, 0x2de7, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 32) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r9 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x6, '\x00', r10, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0x0, 0x6}, {0x13, 0xffe3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x40800) (async, rerun: 64) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) (rerun: 64) ioctl$KVM_CAP_EXIT_HYPERCALL(r12, 0x4068aea3, &(0x7f0000000100)) 10m56.872078693s ago: executing program 8 (id=2536): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000040)="edf89a", 0x3}], 0x1, &(0x7f0000001540)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x5}}], 0x40, 0x240000c0}], 0x1, 0x404c801) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x8000, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x7, @mcast2, 0xd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="4df6b45d056039df7764c5f341ab34804043bd9bf799cfba8134d5e546852e04a49ecda63c0b84eeeaca3eb1d26d4a0b63", 0x31}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xc, 0x800, 0x109b, r3}}], 0x20, 0x24048184}, 0x8000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f00000000c0)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000fe03000000000000000000850000004400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='affs\x00', 0x208000, 0x0) 10m55.188451683s ago: executing program 8 (id=2545): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) (async) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00002000000000000000e0ff000012000000fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9f85ba48070a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386c020000000000000017fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b653d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b5295e93496a6fdf5af8122257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c80b779eb826047466b60f7d78fd2e76e9b01f8706e27d8478f99bab2bc465b34716101963e60ee1a2d0653826395c52deeff831126649b4fb5b6e950a933a90846abc7fb13"], 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000280)={0x0, 0x0, 0x5}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = dup3(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) 10m54.929700479s ago: executing program 8 (id=2547): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000022240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x64004884}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbb, &(0x7f0000000500)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x88be, "822336f22bf8b392693422d3f324b763bd377d4cb6a584b4544e00f839b4b63e2c1c187491b92f6edda8c4f7b37f4197d4c7f908969cebc6fe6f8693531c2e2d6c879bc2e156f5af95f40c0009bd657aa2d1cd5045e66eae8ef43d5112af954e2b8a13c8c9b770f566f2c4aa9b8662cc1cbb7a0f009c7911cee2f081cd5275bfb387f276342cb4ad14ecfbbc3bad6f2450f7311309c4536284ca3cbaf4e875101467ce73c76e73ce20e8f75a5e"}}}, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 10m53.509580222s ago: executing program 8 (id=2549): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8000, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x400, 0x4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000740)={'\x00', 0x8, 0x7, 0x0, 0x8000000000000000, 0x4, 0x0}) statx(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) sendmsg$netlink(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)={0x238, 0x36, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x8a, 0x1c, 0x0, 0x1, [@generic="15a089ccac1450e0c005b29f9ff5b4f7128d629560d01394c60b347e8389c5ab50900db76146f35e4ece1b094ce3dbaf2a48889d011ddf91da25e5861e40216b93869e2d22dd6eab5b39e7bf05077b777ed2af06302d58cae34906b2b9105f996088d5ed0d47", @typed={0xe, 0x3a, 0x0, 0x0, @str='/dev/ptmx\x00'}, @typed={0xe, 0xe, 0x0, 0x0, @str='/dev/ptmx\x00'}]}, @generic="c4c8b4982deeb426c8350257821f808bdf4de4766d0ba95d876ca255f9c0", @typed={0x8, 0x9d, 0x0, 0x0, @pid}, @nested={0x110, 0x114, 0x0, 0x1, [@generic="d0e38cc9cd735402f4947f71714cd17e1df868fa93b2f6ee7b00e1bd45eeaed3076a9599f645176e87494237f0a8f11c67fdd06c28d57ec2917f2ae9e429e23124ddd80a149ff295ab3a6027b04e636adafd8744b296a3c953d88e53e26b3235297226815b59de0293b7b3a1770ec316c5d6b6372c191737bb29524705ed53ab408e23491a6f6ac2c5ce868e06ecbfb65bf605a8909c276a62b460abde3dee6d71149625f26db9b12cce4843b7d40ef61b3cb0f204e408eef2373ca97947ddd96762a98b925c06", @generic="c9ceb52b2b11d08f6f348b351cd2daf165ed3145eaf9a40fefe6903c28ad0156ffa1fafadc9ce29623076410e41359ce06204737d80bff9ade5ae4b963d4e1c90d", @nested={0x4, 0x2e}]}, @nested={0x62, 0xbd, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="45e35e9bac36fc5be1202714a23d7d1f92d7c0281b467ccdd043f5b0c8aa84f29549130f01062f0d4b44e45f1ad76e69ac6e02602ac47d3fc65739cb23c7ad314451db92c71b3ce8638146af23459772c395a074971b", @nested={0x4, 0x4f}]}]}, 0x238}, {&(0x7f00000002c0)={0x34, 0x36, 0x10, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x76, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xe, 0x3e, 0x0, 0x0, @str='/dev/ptmx\x00'}]}, 0x34}, {&(0x7f0000000300)={0x200, 0x34, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0xe, 0x133, 0x0, 0x0, @str='/dev/ptmx\x00'}, @generic="8776e808247d8647915a472342c8159785ca6849b54339d1c311a953cafad766e02e3410514d8bb67689494327a5b5c98622a11b118e5aef4a505b398799adb3f46e7b80500527ea894cf38bae969e47309603c16b08bd2a88b580bf29baec7b245eee4bc378d5dddc745b3202e0c356d166a9ec86a4d7fdf3ddbb6cbac639f71011768038afe675880c32ab70adc37da0cc37b4dac0650d9c6d9ad717515f65d0a09fabc65b46c429f9889aaf9d535294757c3d74d0", @nested={0x10, 0x49, 0x0, 0x1, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x9}]}, @generic="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", @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@remote}, @typed={0x6, 0x48, 0x0, 0x0, @str='/\x00'}]}, 0x200}], 0x3, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r8, r0]}}], 0x60, 0x44}, 0x48000) r9 = creat(&(0x7f0000000a00)='./file0/file0\x00', 0x2) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000a40)="c47135d4d8632507882586fda056aecab648bc268c0ab3a1e9cdd4d3f065cd83742596ff539a8c8bc0d1e3ead9c334e1194b7bd51c524ab8474a1af7e133997fa93ca468a33649daced133458dda5f7608c83060f5f0dc22be8eb06eec4ad02f651f317da5125681a34bf74b6bdb7cce763b8427ca1ae49573bb1545618c056951a347ac9e95631ca144fc76e99f2dd7edabf91359db76ba57bd4f3f9703624b8148ab1f4183a4196ed7b9cbd92a4fd7c2f95cd4b69db96bb5017c4a761bd0c4617930eccdd3eed4b925ee323a613b3ebf3ccb42cec8f0111e74b420bb66bef16b544cc7d7eab0c28c6bf1df326f2723615adfa3d92b5d7b6d7217f46420a0eabad16f11a6f59347296e5a6bcd9f5dbb61d2b34e297956ed9fc99b12e4bfb1d86028d02c38c0af5252de61c9eab650dc5de8dc8d48c3abc0c7910d4ca53d5a7f75c5d0e3e9e8ea0c1e026706c16dcd8200fd55ded3be424a02de26c77b81b3cbbed3223834d484d88fe8918e9799c001e8aa061142f6dc175317a481d0667f403c1aac67c4bfe48ee333e86e1e7c28a5a01f7066a318fe64b04827107a19e2cc0dc6073a5228466ff54a6d253f38e818db01f42d80147a45b67999cd1600185561b14ff2be2197de9ae6de0e243fbabc72e7d2d83bcd8bca5eaa4c04d6350b8ffaf6b966a27446d12532730e8381c38a5647e03391425b3a06cc9f3403219d3ad98f1c5b55f002f19c32090f64fa09cfa444672c8475efa869b3660b8e209a35668b8a493277f1af95663f20ef196ac37981e39cc3f0a91f77257511cf90d72a3688b9cc0d2be16fe970ddca0566c9dc535564e1f99453c9ff1bc1465d95b692f335d22d42f8c6ca7089dbc71d294b6a137bfaaf42e8756da664bb81f3641c35277faa59abcf819de936017d450448988cb7efc9ba0e772cd9fe2acaa1b7fcd1e14588139cedf2cd36e48eb4eada8feb953e27fc2b2f4a05fea6b8596f0f684e380c7e9940d6961d90aec504a993ce8f90e6d81a0da2b60b9aaf2b409b29a90b5fba93716d9fea2d0f5b2136a3040cf93bf3091241182f9e8f74720a11e5cc44d3016621b7355cc912bf98785e53f860333563d3f80e5cb8f3197c802a34be6b49d53034007349a9cd58e5a06dca5e5a7131cd5911228910244a86fb87ad0ad517c648bb8774b2358a6804a880f6b33985162c93f86aa74ee1016541eba65183adc3660bd78ddb7d385a868ee5ba501865a784fba698e565940b9bc086cf01ac92e4a8336ff23ac74c082da63843417a1e030cf31d578f482ef783a7bba083bd5d5d9bd9b2a51b962f4004ec376f3afccf37245bd2df37f5ab5dab09369ea54ebfb8765bd0af08daed8f3550f2301151f83e1dc18f1ceee935352f956a28d30aa93d4e9dd9f131993e831e49bcc3ce492bcf2037896b039a76366c9c4f86d019bf422d5c3a888824e8fc9ab143f9fea745c72fe636327a1343ab8dae7877a85a11832821f490edf69ed127a0c0e5f031521cad6c028c3da8531a5cbbd5785a59502a9770ce57f4ae429758097c4a38601cf8f9dafde2aeb902299c08c91e318cc8a1718283fb5c4481eb10ca3bf475f5c815f0eb80c73645309f6515ae7fefb6a3f0f0b77398487bccd32c8ad9f0927b2d76816b231911b2edc219fc360f6e7802d7d01a1ffec679b90bc1890e857dd712c23e956d056e1bb1f0866181ee012e31a165665498a9a77e8724c8328208b9cab967b844461dae3ea91029b50f6539d0a398c99111b9d82036b37599b3c05fc2990608ac511e0a97684dc000b895b08fb3e3bc247c393a7f04eb5776de716657e63f598b848d86cba15609c1ac4736b3c4606fbdcc4f0bc108b0364247073840ea9e35c4aa9b87a6ca11c2ca69f150ece68d1a0cecba4d047550ffbfe172954c5a3cd888fdf68323b4a26aef488e0b61821ab10f59acc1799aa2fb5bc27f64c12c756a91dfb44f5dfd6b3bfefa60bfcaf84af05eca70039d163fd2df0dd960e8714901dafda86cc552ceb338e3c6aa41763108e0d64e9c1af16a9af3e949f38e2f6ac984c74da87a1f4dac2f5f092a9a79cd16224983a775387f6c1bd10666d5b69c0cff3afe3eb31a48ab97342e9b9d72edd6aa7f0e6ab66b4f496cf689833ddd96b520205ae8cfa3de6f161c701dbc5d72b8adc8e84d4b9c54852f3bb464e8b30fb69c5c71e4972a0e21f51c2d301ecd421009935f7a1600f1493ad3fd4075d186f08cacb58540f19d1b5e1551b1768e887727f644d90ac413cd8699b31c200c1e1786108730847011a08690fb31d87ab676601122de80bd66e563edf0d4d2906850e38a6cef6c06491b72031c91e8ea4e69fa7ed65321859e2c20ef2cb2db78654c7c9c73c41ef9d1154b39672a8a7fe11759ceacea031e5c4bfd7044e2a33b502eeb8f8f50c6b7fa33b924761195ffb1eec4e00bce948aea88a1a555d13f8a654edd588fb346da4d2eeb0b88aa56c56e10a447b6ca11dfa5219c2aaf5c111fde11efbc31fb2cd0688658db6f8c5b0df7b5b4e79914f3912cedf493f483e0fbf2e0be1ce39a3dd2fdd6733169e6054d19644e4604f06cbbf340a3fed5f7ea8686865626429d232729a658a00ccee30d9a17024684d6bcf36637ce1e75144a7c9734c94500dc42588414861b4942cf03c94393bf4a06346fc7877ff7f7531718d342fbed98ed7fd6c72891ab23a4983300251d33962df81d3d8b627a3c5d7b861f121495067c1d32486995124018996892713936ea77396ff991f6bdcfb384c7586a154f52cf9fa5884b948c7ba564bded6088985008eb68b255f53889383d0a6942ce793069cc00c6e98301641fca8a7bc3184e5c2cc986ad2c3cc56b701ba0c7480d4cb37b1de092dd0562d5f1d34227bee73e594bed966a5b70a2cefdbbc6d67c7d018f1434403e5c4cfdbd8efcad11152a41c458d2bd3e19a87a983e9ca259189f4d84b70ab4678b75d299736ad85d31056591f8097370969de22449ac7ac2bb375d2e54799a637c533f3c3271bd3545fcb2934c7897ddb44f3a8031f5dfba659f05a4e1314291bda4ac2816215928dcd65b68aeee711f02fb8fec98751e248cd2d3b8d71e95389ba1b42bb3eb04fe4709596f10413100ce02492e6024b77f1982c0666ee74b107f21f2eea82d3b3eb97c372ed28d068bec3884604e36cd0ed0eaf488bd0f3483255912c971228b7464c0a4cc51ee6b2ce7d8b0b43f9730d6f7608b137b269b9bf866a3eff6f0fdb82117b937b79a792b904d4944792c2371134e778f1f03e7ca2480e6b364fc6db49b5d88d0239f1ec9e001a1cffd1962fbef6db9f50a331feb2a243024ee040ab3fe5f55189696afd503b6242fab9248e94ded3660bdc971fac9710c6e7f57a33077a2d17221e5a687570f48c21c2d649ef462e04cd01e766d51e5b820867f0f4309aba3f5109d258335bb79a4139ca7e07f0318f88cd5171877a2085ecfa60f3527d256a975cb85cd07ba17c8752f8338c88c0a35b169c64586ea4b8bfe64eefb13d9ccc79bdeafd38f77184506c0017e3aa71424aea9552e1d975c29f88237f32c04812280da4cbfe69f966f45f8419e88f9c721ea8337d4c2f918c84ea82aa20f2e4a024ceb1f2c92b6365774be4967cd716a89d75c22c4c01cc9efa9371983f9ab9e807a88b63cc05d091ef16e66af82148df29c2465074de166c199879425143ecae6bf90e14c27ef90a13f8fcc53c04a13d13677298cdb668c1502eeba07d18b47824d5433cd6a6b400a2a462e20ad7932e5a6622302d455cdd6bfca3f79c83626381f8e5c8f15cb7df7bd28d928e256305b00c404b1f80755ed0eebf9d9e5e49411020045aeb55ac7520a4969ca6d8401aa230f2e022046f7493a3265c8357a1f56ae49467a95c16a7d81dd1e549a187daef9de706c773ba02e6660e8dd549510c3131fc8582aac83f59e17a7c3c500bd58411613e8619acb495b49f689a8e169d8621b8405d60b2879ed06284324d095b9ea97fb9f4e84a5de84b0fc02e3049f3d17dde70efd457c18267646ea6dee335b90ae0cdb96d2267a417de2ca7027e1dee107504de0fd96a658ca5e8c869f51450c5b2cdab3cbde86923d47ed6a7a82ca6bafa3b9da24aa0542255fce55491b6685341e584d511fa40797fac97d35495684c52c03047525cbf021c62fe7822c306c3e7987b346ef6cfbc8dcd788386fc6f1af9a08671d37018057d546c71c4452da74fa0f1fc2c846aaae79e06d3ff6228fc9978512680813779fd15a2a15c6f07524b698604ee2f0fd912127003e0e8d4b1f61a528f1e0b4cb0e4068e06c8e9c982a3840fb330b539bae4cce961ba93223c7e31aa378624079de82be15b2171b4128610bf0229726dddb013b1cf0983198996a8a1667c9ab9e852e37aaf8294ee66d0c05a6596e759b5d6972efef11b436dd6ef27b2c416c73831c6bc43748cc6218dc1246f9c5e44f836c6dbad1a29e302c88be90e9225345dba4155ed50459278e7463d5a414543d5ba9597af4c995ee3b71deb5577010136d477dde0a27e67aeacd79e56b37be538447da6db268ebc14d8ba17643e82ffcc71b9d229b0aa53d1b3c756ef4323aef3a5ea6d20e9e92a60e41657a60ccf38cd8ce26599f249d85b3cc6bdbdf3fc7deb6199a90514ee57ed1b3cc63de459f19d6b9047e309a0e5250d05aad7ddeefa0c4e7264c757d909dded8ed9ac286159d0478ba5297c6cd4252c904609ac19c73dea7b7383509c56488a3f7cc5aa01904fc309c539a9e910f0805e2c6b796300c876382cdbabb3d6eafc537b12a4e0c8c42212e72ad4752ca49c5cf8c46769cb6690cc44c2e10aae7e71eb31d6e72b3eb77c7903e508b8c362bcbd64235c7a60342dd881afe121b370f9d72a852bc3bca83461748ad505a44fa1708b1dcd2b18ef638b8a4c0e908eeca37ad767c119089b110cd7abef87547ed273e6c55ca7a6d44b58617a4667555e0d4179a19fa74604f08b4efed7424c7c5668fb79905d38b87a14b5ca3f5a962b1b7d0e100ab2fe9a4e6001cbc82ba24f8596712534b4168f5ad413dedf78bbeec593877e47e5e46750bae4291c7580497edf8b0630830c316e4e5f949ba5696dad8db6d68ae383c4539d2ccff267eea1b200445af4b9daa262330da6227eab071ad2ed3a66b613e4cef43ef5b565367a6f0c06bbc7deabad810b84a1cdf6b1aad636847ee87ef7b39282277634951d349f20ed5b595508fecb2e481d6812326a1b6e23d0ce1662c32798780444df988441443cb16c7579834f6350659628637b3ec9335f2494534aa61fcf0ed8c4c21cadd7da63c606013f51fcb9f1c5c29a1cfacb8278ea810551159145b1bfe8d04c944aabbaf6d37d009a982a9b983636039a41be627aa1941d305805684896f932f2a9c3b18bffeb4307e53b385a84308af99cfabfa8347098492d0dd479334a7fa62c82caa1f6e99a51cdebce0236d6646fd68597d579509913d3e851ee640096245b3bbac308cef55dfc9231be5a5509de783e28a4e6473642ba2607470793b80cc5babb2950b2626723cb96decf33240948b82f1d21aee3392635010ea22bde3b2c302098bfbce22f060578029add97740bf6976ce994cbf88067e1f68902c2c837c99d43dedee8fb546423b81bba84e7bc66e1a22539aba6269e24eac2ccffc8379daab8fffae406fae2a009874333f7dfbec19ef4bd7da855d1b2aa993546ca5efedef35ac52339a74136e37369ca13cecfd78ea38ba1620f130f913c85e784155f8b9d8380f", 0x1000) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000001a40)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000001a80)={0x48, 0x2, r10}) pipe2$9p(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81000) write$P9_RSYMLINK(r11, &(0x7f0000001b40)={0x14, 0x11, 0x2, {0x40, 0x3, 0x2}}, 0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f0000001b80)={0x400, 0x1}) ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f0000001cc0)={0x8, 0x2, &(0x7f0000001bc0)=[0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0]}) ioctl$COMEDI_DEVINFO(r9, 0x80b06401, &(0x7f0000001d00)) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000001dc0), 0x4001) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e40), r9) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r12, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, r13, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x52c093e301226a69}, 0x200480a0) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001f40), 0x8400, 0x0) ioctl$BLKTRACETEARDOWN(r14, 0x1276, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000001f80)) r15 = accept4$x25(r9, &(0x7f0000002000)={0x9, @remote}, &(0x7f0000002040)=0x12, 0x0) connect$x25(r9, &(0x7f0000002080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) setsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f00000020c0)={0x0, r6, r4}, 0xc) 10m53.152568933s ago: executing program 8 (id=2554): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r0, 0x0, 0x2d) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x1d0, 0x0, 0x2a0, 0xf0, 0x2a0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x88, 0x10, 0x0, 0x44}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22, 0x35, 0x54b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [0x0, 0xff, 0xffffff00], [0x0, 0x0, 0xff000000], 'veth1_macvtap\x00', 'veth1_to_bridge\x00', {}, {}, 0x67, 0x3, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}, 0xfffffffc}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 10m52.743410274s ago: executing program 36 (id=2554): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r0, 0x0, 0x2d) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x1d0, 0x0, 0x2a0, 0xf0, 0x2a0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x88, 0x10, 0x0, 0x44}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22, 0x35, 0x54b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [0x0, 0xff, 0xffffff00], [0x0, 0x0, 0xff000000], 'veth1_macvtap\x00', 'veth1_to_bridge\x00', {}, {}, 0x67, 0x3, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}, 0xfffffffc}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 5m7.598054775s ago: executing program 9 (id=3068): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) (async) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) close_range(r0, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 5m7.34909573s ago: executing program 9 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000001a40)=""/155, 0x9b}], 0x3, &(0x7f0000000740)=""/191, 0xbf}, 0x2453}, {{&(0x7f0000002b40)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/77, 0x4d}, {&(0x7f0000002a40)=""/222, 0xde}], 0x3}, 0x100960}], 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000000000002bd60519abf3fe7180a1e20d7abc02a0a2fe0bc8c402000070494590b1f1ee7c382e44b9143d12980783cadd7b798ed2f66a782b67a41f4acc4d83bdb550cecac660f009e99f440d808d6fddf124ace23a48618bb4d3ae1f897c69ce14fc4f7149b27b9090ee955c2ba1db45e75d08c3e85e9fedc26d3a71db3435951c702c298a1dc5210e1e7a3ab778a24d04bcf4738995821f67c437e6629a56ed683bdf708e866eaeae42cccf9ce02d16effb99176e821bb9bbca595f6d0fc652f509c297652a428da58060e614cd52a2bd3c52c42be6cf320829557911abbdb3a0672f53546b9300"/262, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)=""/4096, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x3, 0x0, 0x0, 0x100, 0x2, 0x1, 0x1, 0xfffffffe, 0x4, 0xe1cb, 0x0, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xfff, 0xa52, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x12, r6, 0x37085000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x28658000) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 5m5.206962246s ago: executing program 9 (id=3078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) 5m4.840490421s ago: executing program 9 (id=3079): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r0 = socket(0x2a, 0x2, 0x0) unshare(0x8000600) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x4015, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) r2 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x7287}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 5m4.237843143s ago: executing program 9 (id=3080): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x4, 0x5, {0x5, 0x5, "42dc75"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m2.321813524s ago: executing program 9 (id=3086): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) landlock_create_ruleset(&(0x7f0000000140)={0x9300, 0x0, 0x1}, 0x18, 0x3) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x390, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x334, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x390}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @ext={0x3a, &(0x7f00000001c0)="8237b9da361c06876a29f2876ff5573365c19a4df00c1d31151f959d3604ae5d24b7eb19b67e253f597773950d87a65bc2a55b7c4d73994fcccf"}}], 0x38) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0xfffffffffffffd77) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5, r9}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m46.625944366s ago: executing program 37 (id=3086): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) landlock_create_ruleset(&(0x7f0000000140)={0x9300, 0x0, 0x1}, 0x18, 0x3) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x390, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x334, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x390}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @ext={0x3a, &(0x7f00000001c0)="8237b9da361c06876a29f2876ff5573365c19a4df00c1d31151f959d3604ae5d24b7eb19b67e253f597773950d87a65bc2a55b7c4d73994fcccf"}}], 0x38) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0xfffffffffffffd77) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5, r9}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.872864321s ago: executing program 0 (id=3997): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7fff, @local}}, [0x3, 0x8, 0x2, 0x50, 0x1, 0x400, 0x100, 0xfff, 0x905b, 0xffffffff, 0x43, 0x8, 0x6c3, 0x81, 0x3]}, &(0x7f0000000200)=0x100) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x1, @mcast1, 0xff}, {0xa, 0x4e22, 0x0, @private1, 0x2}, 0x1, {[0x4, 0x1, 0x9, 0x422f, 0x4, 0x6, 0x4, 0x4]}}, 0x5c) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) syz_emit_ethernet(0xff, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa1caaaaaaaaaaaa890607f228b3d2208c74fa81d58cbd43034f0f9237c4f90b0862fd0f5d3a0f91c12d4071495e7794fa03e653c1ad98ef35f6029a1c78c43bef5096222e12c16d6503000000000000001507af2d0722b5d48472ebcfb53fb32bb6463048d0ad65d81ca3f24678e41e532b612c9bc33cf89ff5ed102baf7909379f75960a1fbd7a072f7da46988e2d18ac2f3c585c728522dadbec9ebfc553dbb907403f07264ff32dc3080265ad7236458094de3afb90fe201a30a9e8aeaac5899ac0ac1a03ca29dd16cce5b99db210c950a41728daeda057c1a31c73fc920e8188e1ad9662cd3f5591006389221f3c0da6145a9155558bf86dd"], &(0x7f0000000000)={0x0, 0x1, [0x852, 0x9ae, 0x7cc, 0x70f]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000b00)={{@host, 0xc}, {@my=0x0}, 0x10fe8, "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"}, 0x418, 0x7bffdfff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001080)={0x0, r5}, 0x8) 13.561622234s ago: executing program 0 (id=4000): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r1], 0x0) 10.412049965s ago: executing program 0 (id=4012): getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r0 = creat(0x0, 0x0) listen(0xffffffffffffffff, 0xffffffff) landlock_restrict_self(0xffffffffffffffff, 0x7) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd, 0x2, {0x0, r0}, 0xfff, 0x0, 0x1, {0x0, 0x0, r0}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd, 0x2, {0x0, r0}, 0xfff, 0x0, 0x1, {0x0, 0x0, r0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0x8ef}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004776b8087909700217a80102030109021200010000000009040000"], 0x0) 9.651450441s ago: executing program 2 (id=4013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32, @ANYBLOB="0100000001000000010000000d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000039000000620202070000000000000000020000000000000000000001"], 0x28}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb17600def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750151dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000"], 0x114}], 0x1}, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x400803, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r10, r11, 0x3b, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x3, 0xffff, 0x8, 0x5, 0x100, 0xf, 0x4, 0x8000, 0x4, 0x0, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, r10}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.561985857s ago: executing program 7 (id=4015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 7.872391723s ago: executing program 2 (id=4020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x80000001, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000001a40)=0xb, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6.367221004s ago: executing program 2 (id=4023): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffd39, &(0x7f0000000000)='/proc/1/\x99\xefq\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', 0x0) (async) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 5.950436466s ago: executing program 7 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) socket$inet6(0xa, 0x0, 0x5bd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x82}, 0x94) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv2(r2, &(0x7f0000000700)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/191, 0xbf}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/86, 0x56}], 0x5, 0xdda9, 0x800, 0x1b) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_blocks=G']) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 5.922273761s ago: executing program 5 (id=4026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) r1 = io_uring_setup(0x6fc8, &(0x7f0000000280)={0x0, 0xf8c5, 0x20, 0x0, 0xaf}) syz_io_uring_setup(0x23a, &(0x7f0000000380)={0x0, 0x0, 0x9, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) (async) listen(r2, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/key-users\x00', 0x0, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) lseek(r8, 0x9, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.700056687s ago: executing program 0 (id=4027): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_io_uring_setup(0x50c7, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x261}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000600)=@hci}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) (async) r9 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r0, 0x0, 0x9a, 0x10000}) (async) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) 5.699642214s ago: executing program 5 (id=4028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000780), 0x0, 0x0, 0x0) 5.557413314s ago: executing program 5 (id=4029): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x3, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6211881}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000001", @ANYRES16=r6, @ANYBLOB="00032abd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r12}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4.614185113s ago: executing program 5 (id=4030): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mlockall(0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e16d9a3299c09d4100"/36], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180000008f00000000000a000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt(r5, 0x1, 0x1, &(0x7f00000002c0)=""/59, &(0x7f0000000400)=0x3b) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000010201f7037000000000000000000005f9c0f7dd3b0cfff639f3fffc324af1dfe5dcec215c0eb845"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) close(r6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f0000000040)={[0x4]}, 0x8) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f00000000c0)) 4.518772401s ago: executing program 7 (id=4031): socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee00) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) (async) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 4.453958288s ago: executing program 1 (id=4032): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) unshare(0x2c020400) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4001}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x785, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000000}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0xb, r1, 0x0, r3}) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x30e, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="008040000000fd77ffff000071"], 0x0}, 0x0) 4.101509456s ago: executing program 7 (id=4033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2400) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f00000000c0)={0x0, 0x9, 0x1000000, 0xffffffbd, 0x3, 0x6, "56601823a06dbe4d49047f2547a925e5", 0x8, 0x10, 0x4, 0x93, 0xf, 0x2, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b000000000000ff0100008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905e2"], 0x0) 3.932612643s ago: executing program 2 (id=4034): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) getdents64(r0, &(0x7f0000000540)=""/217, 0xd9) 3.74920683s ago: executing program 2 (id=4035): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000280)) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x7fff, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) (async) r5 = syz_io_uring_setup(0x55cc, &(0x7f0000000640)={0x0, 0x936, 0x80, 0x8000000, 0x40000333, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f50095000400000001"], 0x0}, 0x94) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) (async) r9 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0xda5a6000) ioctl$EVIOCSKEYCODE_V2(r9, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40, "207d3d00000055c51b08700c1e0adb4f000000001200070000000900"}) r10 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd=r10, 0x8000000000000001, 0x0, 0x0, 0xf, 0x0, {0x3}}) (async) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.501664829s ago: executing program 1 (id=4036): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000000000604", 0x31}], 0x1) unshare(0x40c80) (async) unshare(0x40c80) setsockopt$inet_opts(r0, 0x0, 0x1f, &(0x7f0000000040)="0d6f92ef73b605d5efae39e0bb936292c9fc6e8e4dff378189ecfde414491e8f9aa43dfec18b870dd9f6837d820deecf378b2dfe99", 0x35) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080)="f3", 0x1, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) 3.251687962s ago: executing program 0 (id=4037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a30000000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2.77914317s ago: executing program 1 (id=4038): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r2}, 0xc) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xe4) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3d, 0x107, 0x8000, 0x8, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24004095}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x7bd0, 0x10100, 0x7, 0x1ea}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x15, 0x0, @fd, 0x0, 0x0, 0xfd, 0x4, 0x1}) 2.333472711s ago: executing program 2 (id=4039): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4851, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x4851, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x106, 0x6}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="730910fda8261c2a829b1f8265bfbe7a5b104ac5f0d605a7ce88ff299044d587eea3fe51b94b5e038e52934ba8cbff74ffb2157a4e9eec384fdbf8c2c53c5eff93e6d03ca50193bb16ca11a498a26eac50165fbaf391f7ed7f794d40cbba4787c605bd4b", 0x64}, {&(0x7f00000025c0)="c8813c5304692bed9f384e5dfea774df7f7252284274f5c23b8250cf281b92ec0463960b998251ae3ccaace96468808678acccae6acbf6f1ba8d49338bf173009a95d28a10c00f0c1fc235a15496d7d567ccc6399277522e9e5b2a08b6a97358415cc57836f49582e35ff16bf85507d430c87f25060413c96d567e4a576b3e895ea6516e2fa386504913ac98bc7b5d4caaeebbe9ac9df4ef09bf22187d141fa836ac23303cda37d278ade8ad572553525050496df1b17e02ddd3088901298b45b819aa10e8b14bf1cc28501ec8c10cac51a02bde19ad9145ce700b060966f7904023533813d8d2f59e8f274f5dc2240fc2444d433ad51e3bed09219966bcf1dfcd844b3f25b142a1e07e02dae75ca0516e8e9a8e2bc93970f0023afc75d146c1c835684de15b395435da767d69fd83e40d5a9d3df64c6172124b5ba24849f2195c47345ea0af41887197306d040441b1727dda9a5bfe7933d3624b5cd86742e84988a313fa01a93c337cdb212bca0624de3ec03190b0bb78649bbc5d275805ed9eaebab3cc94f1f50fc3e50ea8a6db8b39600b93945f1660ce4b48010bb87da5964369d9affc6638f200dea40775138b608458126b8b58ae5336101b910c032c869c1b0dab7fc36bd4cbb7919c5c482911e7640aff529e008f0e6ccda2dd55b22fe4e8dd8076d24acc5302f83423f7202247bf33d43d113769a89f24f884de4f925e63cfa9fa949897fd53e6893dc199ad568375d06a87ca90837d549332baa4dfc122e636f7c9ae6fa317b54b13be7e10a42d2b131eba38e81cabb2236b903efad76c42d599bb0dc328ab1595da41df99d59575295af6c84e77547cc83f990a33afd0de0387ec186b21c04a044c47c25b9cb0e587f0c3e5be834c043cbdb60a8874495ab4e15ef842108520c5a8de7d996b5c257ec286ab8258f670001ca675200beb1c53a36b352303ec9c97e38de4725d7cfb51022a04931c09944e7bcd54e826fc8e07010e3b0d45a1097099e034f506c22211be4830c252150efcdae6a7cf635593ad85a2e7133ba62848002900a1ebce947b7465db09ee6c800c54cc2ecd4677fc0d0c0f8ae45155f64a4cd72fa0dccb558028fc716c9f86551014827ab258666b261b5c53f3e0a24516a0df0b450ba03b94c83d971e7baa211b42a3fea164dd4103e61359c80f6b0874477b5383471ba718f3d4a817e4c211d187b90e64e415ba266cfcd74751513cd868900899cd3dfca83df7dc1ba51e351c4a0e10f7c4ea9240c045f8bf3501b501c0a2c36525b140a7155471449db3cd6ab7c23ac4cec9fdd4bf4bf842b3c5fa7542cd19f3fba6461bccd63f986e60c504daccd66c157077fdfa3e5d816f3e345e54a0ab93a8588c3fc37972d7c9a2c96175867fe2b0b98eb703b457f4a761bdb5d8661f07dbf6e9f3c4e670325c3cb1e0c6a6c0430ac47d90e2ac58dce89374f520df2cb32558e38766ba62c0f56de7024e785ecbbbe976d44394d03c233123b1593e9361176365bec41beb615fae44226c530ef02de820b2671209eb2173de441363c5466197b27e151d7d016734638d53970db1e717c5a1ac8c6ba66acb4b4e93206764e85ae525ae378c5ac4a6e56f920d70cabbb474f471eb6780325b6948dac81eb525effdb0fbf92d156ae8242092ff9c9bd26886d96322179aefb348a8ab975b105a43f358cb88996f972f8e3a0f4c01c8c4daa9cd07e5426058b964114c9c27721cfaf767c1e0fde1cd737af2155f2820dc030c6e9dbbbc825cea68723ff220ea3fd537503dae37afea1862da5c4e862bf3f74a8d5efa09741ff8d4956eaa191dc005157fbbe74075e57ce1efc375c752b0b460e596a2c8a862fede80e3826e648ddefb351c74562352322efe97000ef6b7aa11ea61ac2f270888f6454c6cf4fabec2649418431cf758a280331042310cbe5da5be8da001cf575d7faf658237e97c3c97ed9e1df80b2dc0db5fd10dd3c0cb54810181012a6dfc0abc864f9e527b6af7483c31090ae22a5376acecd96a839366f3e3c454c13d80735c6c9be583e4b779807aae0b39fc5c0084d061bafc4026146a5f54a2d0ebc1d408f6cb18e5ce06c082e7c5e400e77f8dd5ae1f5c94eb5caf3bb8acba9f32e383753b94d9c54dd21caa21c30fff5a362a5420347ab7eeb33daaf79c35f1ea75e58ea4a7764182d13a1317649d9378d5e4fdaf6144162f8d370310be1968afb31adb368f6f0870aa3df3235f0879924b2b5f540662651e1e1b95feea7468fd8410e70664b708e9eda19dd5d1d1de8b64ba69bdec0cb0febe3b524641701f048acc97a0123df55665a1e50b79f061f63c3e60cd28c34ef3d2f310db816f5a1c3c5072359e656eea233112451c6d638a1b412d28d95d8e7f648aa9b04e3af52c5609988910b21fcc1a45e4080041562972e401b003a9966afc7c1b2c071ab2a4c7a74f17f0c91fe49a0c3a1897e1fd9491a7449a043be2a1837ab5f3d32d643342e9d6af773e12b9da5a6036b1dacf0a1b07a4083b317497b559f60d44dba9ee0e7ed2ffb78f8a1131a695758036a5881a031f9df0a83e055c7b081afca6feeb3139f6494c88b73329859fc4f0bbfb36232e0df195b78fe574b7ab91de1b8bd67cb39d9e47274ca5f3556cd2ac21235316e6ea4454ebe3fbe1382efcd0da46fe84384fd767052a7004d4bb0e2d81e505816cbc5b16da90a50bc5877bae4299c3f51abf43509728dcd1ce292d50d892ac4e6a4f0936ac5c2695341c73f24b946c1212877a94ce574c42c81fc1f36b324dced63ca9cb41bedd29c00372a90210ae86f19466323b9213a6946ab94a0025df64a3072125c489ea381b0dbc1ac14ef99f4d2d933856b64d98ccb6e6fdde108f87b995c289e1c1a51fcd3d248b73184f7e777440edbe162c1136d3a4197dd705ef924f34b9b3d0b1269c06ea175021675c22faeab5d67744c6de63cdfffd8e7d7906e816a6e07314e2653d4b7e90eedeba9969a1ca5b0561021ed86fa0de76c100d0d3d219fe1600e29d4d08089d0b9939a48b92ba966db535f44f929a63521be381e8b01c7e34b7a807e479279531991f5da24cca1e4b3be2ffe8e68328d4e4ee546ec5a5b5b547f766cc13a1b9d616bc3670b3c13e9549c7330aed45d1d7f8267ccf738645cd1688940e61321270bd1a65774fe6c198237f0fcc7d630af94dede7bfbd2a812e6506b76fec29a51c6130d6d8a58693afad1b4b6129297e4c6a3bcc7606f1c7d61bd7427c0421f20a67981f43a575a8addcea04d63e66e19c8a347f2877e9842812a82d62dbbfcc229eac3eaa3ffdd9986abd61b49ecb15e4b30ea1bcfe269877fbbe7bd236fb6330d16650b65f54b89a4e6e439cef264d9a09e65ea1a4d33ef3bbbaf92c1d4a49cd8440d3d08b61a31048a67713cd3fad26269d58427c3af99bc9313d0f4c39994f8455d9ca3438d3b15e3d47cbd53422cc55c72c4e38045a04bff28e90c7020ffe51988cf3b5edf25aa99c64387935c50cecfda67ac59ea43a7781f630dac78ccf5b3175533678b0b5d1ea43a33be31818f129d7c08d297766a3e8068a7abffdcdee68ac2a0f54535dff332fe4c0c4bb516bcb7fe00e51e2ba44e137bf5375bdea5f7cc2460ad5481318e3f7036f705340d83dd4c80fe73386d79cee777f41778f237cc8e65ab37b97cfa713e7addbe4ac8742b460cf0487c3d086ca1dcf60190e83003b34f555dde510c77562cf140cf2b78afc133f41165db91bac6727623f9d19815a9f8f62ea6b04f18e9d469a214fbc178f078a3f325537e4ad622b1d601583489843f752b23d62a7940b0e49c717c88b3def7114ace794c37a934a65230186ef31ce19940abc06decbfd31a678d0ff226c5e0cb403f23d47ea6d4117415e45908938345b0b59706bd189ca3d1aa7b3dc192570b5ad685dd9cfbdcbd114b1384fcc248bac75b249a2d1ed0ea293e1bb43d772d0c5099a5565ff4385799ad20ea13c33a14de72c8177eb2505254db610db4b36cd50a25f9cadf2583682e0105b3eb523afd07f5705e6686bdb893ac57c0a3b8610dce1e19e8616ff1052f845dd5d1a59e663b334df1ce8f4474dac834a50764225bc2bf8bc52447983c21f738bd7cda288e8eff348bef2eace08ffc9d198a9d288148bfd1332546a5c13bcc0fbfbc1cf0463d79d1299984b2d40021323240497698fcaaefcdd7acb077279987d18419d4429aefa56d75f69b997002de7e591d6a25887c576ff0be8477b73fd10d2f2f7c0b0c54b99b55ab7acef3d67fc9ed205732df7d58aae7a1dc2638c9efd8ca74d5e43670ba5a5a5a4f2ed9e6a79659e0428e5b134a5d73399ef1da1e57a48368c5fc220b337b99e79784a8686cfb51b01d145875ead78a7c6ec91f4a8e7862f82af7e06744adf502e3b4e9ad23a32ff434d263723400c71e32bd856282d28354ada6439e114cd6bd7c3cba463115c3e29abc91df71617db3c6a04370b000d9781176ed044dbb456b4ead702f7b15f9fdc89bc6ec7903735712b469722459a7e048504ac5ba42719024641bf4302b05b91d38c27a823ddb668ab474f86145e59faec4674db75724049e0136431237a2b81df5b876816023f86ccf83519ae418420398cc38cb7059d528369ca30149fd97d36f205fd2f461785d50d04c1af94e2ca57266b597d1fba8867897a55293a7c19620b2bfbcf2038ef0a15ef2559ab33b79833a1b71370d5643f68eea007e6a6434162b55dfa2127e090b9a9cc1758ee505ddd9ff7ca7f0172040739a88501ac9f385ce7644d199c1cff50ffd32106568aefc3d880c511f97f86beb9126b049a050fe4fe8e471411f1515e9db2054e8fe07692f59f6f013ce161b7ba48e64c4364d2b9cd6cf2ce0c8d36cae85d3666834fad081374adf9a310fb660b142c80208fe066e54ae2bb262a553e879ca11d0942f486c006c40cd1fdb557cb99d68ba07eb7183e312dbaebc30bff86f008f11cb46ace4ed02708ed0e8fccc207b258130d35c58ad7be0c70fa65402ac62cd66edee00e8f1896c89245c5d72027e6b42b4c5a22d46837f7eac1fae122f86e6bd8c142110581d32f8af2870a42d60aea81d60f1ff918b71e591ddfb365fe72fadd66f307ad4e1255d9d4cfce20a56bea5e617e54b329a6449cc3d690a536342d4e0ae39f678d09f3be8e0a9ebb7938bf0b7f70a0f77d57f9abe99d27a4335aa291f9c82f973647e58d893cd8e56d6821506126fef1a31717c828725660a2ce16cff2e3d82e184c43fc48dbd19c229035a9d175e42c53801edccee9528f383d62cbfaf41948fa184d92eaf5f9a298f9e047b50b127ed61da0483c02ed63cba76e0db8ec885c1ae6846ed59b0ef73750a8cea670d895de085d7a195427ee08a1315c9812e1202efed80eb63c24832c768868426a07b6b3f54d303d8c155e35863fae1792cffd4ada7740cbd45f1245739aedb71cca7a1c8413b557eabd24f1178f0bbb63d2acb01e5570dc86a9e47a9e4c771458f904dd952adbaee1d390d03a4db5b588e9ae304860cd044c51e6ce71b146b1160e9b37ad41e3c8a4f9c314246c77a3b311580bee2d5dea518bc7ab1a01e5d35c7d8d91576fc51d43e6a4fcc65671ad3fc5f6bb22188acc2facfee5a37bb5074fca3c7c31e95ffb99dba4be28e7c099944e64f2657a9e628da264fb3dd767dadff2a88f0e293ee44893aca7e789c0bd4700b2edd85982aaf3bd364918ead2df72baf44fe9f311a4a0836c2d9ed3f77baf834d43d7ab6e75805f3b1b88c2c13dfff82b02", 0x1000}, {&(0x7f0000000580)="63f4", 0x2}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="f7e8bfc793c3e5ec7707a55ff4c8fbcece36d6e9dd36364db6afb9cd47131e1983283d9a4d3f21c8402d5020fb46cbb4a77e3b5b1ca05ede4a4c0d4e3af78278d78b580d4bd0c90e17cbeb6714532db15724433d3d23ebfa95ac8855d75d8281127d82414e40f4363eea2256d60a5faf98", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1], 0x138, 0x80}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1108}, 0x1, 0x0, 0x0, 0x20000000}, 0x44854) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1.50358304s ago: executing program 1 (id=4040): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/image_size', 0x169a82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000040)={{0x80a0000, 0x6000, 0x10, 0x5, 0x3, 0xb, 0x4, 0x4, 0x0, 0x0, 0x5, 0x67}, {0xffff1000, 0x100000, 0x10, 0xd2, 0x40, 0x0, 0x6, 0x7, 0x1, 0x5, 0x6, 0x3}, {0xeeee8000, 0x2, 0x0, 0x2, 0xc, 0x5, 0x29, 0x4, 0xff, 0x2, 0x5, 0x9}, {0x0, 0xdddd3000, 0x4, 0x77, 0x7f, 0xd, 0x4, 0xd, 0x7e, 0x8, 0x81, 0x8}, {0xdddd1000, 0x4000, 0x3, 0x1, 0x81, 0x3, 0x9, 0x3, 0xbf, 0x7, 0x25, 0x7}, {0x3000, 0x4000, 0x8, 0x9, 0x8, 0x3, 0x4, 0xa, 0x44, 0x5, 0xb, 0x7}, {0xffff1000, 0xdddd0000, 0xc, 0x4, 0x8, 0x0, 0x4, 0x5, 0x7, 0xe, 0x7f, 0xd7}, {0x10000, 0x80a0000, 0x8, 0xba, 0x1, 0x7, 0xa0, 0x6, 0x6, 0x1, 0x7, 0x5}, {0xeeef0000, 0x3}, {0x1000, 0xa311}, 0x40004, 0x0, 0xeefff000, 0x0, 0x0, 0x2000, 0xeeee0000, [0x9, 0x800, 0x400, 0x3]}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000300)={0x74, 0x0, 0x18}) write$UHID_CREATE2(r0, &(0x7f00000004c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x5, 0x8, 0x1, 0x7, 0x3}}, 0x118) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000648000000160a01010000000000000000010000000900020010000000000000000900010073797a30000000001c0003"], 0xd0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) dup(r5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x40082104, &(0x7f0000000600)) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x48c002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r8, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xf1, {0x77359400}, {0x77359400}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}}, 0x800) (async) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x7f}) (async) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000680)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "dff648e1f4beecd42e216207004addf5b87842ee7caa88bbd602543307b644c2543198ba9c24ef32f1312707922a89b35e60c4f20f5b46f57e94bca19c4aa72d"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) 1.275415737s ago: executing program 5 (id=4041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) mq_timedreceive(r6, 0x0, 0x0, 0x0, 0x0) 1.109467316s ago: executing program 1 (id=4042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003d40)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000001200)='\r', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="13007e5b9362a30d096a64ceec86bd65cb1a70747b2ac26eec802d507b86eddd789c2328883c48325b223e6df7db5f4102bb1a8fd2b9d5b15309df66b45997e7fe2c831265a0ecd14c44a833a7db21346481f85f8df82a58c5b664f1db3be70d2d231da061bc3e89abd78d52433c6edf53b3a404e1c48b00000000"]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) close_range(r5, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') 559.057688ms ago: executing program 7 (id=4043): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x9) r3 = dup2(r1, r2) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x2002}) r5 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001480)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x10}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x3}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x0, 0x0, 0x9}) write$tcp_mem(r3, &(0x7f0000000080)={0x7ff, 0x20, 0x5507, 0x20, 0x3b0}, 0x48) close(0x3) 216.931804ms ago: executing program 5 (id=4044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000089) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xfffffeff, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2300002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa4}}, './file0/file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x6, 0x5f, 0x3, 0xfffffffc, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x8, 0x9, 0x2003bf36}}) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x8, 0x70bd29, 0x25dfdbff, {0x2, 0x8, 0x2a, 0xfd, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x49}, @IFA_LABEL={0x14, 0x3, 'wlan1\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 73.779963ms ago: executing program 7 (id=4045): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) getdents64(r0, &(0x7f0000000540)=""/217, 0xd9) 65.566394ms ago: executing program 1 (id=4046): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000756000/0x2000)=nil, 0x2000, 0x200000b, 0x4010, r1, 0x8af2b000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 0 (id=4047): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/176, 0xb0, 0x0) kernel console output (not intermixed with test programs): ed all slaves [ 1377.993359][ T36] bond6 (unregistering): Released all slaves [ 1378.012308][ T36] bond0 (unregistering): Released all slaves [ 1378.031419][ T36] bond7 (unregistering): Released all slaves [ 1378.142887][T18293] team_slave_0: entered promiscuous mode [ 1378.149534][T18293] team_slave_1: entered promiscuous mode [ 1378.344114][T18220] hsr_slave_0: entered promiscuous mode [ 1378.367805][T18220] hsr_slave_1: entered promiscuous mode [ 1378.393922][T18220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.401686][T18220] Cannot create hsr debugfs directory [ 1378.413142][ T36] k*]: left promiscuous mode [ 1378.519487][ T36] tipc: Left network mode [ 1378.893853][T17747] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1378.933632][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1378.973006][T18220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.015243][T18220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.048447][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.055615][T12115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.097377][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.104645][T12115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.173870][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1379.213039][T17747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.325998][T17747] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1379.335432][T17747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.349118][T17747] usb 6-1: config 0 descriptor?? [ 1379.453689][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1379.573413][T18306] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1379.640887][ T36] hsr_slave_0: left promiscuous mode [ 1379.651391][ T36] hsr_slave_1: left promiscuous mode [ 1379.660576][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1379.668610][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1379.675299][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1379.686767][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.720076][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.733004][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.740896][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.773132][ T36] veth1_macvtap: left promiscuous mode [ 1379.779267][ T36] veth0_macvtap: left promiscuous mode [ 1379.788167][ T36] veth1_vlan: left promiscuous mode [ 1379.803041][ T36] veth0_vlan: left promiscuous mode [ 1379.811526][T17747] usbhid 6-1:0.0: can't add hid device: -71 [ 1379.818760][ T5917] usb usb3-port1: attempt power cycle [ 1379.836172][T17747] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1379.879437][T17747] usb 6-1: USB disconnect, device number 117 [ 1380.205084][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1380.256658][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1380.533407][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1380.574648][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1380.702336][ T5917] usb usb3-port1: unable to enumerate USB device [ 1381.708738][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1381.850065][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1383.133871][ T5917] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1383.294401][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1383.349232][ T5917] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.496595][ T5917] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.521339][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1383.543875][ T5917] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1383.587170][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.599405][ T5917] usb 6-1: config 0 descriptor?? [ 1384.426497][T18353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.459597][T18220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.491193][T18353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.828504][ T36] IPVS: stop unused estimator thread 0... [ 1384.946561][ T5917] usb 6-1: USB disconnect, device number 118 [ 1385.049847][T18395] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3196'. [ 1386.110034][T18220] veth0_vlan: entered promiscuous mode [ 1386.182807][T18220] veth1_vlan: entered promiscuous mode [ 1386.204624][ T5917] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1386.310584][T18220] veth0_macvtap: entered promiscuous mode [ 1386.356128][T18220] veth1_macvtap: entered promiscuous mode [ 1386.364415][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 1386.422979][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1386.460906][T18220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.479351][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1386.527897][T18220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.542403][ T5917] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1386.561132][ T5917] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1386.798724][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1386.852198][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 1386.871869][ T5917] usb 2-1: Product: о [ 1386.880553][T18074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.898941][ T5917] usb 2-1: Manufacturer: ᐌ [ 1386.914429][T18074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.921948][ T5917] usb 2-1: SerialNumber: syz [ 1387.010199][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.036757][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.288860][ T5917] cdc_ncm 2-1:1.0: bind() failure [ 1387.328062][ T5917] cdc_mbim 2-1:1.1: CDC Union missing and no IAD found [ 1387.358952][ T5917] cdc_mbim 2-1:1.1: bind() failure [ 1387.391455][T18426] 9pnet_fd: Insufficient options for proto=fd [ 1387.397387][ T5917] usb 2-1: USB disconnect, device number 36 [ 1388.422118][T18448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.174774][T16155] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1389.965786][T16155] usb 6-1: Using ep0 maxpacket: 8 [ 1391.022874][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1391.156268][T16155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.174516][T16155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.205084][T16155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1391.218382][T16155] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1391.228558][T16155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.474696][T16155] usb 6-1: config 0 descriptor?? [ 1391.553807][T18477] /dev/nullb0: Can't open blockdev [ 1392.267662][T16155] usb 6-1: can't set config #0, error -71 [ 1392.294446][T16155] usb 6-1: USB disconnect, device number 119 [ 1392.314989][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1392.315009][ T30] audit: type=1326 audit(1755480989.620:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.372968][ T30] audit: type=1326 audit(1755480989.620:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.438072][T18487] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3222'. [ 1392.457448][ T30] audit: type=1326 audit(1755480989.620:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.496231][ T30] audit: type=1326 audit(1755480989.620:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.522856][ T30] audit: type=1326 audit(1755480989.620:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.546346][ T30] audit: type=1326 audit(1755480989.620:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.579310][ T30] audit: type=1326 audit(1755480989.630:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.626070][ T30] audit: type=1326 audit(1755480989.630:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.741678][ T30] audit: type=1326 audit(1755480989.630:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1392.875746][ T30] audit: type=1326 audit(1755480989.630:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1393.755471][T18511] /dev/nullb0: Can't open blockdev [ 1393.832446][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3229'. [ 1394.255423][T18523] lo speed is unknown, defaulting to 1000 [ 1394.272968][T18523] lo speed is unknown, defaulting to 1000 [ 1394.286244][T18523] lo speed is unknown, defaulting to 1000 [ 1394.848284][T18524] vcan0: left promiscuous mode [ 1394.854243][T18524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.862146][T18524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.912398][T18523] infiniband syz0: set active [ 1394.917163][T18523] infiniband syz0: added lo [ 1394.958872][T18524] net_ratelimit: 10 callbacks suppressed [ 1394.958881][T18524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1395.012010][T18523] RDS/IB: syz0: added [ 1395.016150][T18523] smc: adding ib device syz0 with port count 1 [ 1395.022477][T18523] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 1395.116345][ T5938] lo speed is unknown, defaulting to 1000 [ 1395.124232][T18523] lo speed is unknown, defaulting to 1000 [ 1395.278542][T18523] lo speed is unknown, defaulting to 1000 [ 1395.422042][T18523] lo speed is unknown, defaulting to 1000 [ 1395.570801][T18523] lo speed is unknown, defaulting to 1000 [ 1395.720011][T18523] lo speed is unknown, defaulting to 1000 [ 1395.868378][T18523] lo speed is unknown, defaulting to 1000 [ 1396.054334][T16504] lo speed is unknown, defaulting to 1000 [ 1396.073933][ T5938] syz0: Port: 1 Link ACTIVE [ 1396.450763][T18544] netlink: 'syz.7.3234': attribute type 1 has an invalid length. [ 1396.465672][T18544] netlink: 15 bytes leftover after parsing attributes in process `syz.7.3234'. [ 1396.555047][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1396.735995][ T10] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1397.077730][ T10] usb 6-1: config 9 has an invalid interface number: 81 but max is 0 [ 1397.083398][T18570] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1397.086401][ T10] usb 6-1: config 9 has no interface number 0 [ 1397.086456][ T10] usb 6-1: config 9 interface 81 altsetting 7 bulk endpoint 0xB has invalid maxpacket 16 [ 1397.112297][ T10] usb 6-1: config 9 interface 81 has no altsetting 0 [ 1397.122883][ T10] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 1397.134587][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.142782][ T10] usb 6-1: Product: syz [ 1397.147297][ T10] usb 6-1: Manufacturer: syz [ 1397.151938][ T10] usb 6-1: SerialNumber: syz [ 1397.163875][T18547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1397.383612][ T10] usbserial_generic 6-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1397.399822][ T10] usbserial_generic 6-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1397.412032][ T10] usbserial_generic 6-1:9.81: generic converter detected [ 1397.423239][ T10] usb 6-1: generic converter now attached to ttyUSB0 [ 1397.434142][ T10] usb 6-1: USB disconnect, device number 120 [ 1397.447971][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1397.456845][ T10] usbserial_generic 6-1:9.81: device disconnected [ 1397.525625][ T5938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1397.834711][ T5971] IPVS: starting estimator thread 0... [ 1397.840895][ T5938] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.854301][ T5938] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1397.863431][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.879879][ T5938] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1397.956018][T18581] IPVS: using max 45 ests per chain, 108000 per kthread [ 1398.235804][T16504] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1398.950925][ T5938] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1399.038534][T16504] usb 2-1: config 2 has an invalid interface number: 233 but max is 0 [ 1399.051670][T16504] usb 2-1: config 2 has no interface number 0 [ 1399.060958][T16504] usb 2-1: config 2 interface 233 has no altsetting 0 [ 1399.070652][T16504] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00 [ 1399.081185][T16504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.090786][T16504] usb 2-1: Product: syz [ 1399.095119][T16504] usb 2-1: Manufacturer: syz [ 1399.099818][T16504] usb 2-1: SerialNumber: syz [ 1399.124829][T18592] tipc: Started in network mode [ 1399.130598][T18592] tipc: Node identity 765d8b0fdc4f, cluster identity 4711 [ 1399.140173][T18592] tipc: Enabled bearer , priority 0 [ 1399.148109][T18592] syzkaller0: entered promiscuous mode [ 1399.153648][T18592] syzkaller0: entered allmulticast mode [ 1399.155233][ T5938] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1399.172536][ T5938] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1399.180726][T18592] tipc: Resetting bearer [ 1399.183325][ T5938] usb 3-1: USB disconnect, device number 16 [ 1399.318001][T16504] ftdi_sio 2-1:2.233: FTDI USB Serial Device converter detected [ 1399.330565][T16504] usb 2-1: Detected FT232HP [ 1399.335765][T16504] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1399.345122][T16504] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1399.353760][T16504] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1399.363805][T16504] usb 2-1: USB disconnect, device number 37 [ 1399.376231][T16504] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1399.386501][T16504] ftdi_sio 2-1:2.233: device disconnected [ 1399.671550][T18596] random: crng reseeded on system resumption [ 1399.930829][T18590] tipc: Resetting bearer [ 1400.038044][T18590] tipc: Disabling bearer [ 1400.290547][T18619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1400.543242][T18624] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1400.838269][T18633] tap0: tun_chr_ioctl cmd 2147767507 [ 1400.854602][T18632] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 1400.864431][T18634] tap0: tun_chr_ioctl cmd 2147767507 [ 1400.893711][T18633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1403.469894][T18666] xt_TCPMSS: Only works on TCP SYN packets [ 1403.486323][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1403.666590][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1403.685734][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.726376][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1403.742347][T18673] input: syz1 as /devices/virtual/input/input61 [ 1403.760352][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1403.788363][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.811704][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1403.826153][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.835157][ T10] usb 2-1: Product: syz [ 1403.843639][ T10] usb 2-1: Manufacturer: syz [ 1403.852982][ T10] usb 2-1: SerialNumber: syz [ 1403.868281][T18657] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1403.976394][ T9] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1404.126622][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1404.144023][ T9] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1404.165256][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.182492][ T9] usb 6-1: config 0 has no interface number 0 [ 1404.189555][ T9] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1404.216875][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1404.236641][ T9] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1404.260150][ T9] usb 6-1: Manufacturer: syz [ 1404.278144][ T9] usb 6-1: config 0 descriptor?? [ 1404.416719][T17747] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1404.599261][T17747] usb 3-1: Using ep0 maxpacket: 8 [ 1404.619565][T17747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1404.631867][T17747] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1404.641213][T17747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.653935][T17747] usb 3-1: config 0 descriptor?? [ 1404.913839][ T10] cdc_ncm 2-1:1.0: bind() failure [ 1404.926584][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1405.055642][T18689] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 1405.064217][T18689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1405.299292][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1405.478201][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1405.496278][T17747] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1405.553469][ T10] usb 2-1: USB disconnect, device number 38 [ 1405.563034][T17747] usb 3-1: USB disconnect, device number 17 [ 1405.593005][ T9] usb 6-1: Can not set alternate setting to 1, error: -71 [ 1405.647486][ T9] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1405.682342][ T9] usb 6-1: USB disconnect, device number 121 [ 1407.061622][T18706] /dev/nullb0: Can't open blockdev [ 1407.233133][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1407.233156][ T30] audit: type=1326 audit(1755481004.538:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1407.344054][ T30] audit: type=1326 audit(1755481004.538:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baf8ebe9 code=0x7ffc0000 [ 1407.660565][T16155] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1407.828842][T16155] usb 3-1: Using ep0 maxpacket: 16 [ 1407.862063][T16155] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1407.890577][T16155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.917135][T18717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.927969][T16155] usb 3-1: config 0 descriptor?? [ 1407.963968][T16155] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1407.990400][T16155] usb 3-1: Detected FT4232H [ 1408.156569][T16155] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1408.198727][T16155] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1408.239517][T16155] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1408.281089][T16155] usb 3-1: USB disconnect, device number 18 [ 1408.339040][T16155] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1408.381084][T16155] ftdi_sio 3-1:0.0: device disconnected [ 1408.896631][T18745] dummy0: entered promiscuous mode [ 1409.350808][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1409.375835][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1409.403099][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1409.606990][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1409.667032][T17747] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1409.779149][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1409.797164][T14396] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1409.807034][T14396] Bluetooth: hci0: Injecting HCI hardware error event [ 1409.818786][T14396] Bluetooth: hci0: hardware error 0x00 [ 1409.829131][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1409.842155][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1409.852340][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.861199][ T9] usb 3-1: Product: syz [ 1409.866009][T17747] usb 6-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 1409.900411][ T9] usb 3-1: Manufacturer: syz [ 1409.921409][T17747] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.931671][ T9] usb 3-1: SerialNumber: syz [ 1410.043653][ T9] usb 3-1: config 0 descriptor?? [ 1410.050387][T17747] usb 6-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1410.068975][T18773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.106938][T17747] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1410.455611][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1410.477544][T17747] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1410.487080][T17747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.644667][T17747] usb 6-1: config 0 descriptor?? [ 1410.870017][T18767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.880993][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1410.901990][T18767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.928285][ T9] usb 3-1: USB disconnect, device number 19 [ 1411.141873][T17747] usbhid 6-1:0.0: can't add hid device: -71 [ 1411.184774][T17747] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1411.379327][T17747] usb 6-1: USB disconnect, device number 122 [ 1411.958545][T14396] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1411.999039][T18798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.026920][T18798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.047194][T17747] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1412.187220][T17747] usb 3-1: device descriptor read/64, error -71 [ 1412.952459][T18809] syz.7.3310 uses old SIOCAX25GETINFO [ 1412.997451][T17747] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1413.127341][T17747] usb 3-1: device descriptor read/64, error -71 [ 1413.247617][T17747] usb usb3-port1: attempt power cycle [ 1413.290731][T16155] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1413.457354][T16155] usb 2-1: Using ep0 maxpacket: 8 [ 1413.465644][T16155] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1413.476806][T16155] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1413.489581][T16155] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1413.499748][T16155] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1413.512839][T16155] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1413.521956][T16155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.557419][T16504] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1413.597835][T17747] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1413.619523][T17747] usb 3-1: device descriptor read/8, error -71 [ 1413.707752][T16504] usb 6-1: device descriptor read/64, error -71 [ 1413.736112][T16155] usb 2-1: GET_CAPABILITIES returned 0 [ 1413.741963][T16155] usbtmc 2-1:16.0: can't read capabilities [ 1413.857411][T17747] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1413.888481][T17747] usb 3-1: device descriptor read/8, error -71 [ 1413.935962][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.944950][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.967741][T16504] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1413.991879][ T5971] usb 2-1: USB disconnect, device number 39 [ 1413.998372][T17747] usb usb3-port1: unable to enumerate USB device [ 1414.107571][T16504] usb 6-1: device descriptor read/64, error -71 [ 1414.205681][T18822] syz.1.3313: attempt to access beyond end of device [ 1414.205681][T18822] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1414.217706][T16504] usb usb6-port1: attempt power cycle [ 1414.219026][T18822] (syz.1.3313,18822,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1414.235405][T18822] (syz.1.3313,18822,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1414.267659][T18822] (syz.1.3313,18822,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1414.303040][T18822] (syz.1.3313,18822,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1414.587718][T16504] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1414.643894][T16504] usb 6-1: device descriptor read/8, error -71 [ 1415.079071][T16504] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1415.875662][T16504] usb 6-1: device descriptor read/8, error -71 [ 1415.909209][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1416.072863][T16504] usb usb6-port1: unable to enumerate USB device [ 1416.409170][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3323'. [ 1416.537770][T16504] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1416.611612][T18866] 9pnet_fd: Insufficient options for proto=fd [ 1416.717692][T16504] usb 2-1: Using ep0 maxpacket: 32 [ 1416.738237][T16504] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1416.759605][T16504] usb 2-1: config 0 has no interface number 0 [ 1416.783906][T16504] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1417.012115][T18877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.093639][T16504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.647317][T16504] usb 2-1: Product: syz [ 1417.651634][T16504] usb 2-1: Manufacturer: syz [ 1417.656406][T16504] usb 2-1: SerialNumber: syz [ 1417.693490][T16504] usb 2-1: config 0 descriptor?? [ 1417.704058][T16504] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1417.940944][T16504] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1418.009649][T16504] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1418.152211][T18849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.201528][T18849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.238575][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1418.484214][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1418.492169][T16155] usb 2-1: USB disconnect, device number 40 [ 1418.513502][T16155] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1418.550439][T16155] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1418.565602][T16155] quatech2 2-1:0.51: device disconnected [ 1418.767175][T18900] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1420.908236][T18903] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1421.008904][T18910] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1421.081379][T17613] Bluetooth: hci3: command 0x1003 tx timeout [ 1421.091186][T14396] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1424.352323][T18948] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1424.800363][T18955] /dev/nullb0: Can't open blockdev [ 1424.828787][T18955] vxcan1 speed is unknown, defaulting to 1000 [ 1425.024412][T18955] lo speed is unknown, defaulting to 1000 [ 1425.041197][T17747] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1425.101326][ T5917] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1425.201801][T17747] usb 6-1: Using ep0 maxpacket: 16 [ 1425.209878][T17747] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.225446][T17747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.249359][T17747] usb 6-1: config 0 has no interface number 0 [ 1425.257583][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 1425.266318][ T5917] usb 3-1: config 7 has an invalid interface number: 37 but max is 0 [ 1425.275522][ T5917] usb 3-1: config 7 has no interface number 0 [ 1425.282009][ T5917] usb 3-1: config 7 interface 37 has no altsetting 0 [ 1425.290798][T17747] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1425.418202][T17747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.427430][ T5917] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=7b.71 [ 1425.437197][T17747] usb 6-1: Product: syz [ 1425.445376][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.453425][ T5917] usb 3-1: Product: syz [ 1425.457748][T17747] usb 6-1: Manufacturer: syz [ 1425.463202][T17747] usb 6-1: SerialNumber: syz [ 1425.485776][ T5917] usb 3-1: Manufacturer: syz [ 1425.491540][T17747] usb 6-1: config 0 descriptor?? [ 1425.496676][ T5917] usb 3-1: SerialNumber: syz [ 1425.525837][T17747] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1425.732981][T18972] input: syz0 as /devices/virtual/input/input62 [ 1426.065219][ T5917] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1426.178630][T18973] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1426.246687][ T5917] gspca_m5602: Failed to find a sensor [ 1426.320013][ T5917] ALi m5602 3-1:7.37: ALi m5602 webcam failed [ 1426.373110][T18973] tipc: Enabled bearer , priority 5 [ 1426.523646][ T5917] usb 3-1: USB disconnect, device number 24 [ 1426.788563][T17747] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1427.372452][T17747] tipc: Node number set to 2853341967 [ 1427.569226][T18983] netlink: 'syz.1.3355': attribute type 25 has an invalid length. [ 1427.592804][T18983] netlink: 'syz.1.3355': attribute type 7 has an invalid length. [ 1427.623903][ T5917] usb 6-1: USB disconnect, device number 127 [ 1427.646197][T18984] netlink: 'syz.1.3355': attribute type 25 has an invalid length. [ 1427.665096][T18984] netlink: 'syz.1.3355': attribute type 7 has an invalid length. [ 1429.879066][T19026] hugetlbfs: Bad value for 'uid' [ 1429.884155][T19026] hugetlbfs: Bad value for 'uid' [ 1430.334344][T19021] delete_channel: no stack [ 1430.924542][T16504] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1431.119443][T16504] usb 3-1: Using ep0 maxpacket: 32 [ 1431.133947][T16504] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1431.158637][T16504] usb 3-1: config 0 has no interfaces? [ 1431.176518][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1431.182467][T16504] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1431.209765][T16504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.227376][T16504] usb 3-1: Product: syz [ 1431.231660][T16504] usb 3-1: Manufacturer: syz [ 1431.236406][T16504] usb 3-1: SerialNumber: syz [ 1431.262469][T16504] usb 3-1: config 0 descriptor?? [ 1431.346547][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1431.382614][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1431.396832][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1431.411501][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1431.458930][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1431.505887][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1431.507089][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.519598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1431.538351][ T9] usb 2-1: Product: syz [ 1431.546708][ T9] usb 2-1: Manufacturer: syz [ 1431.571295][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.596403][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1431.609927][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1431.628492][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1431.711172][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1431.872013][ T9] usb 2-1: USB disconnect, device number 41 [ 1432.295645][T19082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.325225][T19082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.586021][T19088] Smack: duplicate mount options [ 1432.628080][T19088] Smack: duplicate mount options [ 1433.697576][ T5971] usb 3-1: USB disconnect, device number 25 [ 1435.802096][T14396] Bluetooth: hci4: command 0x0406 tx timeout [ 1436.066225][T19117] Bluetooth: MGMT ver 1.23 [ 1437.387320][ T5971] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1437.589862][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 1437.643409][ T5971] usb 6-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config [ 1437.701290][ T5971] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1437.760211][ T5971] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1437.820331][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.102161][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1438.141451][ T5971] usb 6-1: USB disconnect, device number 2 [ 1438.436387][T16504] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1438.710502][T16504] usb 2-1: device descriptor read/all, error -71 [ 1441.755654][T19148] overlayfs: failed to resolve './file1': -2 [ 1442.416601][T19165] x_tables: unsorted underflow at hook 4 [ 1442.490279][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1442.663673][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1442.679583][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1442.702252][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.711000][ T9] usb 2-1: Product: syz [ 1442.849729][ T9] usb 2-1: Manufacturer: syz [ 1442.854535][ T9] usb 2-1: SerialNumber: syz [ 1442.867861][ T9] usb 2-1: config 0 descriptor?? [ 1443.079045][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3406'. [ 1443.101312][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1443.303931][ T9] usb write operation failed. (-71) [ 1443.373255][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1443.409498][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 1443.425678][ T9] usb 2-1: media controller created [ 1443.437365][ T9] usb read operation failed. (-71) [ 1443.450042][ T9] usb write operation failed. (-71) [ 1443.462794][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1443.490034][ T9] usb 2-1: USB disconnect, device number 44 [ 1445.265451][T19176] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1446.852438][T19195] sctp: [Deprecated]: syz.1.3413 (pid 19195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1446.852438][T19195] Use struct sctp_sack_info instead [ 1446.897761][T19195] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1447.196095][T19201] program syz.2.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.360680][T19205] netlink: 'syz.5.3417': attribute type 3 has an invalid length. [ 1447.408335][T19205] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3417'. [ 1447.449474][T19208] fuse: Unknown parameter 'grop_id' [ 1448.361018][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3419'. [ 1448.371018][T19215] netlink: 'syz.7.3419': attribute type 20 has an invalid length. [ 1448.526823][T19215] netlink: 'syz.7.3419': attribute type 21 has an invalid length. [ 1449.571116][T19235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3425'. [ 1451.570648][T19255] tipc: Started in network mode [ 1451.576053][T19255] tipc: Node identity ac14140f, cluster identity 4711 [ 1451.588606][T19255] tipc: New replicast peer: 255.255.255.255 [ 1451.598715][T19255] tipc: Enabled bearer , priority 5 [ 1451.938759][T19264] veth1_to_bond: entered allmulticast mode [ 1451.953595][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3430'. [ 1452.047562][T19258] veth1_to_bond: left allmulticast mode [ 1452.719043][ T9] tipc: Node number set to 2886997007 [ 1453.263212][T19297] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1454.797159][ T980] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1455.179684][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1455.339545][ T980] usb 2-1: not running at top speed; connect to a high speed hub [ 1455.360748][ T980] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 1455.374087][ T980] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.385357][ T980] usb 2-1: config 5 has no interface number 0 [ 1455.560672][ T980] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1455.574771][ T980] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.609941][ T980] usb 2-1: config 5 interface 246 has no altsetting 0 [ 1455.621229][ T980] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1455.630540][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.639575][ T980] usb 2-1: Product: syz [ 1455.644024][ T980] usb 2-1: Manufacturer: syz [ 1455.648800][ T980] usb 2-1: SerialNumber: syz [ 1458.662391][ T980] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1458.685699][T12114] usb 2-1: Failed to submit usb control message: -71 [ 1458.694128][T12114] usb 2-1: unable to send the bmi data to the device: -71 [ 1458.696570][ T980] usb 2-1: USB disconnect, device number 45 [ 1458.858473][T12114] usb 2-1: unable to get target info from device [ 1458.865508][T12114] usb 2-1: could not get target info (-71) [ 1458.871549][T12114] usb 2-1: could not probe fw (-71) [ 1458.922945][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3457'. [ 1460.117498][T19370] xt_hashlimit: size too large, truncated to 1048576 [ 1460.649095][ T980] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1461.320394][ T980] usb 2-1: device descriptor read/64, error -71 [ 1461.347876][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1461.633847][ T5917] usb 6-1: device descriptor read/64, error -71 [ 1461.665070][ T980] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1461.849923][ T980] usb 2-1: device descriptor read/64, error -71 [ 1461.967838][ T5917] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1462.010936][ T980] usb usb2-port1: attempt power cycle [ 1462.120900][ T5917] usb 6-1: device descriptor read/64, error -71 [ 1463.078037][ T5917] usb usb6-port1: attempt power cycle [ 1463.145517][ T980] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1463.196392][ T980] usb 2-1: device descriptor read/8, error -71 [ 1463.446696][ T5917] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1463.456898][ T980] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1463.490592][ T5917] usb 6-1: device descriptor read/8, error -71 [ 1463.513705][ T980] usb 2-1: device descriptor read/8, error -71 [ 1463.648267][ T980] usb usb2-port1: unable to enumerate USB device [ 1464.940203][ T5917] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1464.988451][T19446] nbd: must specify a device to reconfigure [ 1465.154248][ T5917] usb 6-1: device not accepting address 6, error -71 [ 1465.161982][ T5917] usb usb6-port1: unable to enumerate USB device [ 1466.069248][T19446] sctp: [Deprecated]: syz.2.3477 (pid 19446) Use of int in max_burst socket option deprecated. [ 1466.069248][T19446] Use struct sctp_assoc_value instead [ 1466.123308][ T5917] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1467.071300][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 1467.093257][ T5917] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1467.104960][ T5917] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1467.117870][ T5917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1467.127689][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.135771][ T5917] usb 6-1: Product: syz [ 1467.142246][ T5917] usb 6-1: Manufacturer: syz [ 1467.146909][ T5917] usb 6-1: SerialNumber: syz [ 1467.417240][ T5917] cdc_ncm 6-1:1.0: bind() failure [ 1467.429262][ T5917] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1467.457422][ T5917] cdc_ncm 6-1:1.1: bind() failure [ 1467.476069][ T5917] usb 6-1: USB disconnect, device number 7 [ 1467.664133][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1467.814954][ T9] usb 3-1: device descriptor read/64, error -71 [ 1468.086329][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1468.306694][ T9] usb 3-1: device descriptor read/64, error -71 [ 1468.467939][ T9] usb usb3-port1: attempt power cycle [ 1468.752907][T19500] /dev/nullb0: Can't open blockdev [ 1469.230483][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1469.269748][ T9] usb 3-1: device descriptor read/8, error -71 [ 1469.531943][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1469.579363][ T9] usb 3-1: device descriptor read/8, error -71 [ 1469.692560][ T9] usb usb3-port1: unable to enumerate USB device [ 1471.388151][ T5917] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1471.441847][T19543] /dev/nullb0: Can't open blockdev [ 1471.951732][T19526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.960451][T19526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.012941][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.027721][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1472.054321][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1472.070211][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1472.092424][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1472.113199][ T5917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1472.122640][ T5917] usb 2-1: Manufacturer: syz [ 1472.129332][ T5917] usb 2-1: config 0 descriptor?? [ 1472.231847][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1472.395885][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.408517][ T5917] rc_core: IR keymap rc-hauppauge not found [ 1472.419608][ T5917] Registered IR keymap rc-empty [ 1472.424702][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1472.437141][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.444014][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1472.454194][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1472.470476][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.477231][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.486742][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.498898][ T9] usb 3-1: config 0 descriptor?? [ 1472.504975][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1472.530842][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63 [ 1472.550485][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.574042][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.593472][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.613911][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.645496][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.695181][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.749799][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.790280][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.810660][T19552] loop2: detected capacity change from 0 to 7 [ 1472.826012][T19552] Dev loop2: unable to read RDB block 7 [ 1472.832864][T19552] loop2: unable to read partition table [ 1472.839801][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.846824][T19552] loop2: partition table beyond EOD, truncated [ 1472.853036][T19552] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1472.875297][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1472.885174][T19552] /dev/nullb0: Can't open blockdev [ 1472.908854][ T5917] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1472.918616][ T5917] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1472.933904][ T9] plantronics 0003:047F:FFFF.0026: ignoring exceeding usage max [ 1472.953133][ T5917] usb 2-1: USB disconnect, device number 50 [ 1472.971461][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1474.488752][ T9] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 1474.993152][ T980] libceph: connect (1)[c::]:6789 error -101 [ 1475.008166][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 1475.234612][ T9] usb 3-1: device descriptor read/64, error -32 [ 1475.502527][T17747] libceph: connect (1)[c::]:6789 error -101 [ 1475.534009][T17747] libceph: mon0 (1)[c::]:6789 connect error [ 1475.677154][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1475.910999][T19579] ceph: No mds server is up or the cluster is laggy [ 1477.371394][T17747] libceph: connect (1)[c::]:6789 error -101 [ 1477.383395][T17747] libceph: mon0 (1)[c::]:6789 connect error [ 1477.386540][T10022] Bluetooth: hci6: command 0x0406 tx timeout [ 1477.387443][T19601] /dev/nullb0: Can't open blockdev [ 1477.779529][ T5917] usb 3-1: USB disconnect, device number 30 [ 1479.230119][T19613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1479.253109][T19613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1479.260493][T19613] IPv6: NLM_F_CREATE should be set when creating new route [ 1479.268138][T19613] IPv6: NLM_F_CREATE should be set when creating new route [ 1479.286383][T16504] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1479.450890][T19616] 9pnet: Could not find request transport: f.]~gp䧊DTr7ُؗ˧$ ӯf0xffffffffffffffff [ 1479.488049][T16504] usb 3-1: Using ep0 maxpacket: 8 [ 1479.521771][T16504] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1479.554788][T16504] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1479.587427][T16504] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1479.639057][T16504] usb 3-1: Product: syz [ 1479.648198][T16504] usb 3-1: Manufacturer: syz [ 1479.661883][T16504] usb 3-1: SerialNumber: syz [ 1479.970323][T16504] usb 3-1: Invalid connection information received from device [ 1480.180238][T16504] usb 3-1: USB disconnect, device number 31 [ 1481.638331][T19642] /dev/nullb0: Can't open blockdev [ 1481.856258][T10022] Bluetooth: hci5: command 0x0405 tx timeout [ 1482.451953][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1482.465564][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1482.483996][T19651] team_slave_0: left promiscuous mode [ 1482.494911][T19651] team_slave_1: left promiscuous mode [ 1483.181518][T19651] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1483.191834][T19651] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1483.211762][T19651] team0 (unregistering): Port device team_slave_0 removed [ 1483.227213][T19651] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1483.237058][ T980] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1483.246046][T19651] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1483.257538][T19651] team0 (unregistering): Port device team_slave_1 removed [ 1483.444651][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 1483.471674][T19656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1483.489451][ T980] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 1483.502046][ T30] audit: type=1326 audit(1755481080.507:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19655 comm="syz.0.3530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa55d78ebe9 code=0x0 [ 1483.527427][ T980] usb 2-1: config 0 has no interface number 0 [ 1483.544393][ T980] usb 2-1: config 0 interface 200 has no altsetting 0 [ 1483.565309][ T980] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1483.605188][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.630789][ T980] usb 2-1: Product: syz [ 1483.635209][ T980] usb 2-1: Manufacturer: syz [ 1483.656853][ T980] usb 2-1: SerialNumber: syz [ 1483.665003][ T980] usb 2-1: config 0 descriptor?? [ 1483.669053][T19668] FAULT_INJECTION: forcing a failure. [ 1483.669053][T19668] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1483.685402][T19668] CPU: 1 UID: 0 PID: 19668 Comm: syz.7.3534 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1483.685432][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1483.685446][T19668] Call Trace: [ 1483.685455][T19668] [ 1483.685464][T19668] dump_stack_lvl+0x189/0x250 [ 1483.685496][T19668] ? __pfx____ratelimit+0x10/0x10 [ 1483.685534][T19668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.685559][T19668] ? __pfx__printk+0x10/0x10 [ 1483.685591][T19668] ? fs_reclaim_acquire+0x7d/0x100 [ 1483.685630][T19668] should_fail_ex+0x414/0x560 [ 1483.685659][T19668] prepare_alloc_pages+0x213/0x610 [ 1483.685696][T19668] __alloc_frozen_pages_noprof+0x123/0x370 [ 1483.685729][T19668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1483.685769][T19668] ? policy_nodemask+0x27c/0x720 [ 1483.685798][T19668] alloc_pages_mpol+0x232/0x4a0 [ 1483.685829][T19668] vma_alloc_folio_noprof+0xe4/0x200 [ 1483.685858][T19668] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1483.685897][T19668] folio_prealloc+0x30/0x180 [ 1483.685923][T19668] do_wp_page+0x1231/0x5800 [ 1483.685982][T19668] ? __pfx_do_wp_page+0x10/0x10 [ 1483.686010][T19668] ? do_raw_spin_lock+0x121/0x290 [ 1483.686042][T19668] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1483.686083][T19668] __handle_mm_fault+0x1144/0x5620 [ 1483.686140][T19668] ? __pfx___handle_mm_fault+0x10/0x10 [ 1483.686200][T19668] ? find_vma+0xe7/0x160 [ 1483.686220][T19668] ? __pfx_find_vma+0x10/0x10 [ 1483.686244][T19668] handle_mm_fault+0x2d5/0x7f0 [ 1483.686292][T19668] do_user_addr_fault+0x764/0x1390 [ 1483.686346][T19668] exc_page_fault+0x76/0xf0 [ 1483.686371][T19668] asm_exc_page_fault+0x26/0x30 [ 1483.686392][T19668] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1483.686422][T19668] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1483.686441][T19668] RSP: 0018:ffffc90004c672b8 EFLAGS: 00050202 [ 1483.686461][T19668] RAX: ffffffff84b6e501 RBX: ffff88807f022000 RCX: 0000000000000ec0 [ 1483.686477][T19668] RDX: 0000000000000000 RSI: ffff88807f022000 RDI: 0000200000001540 [ 1483.686492][T19668] RBP: ffffc90004c67418 R08: ffff88807f022ebf R09: 1ffff1100fe045d7 [ 1483.686515][T19668] R10: dffffc0000000000 R11: ffffed100fe045d8 R12: 1ffff9200098cf9f [ 1483.686530][T19668] R13: 0000200000001540 R14: ffffc90004c67d08 R15: 0000000000000ec0 [ 1483.686556][T19668] ? _copy_to_iter+0x1e1/0x16f0 [ 1483.686592][T19668] _copy_to_iter+0x24c/0x16f0 [ 1483.686619][T19668] ? __mutex_trylock_common+0x153/0x260 [ 1483.686656][T19668] ? __pfx__copy_to_iter+0x10/0x10 [ 1483.686678][T19668] ? rcu_is_watching+0x15/0xb0 [ 1483.686703][T19668] ? trace_contention_end+0x39/0x120 [ 1483.686729][T19668] ? __mutex_lock+0x330/0xe80 [ 1483.686767][T19668] __skb_datagram_iter+0xf8/0x990 [ 1483.686792][T19668] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1483.686828][T19668] skb_copy_datagram_iter+0xc5/0x230 [ 1483.686857][T19668] unix_stream_read_actor+0x6c/0xb0 [ 1483.686890][T19668] unix_stream_read_generic+0xacb/0x2350 [ 1483.686954][T19668] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1483.686999][T19668] ? __lock_acquire+0xab9/0xd20 [ 1483.687031][T19668] unix_stream_recvmsg+0x15d/0x1b0 [ 1483.687064][T19668] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1483.687090][T19668] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1483.687121][T19668] ? __lock_acquire+0xab9/0xd20 [ 1483.687145][T19668] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1483.687165][T19668] ? security_socket_recvmsg+0x7e/0x2e0 [ 1483.687187][T19668] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1483.687216][T19668] sock_recvmsg+0x22c/0x270 [ 1483.687247][T19668] ____sys_recvmsg+0x1c9/0x460 [ 1483.687280][T19668] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1483.687323][T19668] ? import_iovec+0x74/0xa0 [ 1483.687356][T19668] ___sys_recvmsg+0x1b5/0x510 [ 1483.687384][T19668] ? __pfx____sys_recvmsg+0x10/0x10 [ 1483.687439][T19668] ? __fget_files+0x3a0/0x420 [ 1483.687478][T19668] do_recvmmsg+0x307/0x770 [ 1483.687518][T19668] ? __pfx_do_recvmmsg+0x10/0x10 [ 1483.687556][T19668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1483.687603][T19668] __x64_sys_recvmmsg+0x190/0x240 [ 1483.687630][T19668] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1483.687648][T19668] ? rcu_is_watching+0x15/0xb0 [ 1483.687677][T19668] ? do_syscall_64+0xbe/0x3b0 [ 1483.687706][T19668] do_syscall_64+0xfa/0x3b0 [ 1483.687728][T19668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.687751][T19668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.687772][T19668] ? clear_bhb_loop+0x60/0xb0 [ 1483.687797][T19668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.687818][T19668] RIP: 0033:0x7f9e2538ebe9 [ 1483.687838][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.687855][T19668] RSP: 002b:00007f9e235f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1483.687878][T19668] RAX: ffffffffffffffda RBX: 00007f9e255b5fa0 RCX: 00007f9e2538ebe9 [ 1483.687893][T19668] RDX: 0000000000000001 RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1483.687907][T19668] RBP: 00007f9e235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.687920][T19668] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.687933][T19668] R13: 00007f9e255b6038 R14: 00007f9e255b5fa0 R15: 00007ffd68b56258 [ 1483.687969][T19668] [ 1484.277267][T19665] input: syz0 as /devices/virtual/input/input64 [ 1484.618864][ T980] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input65 [ 1484.666906][ T980] usb 2-1: USB disconnect, device number 51 [ 1487.294158][T19719] trusted_key: encrypted_key: insufficient parameters specified [ 1487.388319][T19723] FAULT_INJECTION: forcing a failure. [ 1487.388319][T19723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1487.403754][T19723] CPU: 0 UID: 0 PID: 19723 Comm: syz.0.3545 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1487.403783][T19723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1487.403796][T19723] Call Trace: [ 1487.403805][T19723] [ 1487.403814][T19723] dump_stack_lvl+0x189/0x250 [ 1487.403843][T19723] ? __pfx____ratelimit+0x10/0x10 [ 1487.403865][T19723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.403886][T19723] ? __pfx__printk+0x10/0x10 [ 1487.403915][T19723] ? fs_reclaim_acquire+0x7d/0x100 [ 1487.403949][T19723] should_fail_ex+0x414/0x560 [ 1487.403976][T19723] prepare_alloc_pages+0x213/0x610 [ 1487.404009][T19723] __alloc_frozen_pages_noprof+0x123/0x370 [ 1487.404040][T19723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1487.404079][T19723] ? policy_nodemask+0x27c/0x720 [ 1487.404108][T19723] alloc_pages_mpol+0x232/0x4a0 [ 1487.404137][T19723] vma_alloc_folio_noprof+0xe4/0x200 [ 1487.404164][T19723] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1487.404202][T19723] folio_prealloc+0x30/0x180 [ 1487.404228][T19723] do_wp_page+0x1231/0x5800 [ 1487.404285][T19723] ? __pfx_do_wp_page+0x10/0x10 [ 1487.404312][T19723] ? do_raw_spin_lock+0x121/0x290 [ 1487.404343][T19723] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1487.404399][T19723] __handle_mm_fault+0x1144/0x5620 [ 1487.404450][T19723] ? __pfx___handle_mm_fault+0x10/0x10 [ 1487.404500][T19723] ? find_vma+0xe7/0x160 [ 1487.404520][T19723] ? __pfx_find_vma+0x10/0x10 [ 1487.404542][T19723] handle_mm_fault+0x2d5/0x7f0 [ 1487.404585][T19723] do_user_addr_fault+0x764/0x1390 [ 1487.404634][T19723] exc_page_fault+0x76/0xf0 [ 1487.404668][T19723] asm_exc_page_fault+0x26/0x30 [ 1487.404686][T19723] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1487.404715][T19723] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1487.404732][T19723] RSP: 0018:ffffc9000afb72b8 EFLAGS: 00050202 [ 1487.404751][T19723] RAX: ffffffff84b6e501 RBX: ffff88807d26a000 RCX: 0000000000000400 [ 1487.404767][T19723] RDX: 0000000000000000 RSI: ffff88807d26aac0 RDI: 0000200000002000 [ 1487.404781][T19723] RBP: ffffc9000afb7418 R08: ffff88807d26aebf R09: 1ffff1100fa4d5d7 [ 1487.404796][T19723] R10: dffffc0000000000 R11: ffffed100fa4d5d8 R12: 1ffff920015f6f9f [ 1487.404813][T19723] R13: 0000200000001540 R14: ffffc9000afb7d08 R15: 0000000000000ec0 [ 1487.404835][T19723] ? _copy_to_iter+0x1e1/0x16f0 [ 1487.404868][T19723] _copy_to_iter+0x24c/0x16f0 [ 1487.404892][T19723] ? __mutex_trylock_common+0x153/0x260 [ 1487.404928][T19723] ? __pfx__copy_to_iter+0x10/0x10 [ 1487.404950][T19723] ? rcu_is_watching+0x15/0xb0 [ 1487.404972][T19723] ? trace_contention_end+0x39/0x120 [ 1487.404998][T19723] ? __mutex_lock+0x330/0xe80 [ 1487.405034][T19723] __skb_datagram_iter+0xf8/0x990 [ 1487.405058][T19723] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1487.405090][T19723] skb_copy_datagram_iter+0xc5/0x230 [ 1487.405118][T19723] unix_stream_read_actor+0x6c/0xb0 [ 1487.405150][T19723] unix_stream_read_generic+0xacb/0x2350 [ 1487.405208][T19723] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1487.405250][T19723] ? __lock_acquire+0xab9/0xd20 [ 1487.405280][T19723] unix_stream_recvmsg+0x15d/0x1b0 [ 1487.405313][T19723] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1487.405340][T19723] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1487.405371][T19723] ? __lock_acquire+0xab9/0xd20 [ 1487.405396][T19723] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1487.405414][T19723] ? security_socket_recvmsg+0x7e/0x2e0 [ 1487.405435][T19723] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1487.405465][T19723] sock_recvmsg+0x22c/0x270 [ 1487.405494][T19723] ____sys_recvmsg+0x1c9/0x460 [ 1487.405527][T19723] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1487.405568][T19723] ? import_iovec+0x74/0xa0 [ 1487.405602][T19723] ___sys_recvmsg+0x1b5/0x510 [ 1487.405631][T19723] ? __pfx____sys_recvmsg+0x10/0x10 [ 1487.405693][T19723] ? __fget_files+0x3a0/0x420 [ 1487.405731][T19723] do_recvmmsg+0x307/0x770 [ 1487.405764][T19723] ? __pfx_do_recvmmsg+0x10/0x10 [ 1487.405801][T19723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1487.405847][T19723] __x64_sys_recvmmsg+0x190/0x240 [ 1487.405873][T19723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1487.405892][T19723] ? rcu_is_watching+0x15/0xb0 [ 1487.405921][T19723] ? do_syscall_64+0xbe/0x3b0 [ 1487.405949][T19723] do_syscall_64+0xfa/0x3b0 [ 1487.405971][T19723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1487.405992][T19723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.406012][T19723] ? clear_bhb_loop+0x60/0xb0 [ 1487.406038][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.406057][T19723] RIP: 0033:0x7fa55d78ebe9 [ 1487.406077][T19723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.406095][T19723] RSP: 002b:00007fa55e64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1487.406115][T19723] RAX: ffffffffffffffda RBX: 00007fa55d9b5fa0 RCX: 00007fa55d78ebe9 [ 1487.406130][T19723] RDX: 0000000000000001 RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1487.406143][T19723] RBP: 00007fa55e64d090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.406156][T19723] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.406169][T19723] R13: 00007fa55d9b6038 R14: 00007fa55d9b5fa0 R15: 00007ffff218ed58 [ 1487.406206][T19723] [ 1488.444277][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1488.533862][T19724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1488.638053][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.648556][ T9] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1488.658300][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.706177][ T9] usb 3-1: config 0 descriptor?? [ 1489.663122][ T9] petalynx 0003:18B1:0037.0027: item fetching failed at offset 0/2 [ 1489.712332][ T9] petalynx 0003:18B1:0037.0027: parse failed [ 1489.730116][ T9] petalynx 0003:18B1:0037.0027: probe with driver petalynx failed with error -22 [ 1491.170098][T19764] /dev/nullb0: Can't open blockdev [ 1491.191006][ T5917] usb 3-1: USB disconnect, device number 32 [ 1491.436469][T19776] FAULT_INJECTION: forcing a failure. [ 1491.436469][T19776] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1491.453328][T19776] CPU: 0 UID: 0 PID: 19776 Comm: syz.1.3559 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1491.453369][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1491.453382][T19776] Call Trace: [ 1491.453392][T19776] [ 1491.453402][T19776] dump_stack_lvl+0x189/0x250 [ 1491.453432][T19776] ? __pfx____ratelimit+0x10/0x10 [ 1491.453466][T19776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1491.453489][T19776] ? __pfx__printk+0x10/0x10 [ 1491.453516][T19776] ? __might_fault+0xb0/0x130 [ 1491.453553][T19776] should_fail_ex+0x414/0x560 [ 1491.453582][T19776] _copy_to_iter+0x1db/0x16f0 [ 1491.453609][T19776] ? __mutex_trylock_common+0x153/0x260 [ 1491.453647][T19776] ? __pfx__copy_to_iter+0x10/0x10 [ 1491.453668][T19776] ? rcu_is_watching+0x15/0xb0 [ 1491.453691][T19776] ? trace_contention_end+0x39/0x120 [ 1491.453716][T19776] ? __mutex_lock+0x330/0xe80 [ 1491.453750][T19776] __skb_datagram_iter+0x41a/0x990 [ 1491.453774][T19776] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1491.453807][T19776] skb_copy_datagram_iter+0xc5/0x230 [ 1491.453833][T19776] unix_stream_read_actor+0x6c/0xb0 [ 1491.453862][T19776] unix_stream_read_generic+0xacb/0x2350 [ 1491.453918][T19776] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1491.453958][T19776] ? __lock_acquire+0xab9/0xd20 [ 1491.453987][T19776] unix_stream_recvmsg+0x15d/0x1b0 [ 1491.454019][T19776] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1491.454047][T19776] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1491.454077][T19776] ? __lock_acquire+0xab9/0xd20 [ 1491.454100][T19776] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1491.454120][T19776] ? security_socket_recvmsg+0x7e/0x2e0 [ 1491.454140][T19776] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1491.454168][T19776] sock_recvmsg+0x22c/0x270 [ 1491.454199][T19776] ____sys_recvmsg+0x1c9/0x460 [ 1491.454232][T19776] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1491.454273][T19776] ? import_iovec+0x74/0xa0 [ 1491.454306][T19776] ___sys_recvmsg+0x1b5/0x510 [ 1491.454334][T19776] ? __pfx____sys_recvmsg+0x10/0x10 [ 1491.454387][T19776] ? __fget_files+0x3a0/0x420 [ 1491.454425][T19776] do_recvmmsg+0x307/0x770 [ 1491.454466][T19776] ? __pfx_do_recvmmsg+0x10/0x10 [ 1491.454503][T19776] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1491.454550][T19776] __x64_sys_recvmmsg+0x190/0x240 [ 1491.454575][T19776] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1491.454593][T19776] ? rcu_is_watching+0x15/0xb0 [ 1491.454622][T19776] ? do_syscall_64+0xbe/0x3b0 [ 1491.454652][T19776] do_syscall_64+0xfa/0x3b0 [ 1491.454672][T19776] ? lockdep_hardirqs_on+0x9c/0x150 [ 1491.454694][T19776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.454715][T19776] ? clear_bhb_loop+0x60/0xb0 [ 1491.454742][T19776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.454761][T19776] RIP: 0033:0x7f53ecd8ebe9 [ 1491.454781][T19776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.454799][T19776] RSP: 002b:00007f53edb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1491.454823][T19776] RAX: ffffffffffffffda RBX: 00007f53ecfb5fa0 RCX: 00007f53ecd8ebe9 [ 1491.454839][T19776] RDX: 0000000000000001 RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1491.454853][T19776] RBP: 00007f53edb32090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.454866][T19776] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.454880][T19776] R13: 00007f53ecfb6038 R14: 00007f53ecfb5fa0 R15: 00007fff1f1e19c8 [ 1491.454917][T19776] [ 1491.927320][T16504] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1493.074596][T16504] usb 6-1: device descriptor read/64, error -71 [ 1493.351256][T16504] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1493.509491][T16504] usb 6-1: device descriptor read/64, error -71 [ 1493.669214][T16504] usb usb6-port1: attempt power cycle [ 1494.178991][T16504] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1494.223369][T16504] usb 6-1: device descriptor read/8, error -71 [ 1494.492203][T16504] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1494.937107][T16504] usb 6-1: device descriptor read/8, error -71 [ 1495.071158][T16504] usb usb6-port1: unable to enumerate USB device [ 1495.111807][T19808] /dev/nullb0: Can't open blockdev [ 1495.485720][T16504] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1495.528114][T19814] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 1495.537002][T19815] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 1495.546724][T19814] veth1_macvtap: left promiscuous mode [ 1495.725266][T16504] usb 6-1: Using ep0 maxpacket: 16 [ 1495.733629][T16504] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1495.733797][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1495.760450][T16504] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1495.780742][T16504] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=8f.26 [ 1495.802989][T16504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.837293][T16504] usb 6-1: Product: syz [ 1495.847112][T16504] usb 6-1: Manufacturer: syz [ 1495.862790][T16504] usb 6-1: SerialNumber: syz [ 1496.044509][T19820] FAULT_INJECTION: forcing a failure. [ 1496.044509][T19820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.046207][ T5971] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1496.062544][T19820] CPU: 0 UID: 0 PID: 19820 Comm: syz.2.3573 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1496.062574][T19820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.062586][T19820] Call Trace: [ 1496.062594][T19820] [ 1496.062604][T19820] dump_stack_lvl+0x189/0x250 [ 1496.062632][T19820] ? __pfx____ratelimit+0x10/0x10 [ 1496.062653][T19820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.062674][T19820] ? __pfx__printk+0x10/0x10 [ 1496.062711][T19820] should_fail_ex+0x414/0x560 [ 1496.062737][T19820] _copy_to_user+0x31/0xb0 [ 1496.062774][T19820] simple_read_from_buffer+0xe1/0x170 [ 1496.062799][T19820] proc_fail_nth_read+0x1df/0x250 [ 1496.062826][T19820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1496.062853][T19820] ? rw_verify_area+0x258/0x650 [ 1496.062879][T19820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1496.062902][T19820] vfs_read+0x200/0x980 [ 1496.062935][T19820] ? __pfx___mutex_lock+0x10/0x10 [ 1496.062957][T19820] ? __pfx_vfs_read+0x10/0x10 [ 1496.062986][T19820] ? __fget_files+0x2a/0x420 [ 1496.063011][T19820] ? __fget_files+0x3a0/0x420 [ 1496.063030][T19820] ? __fget_files+0x2a/0x420 [ 1496.063060][T19820] ksys_read+0x145/0x250 [ 1496.063080][T19820] ? __pfx_ksys_read+0x10/0x10 [ 1496.063094][T19820] ? rcu_is_watching+0x15/0xb0 [ 1496.063120][T19820] ? do_syscall_64+0xbe/0x3b0 [ 1496.063145][T19820] do_syscall_64+0xfa/0x3b0 [ 1496.063164][T19820] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.063184][T19820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.063202][T19820] ? clear_bhb_loop+0x60/0xb0 [ 1496.063224][T19820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.063242][T19820] RIP: 0033:0x7f41baf8d5fc [ 1496.063260][T19820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1496.063275][T19820] RSP: 002b:00007f41b91f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1496.063296][T19820] RAX: ffffffffffffffda RBX: 00007f41bb1b5fa0 RCX: 00007f41baf8d5fc [ 1496.063310][T19820] RDX: 000000000000000f RSI: 00007f41b91f60a0 RDI: 0000000000000005 [ 1496.063321][T19820] RBP: 00007f41b91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.063333][T19820] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.063345][T19820] R13: 00007f41bb1b6038 R14: 00007f41bb1b5fa0 R15: 00007ffcb2e2e678 [ 1496.063385][T19820] [ 1497.308910][T16504] usb 6-1: USB disconnect, device number 12 [ 1497.579998][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 1497.594566][ T5971] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1497.604351][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1497.612946][ T5971] usb 2-1: Product: syz [ 1497.617554][ T5971] usb 2-1: Manufacturer: syz [ 1497.623730][ T5971] usb 2-1: SerialNumber: syz [ 1497.673102][ T5971] usb 2-1: config 0 descriptor?? [ 1497.932061][ T5971] usb 2-1: USB disconnect, device number 52 [ 1501.988112][T19868] vxcan1 speed is unknown, defaulting to 1000 [ 1503.131656][ T30] audit: type=1804 audit(1755481100.064:678): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3586" name="/newroot/104/bus" dev="tmpfs" ino=578 res=1 errno=0 [ 1503.315852][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1503.335431][T19879] netlink: 'syz.1.3588': attribute type 30 has an invalid length. [ 1503.391098][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1503.409327][T19868] lo speed is unknown, defaulting to 1000 [ 1503.417411][T19879] netlink: 'syz.1.3588': attribute type 30 has an invalid length. [ 1503.612529][T19885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1504.163798][T19892] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3592'. [ 1504.393720][T19894] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1504.677845][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1505.777239][ T5980] Bluetooth: Error in BCSP hdr checksum [ 1507.523668][T17613] Bluetooth: hci3: command 0x1003 tx timeout [ 1508.486952][T10022] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1509.447481][T19939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1509.467378][ T980] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1509.662733][ T980] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1510.106815][ T980] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1510.135634][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1510.181453][ T980] usb 3-1: Product: syz [ 1510.185698][ T980] usb 3-1: Manufacturer: syz [ 1510.204144][ T980] usb 3-1: SerialNumber: syz [ 1510.236258][ T980] usb 3-1: config 0 descriptor?? [ 1510.275724][ T980] ims_pcu 3-1:0.0: Zero length descriptor [ 1510.287803][ T980] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1510.477785][ T980] usb 3-1: USB disconnect, device number 33 [ 1510.902782][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1512.894288][T14396] Bluetooth: hci5: command 0x0405 tx timeout [ 1513.752131][T19966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1513.776669][T19966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1513.777499][T19973] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1513.801375][T19966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1513.820359][T19966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1513.976348][ T980] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1514.153878][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1514.174429][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.197535][ T980] usb 2-1: config 0 descriptor?? [ 1514.217291][ T980] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1514.484474][T19975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.498329][T19975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.238556][T20001] loop6: detected capacity change from 0 to 63 [ 1515.437695][T20001] buffer_io_error: 6 callbacks suppressed [ 1515.437718][T20001] Buffer I/O error on dev loop6, logical block 0, async page read [ 1515.455075][T20001] Buffer I/O error on dev loop6, logical block 1, async page read [ 1515.465766][T20001] Buffer I/O error on dev loop6, logical block 2, async page read [ 1515.477158][T20001] Buffer I/O error on dev loop6, logical block 3, async page read [ 1515.493842][T20001] Buffer I/O error on dev loop6, logical block 0, async page read [ 1515.505238][T20001] Buffer I/O error on dev loop6, logical block 1, async page read [ 1515.515600][T20001] Buffer I/O error on dev loop6, logical block 2, async page read [ 1515.525460][T20001] Buffer I/O error on dev loop6, logical block 3, async page read [ 1515.536336][T20001] Buffer I/O error on dev loop6, logical block 0, async page read [ 1515.547953][T20001] Buffer I/O error on dev loop6, logical block 1, async page read [ 1515.849759][T20009] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1516.029805][ T980] gp8psk: usb out operation failed. [ 1516.125336][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1516.547386][ T980] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1516.678639][ T980] usb 2-1: USB disconnect, device number 53 [ 1517.092399][T16504] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1517.278441][T16504] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1517.353460][T16504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.556627][T16504] usb 2-1: config 0 descriptor?? [ 1517.652715][T16504] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1517.806324][T16504] gspca_spca508: reg_read err -32 [ 1517.864406][T14396] Bluetooth: hci6: command 0x0406 tx timeout [ 1518.553315][T16504] gspca_spca508: reg_read err -110 [ 1518.932597][T16504] gspca_spca508: reg_read err -32 [ 1518.945987][T16504] gspca_spca508: reg_read err -32 [ 1518.951506][T16504] gspca_spca508: reg write: error -32 [ 1518.964462][T16504] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 1518.989785][T16504] usb 2-1: USB disconnect, device number 54 [ 1519.286405][T20049] bridge1: entered promiscuous mode [ 1520.089331][ T30] audit: type=1326 audit(1755481117.000:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20054 comm="syz.7.3632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2538ebe9 code=0x0 [ 1521.077984][ T5886] kworker/1:3 (5886) used greatest stack depth: 15496 bytes left [ 1523.375692][T20108] overlayfs: workdir and upperdir must be separate subtrees [ 1523.640801][T20109] binder: Unknown parameter 'fowner' [ 1525.814923][T20138] /dev/nullb0: Can't open blockdev [ 1528.300211][T20164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.313493][T20164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.682729][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3662'. [ 1529.699198][T20195] overlayfs: failed to resolve './file0': -2 [ 1529.705932][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3668'. [ 1530.916315][ T30] audit: type=1326 audit(1755481127.103:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20198 comm="syz.1.3669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53ecd8ebe9 code=0x0 [ 1532.553261][ T5917] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1532.564700][T20226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1532.610804][T20226] netlink: 'syz.0.3673': attribute type 3 has an invalid length. [ 1532.738281][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 1532.740077][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.742027][ T5917] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1532.742047][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.742060][ T5917] usb 2-1: Product: syz [ 1532.742070][ T5917] usb 2-1: Manufacturer: syz [ 1532.742080][ T5917] usb 2-1: SerialNumber: syz [ 1532.798386][ T5917] usb 2-1: config 0 descriptor?? [ 1532.838023][T17747] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1532.865600][ T5917] cdc_ether 2-1:0.0: skipping garbage [ 1532.989113][T17747] usb 3-1: device descriptor read/64, error -71 [ 1533.595394][ T5917] usb 2-1: bad CDC descriptors [ 1533.606798][ T5917] usb 2-1: unsupported MDLM descriptors [ 1533.612592][T17747] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1533.630109][ T5917] usb 2-1: USB disconnect, device number 55 [ 1533.749308][T17747] usb 3-1: device descriptor read/64, error -71 [ 1533.931436][T17747] usb usb3-port1: attempt power cycle [ 1534.610866][T17747] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1534.644444][T17747] usb 3-1: device descriptor read/8, error -71 [ 1534.808309][T20261] vxcan1 speed is unknown, defaulting to 1000 [ 1534.941606][T20261] lo speed is unknown, defaulting to 1000 [ 1535.251399][T17747] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1535.302550][T17747] usb 3-1: device descriptor read/8, error -71 [ 1535.436367][T17747] usb usb3-port1: unable to enumerate USB device [ 1535.742990][ T30] audit: type=1800 audit(1755481132.625:681): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3683" name="bus" dev="ramfs" ino=80547 res=0 errno=0 [ 1536.115005][T20280] ip6tnl1: entered promiscuous mode [ 1536.154305][T20284] tmpfs: Unknown parameter 'roo' [ 1537.844125][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3691'. [ 1539.086601][T17747] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1539.377802][T17747] usb 6-1: Using ep0 maxpacket: 16 [ 1539.403581][T20316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3696'. [ 1539.427304][ T5971] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1539.441406][T17747] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1539.458199][T17747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1539.488468][T17747] usb 6-1: SerialNumber: syz [ 1539.496461][T17747] usb 6-1: config 0 descriptor?? [ 1539.508932][T17747] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1539.518050][T17747] usb 6-1: Detected FT232A [ 1539.524047][T17747] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1539.573418][T20323] tipc: Enabled bearer , priority 0 [ 1539.603061][T20323] syzkaller0: entered promiscuous mode [ 1539.619679][ T5971] usb 3-1: config 0 has no interfaces? [ 1539.625704][T20323] syzkaller0: entered allmulticast mode [ 1539.650683][ T5971] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1539.687599][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.711905][ T5971] usb 3-1: Product: syz [ 1539.724833][ T5971] usb 3-1: Manufacturer: syz [ 1539.729653][T16504] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1539.749003][ T5971] usb 3-1: SerialNumber: syz [ 1539.779103][ T5971] usb 3-1: config 0 descriptor?? [ 1539.974926][T16504] usb 2-1: Using ep0 maxpacket: 32 [ 1539.984288][T16504] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 1540.005668][T16504] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1540.040732][T16504] usb 2-1: Product: syz [ 1540.805967][T20322] tipc: Resetting bearer [ 1540.813085][T16504] usb 2-1: Manufacturer: syz [ 1540.826460][T16504] usb 2-1: SerialNumber: syz [ 1540.847640][T16504] usb 2-1: config 0 descriptor?? [ 1540.884534][T16504] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1540.926105][T20322] tipc: Disabling bearer [ 1540.936697][T16504] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1541.191452][T20305] vxcan1 speed is unknown, defaulting to 1000 [ 1541.942421][T16504] usb 2-1: USB disconnect, device number 56 [ 1542.155734][ T5971] usb 6-1: USB disconnect, device number 13 [ 1542.268849][ T5971] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1542.345190][ T5971] ftdi_sio 6-1:0.0: device disconnected [ 1542.358813][T20344] program syz.1.3703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.414044][ T30] audit: type=1326 audit(1755481139.296:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.1.3703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53ecd8ebe9 code=0x0 [ 1542.941796][T20305] lo speed is unknown, defaulting to 1000 [ 1543.292568][T20356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.307426][T20356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.492408][ T5971] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1543.682164][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 1543.691631][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1543.739590][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1543.757604][ T5971] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1543.772593][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.802668][ T5971] usb 2-1: Product: syz [ 1543.807065][ T5971] usb 2-1: Manufacturer: syz [ 1543.811802][ T5971] usb 2-1: SerialNumber: syz [ 1543.841576][ T5971] usb 2-1: config 0 descriptor?? [ 1543.868505][ T5971] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1543.878245][ T5971] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1544.145134][ T5971] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1544.255690][ T5971] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1544.591598][ T5971] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1544.622871][ T5971] em28xx 2-1:0.0: No AC97 audio processor [ 1544.744168][ T5971] usb 2-1: USB disconnect, device number 57 [ 1544.765818][ T5971] em28xx 2-1:0.0: Disconnecting em28xx [ 1544.789699][ T5971] em28xx 2-1:0.0: Freeing device [ 1545.442071][ T5971] usb 3-1: USB disconnect, device number 38 [ 1545.578656][T20389] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1545.587992][T20389] /dev/nullb0: Can't open blockdev [ 1547.340392][T20406] random: crng reseeded on system resumption [ 1547.468261][ T30] audit: type=1326 audit(1755481144.350:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20408 comm="syz.0.3720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa55d78ebe9 code=0x0 [ 1549.832500][T20437] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3726'. [ 1550.319785][T20443] binder: 20442:20443 ioctl c0306201 200000000100 returned -14 [ 1550.440509][ T5971] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1550.633675][ T5971] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1550.634015][T20456] loop2: detected capacity change from 0 to 7 [ 1550.652797][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.671174][T20456] Dev loop2: unable to read RDB block 7 [ 1550.676143][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.687125][T20456] loop2: AHDI p1 p2 p3 [ 1550.697322][T20456] loop2: partition table partially beyond EOD, truncated [ 1550.707170][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1550.712321][T20456] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1550.756545][ T5971] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1550.768381][ T5971] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1550.791081][T20456] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1550.799311][ T5971] usb 3-1: Manufacturer: syz [ 1550.814864][ T5971] usb 3-1: config 0 descriptor?? [ 1551.864862][ T5971] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 1551.889078][ T5971] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1552.068490][ T5971] usb 3-1: USB disconnect, device number 39 [ 1552.322700][T20477] 9pnet_fd: Insufficient options for proto=fd [ 1552.332946][T20477] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1552.342007][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1553.449680][T20490] gtp0: entered promiscuous mode [ 1553.464053][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'. [ 1554.074076][T17747] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1554.243021][T17747] usb 3-1: config 65 has an invalid interface number: 95 but max is 0 [ 1554.275550][T17747] usb 3-1: config 65 has no interface number 0 [ 1554.288866][T17747] usb 3-1: string descriptor 0 read error: -22 [ 1554.305960][T17747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 1554.343132][T17747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.387394][T17747] usbtest 3-1:65.95: Linux gadget zero [ 1554.402030][T17747] usbtest 3-1:65.95: low-speed {control in/out} tests (+alt) [ 1554.635043][ T5971] usb 3-1: USB disconnect, device number 40 [ 1556.019694][ T5971] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1556.084409][T20521] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3749'. [ 1556.950014][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.006981][ T5971] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1557.057076][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.126839][ T5971] usb 3-1: config 0 descriptor?? [ 1557.963272][T20510] vcan0: entered promiscuous mode [ 1558.069004][T20510] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1558.102015][ T980] usb 3-1: USB disconnect, device number 41 [ 1558.543447][ T5971] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1559.029329][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.146868][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.167381][ T5971] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1559.229159][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.283033][ T5971] usb 6-1: config 0 descriptor?? [ 1559.639685][T17747] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1559.733616][ T5971] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x2 [ 1559.754453][ T5971] pyra 0003:1E7D:2CF6.002A: unknown global tag 0xc [ 1559.769757][ T5971] pyra 0003:1E7D:2CF6.002A: item 0 2 1 12 parsing failed [ 1559.787954][ T5971] pyra 0003:1E7D:2CF6.002A: parse failed [ 1559.797272][ T5971] pyra 0003:1E7D:2CF6.002A: probe with driver pyra failed with error -22 [ 1559.813439][T17747] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1559.828517][T17747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.863871][T17747] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1559.879903][T17747] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1559.887918][T17747] usb 3-1: Manufacturer: syz [ 1559.913110][T17747] usb 3-1: config 0 descriptor?? [ 1559.945628][T20547] program syz.5.3754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1560.060077][T17747] rc_core: IR keymap rc-hauppauge not found [ 1560.066064][T17747] Registered IR keymap rc-empty [ 1560.088725][T17747] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1560.108329][T17747] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input66 [ 1560.130587][T20570] loop6: detected capacity change from 0 to 7 [ 1560.147273][T20570] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1560.159907][T20570] loop6: p1 start 1932489829 is beyond EOD, truncated [ 1560.176172][T20570] loop6: p2 size 2075328512 extends beyond EOD, truncated [ 1560.447867][T20570] loop6: p3 start 4139071492 is beyond EOD, truncated [ 1560.509518][T20570] loop6: p4 start 1985226257 is beyond EOD, truncated [ 1560.517467][T20570] loop6: p5 start 3796309757 is beyond EOD, truncated [ 1560.525791][T20570] loop6: p6 start 98621423 is beyond EOD, truncated [ 1560.533382][T20570] loop6: p7 start 4217418534 is beyond EOD, truncated [ 1560.834863][T17747] usb 6-1: USB disconnect, device number 14 [ 1560.857681][T20575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3760'. [ 1561.333035][T16504] usb 3-1: USB disconnect, device number 42 [ 1561.372405][T17747] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1561.643899][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3763'. [ 1561.787347][T17747] usb 2-1: Using ep0 maxpacket: 8 [ 1561.910300][T17747] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1561.929140][T17747] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1561.969229][T17747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1562.012335][T17747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1562.029015][T17747] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1562.062585][T17747] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1562.098550][T17747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.359074][T17747] usb 2-1: GET_CAPABILITIES returned 0 [ 1562.376564][T17747] usbtmc 2-1:16.0: can't read capabilities [ 1563.292968][T14396] Bluetooth: hci5: command 0x0405 tx timeout [ 1563.436258][T16504] usb 2-1: USB disconnect, device number 58 [ 1565.005081][T20617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1566.010596][T20622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3775'. [ 1566.540149][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1566.570953][T20630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3866669722 (15466678888 ns) > initial count (8293809872 ns). Using initial count to start timer. [ 1566.615830][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1566.629572][T20630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1566.766387][ T980] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1566.786622][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1566.844041][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1566.945186][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.109778][ T10] usb 3-1: config 0 descriptor?? [ 1567.120639][ T980] usb 6-1: config 0 has no interfaces? [ 1567.296526][ T980] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1567.305953][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.603006][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1567.624139][ T980] usb 6-1: Product: syz [ 1567.653722][ T980] usb 6-1: Manufacturer: syz [ 1567.672821][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1567.700179][ T980] usb 6-1: SerialNumber: syz [ 1567.757523][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1567.766458][ T980] usb 6-1: config 0 descriptor?? [ 1567.808717][ T10] usb 3-1: media controller created [ 1567.889865][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.951184][ T10] az6027: usb out operation failed. (-71) [ 1568.047043][ T10] az6027: usb out operation failed. (-71) [ 1568.064344][ T10] stb0899_attach: Driver disabled by Kconfig [ 1568.073434][ T10] az6027: no front-end attached [ 1568.073434][ T10] [ 1568.083350][ T10] az6027: usb out operation failed. (-71) [ 1568.093294][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1568.105019][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67 [ 1568.128323][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1568.153989][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1568.172442][T20631] vxcan1 speed is unknown, defaulting to 1000 [ 1568.184000][ T10] usb 3-1: USB disconnect, device number 43 [ 1568.281568][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1570.365136][T20631] lo speed is unknown, defaulting to 1000 [ 1571.399749][T16504] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1571.559962][T16504] usb 2-1: Using ep0 maxpacket: 32 [ 1571.578953][T16504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.607895][T16504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.673130][T16504] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1571.689208][ T5971] usb 6-1: USB disconnect, device number 15 [ 1571.757389][T16504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.867364][T16504] usb 2-1: config 0 descriptor?? [ 1572.376558][T16504] ft260 0003:0403:6030.002B: unknown main item tag 0x7 [ 1572.499373][T20709] vxcan1 speed is unknown, defaulting to 1000 [ 1572.542920][T16504] ft260 0003:0403:6030.002B: chip code: 6424 8183 [ 1572.705777][T20715] tipc: Enabling of bearer rejected, failed to enable media [ 1572.753811][T16504] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1572.955067][T16504] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup [ 1572.979589][T16504] ft260 0003:0403:6030.002B: failed to retrieve status: -32 [ 1572.994655][T20709] lo speed is unknown, defaulting to 1000 [ 1573.217453][T20695] i2c i2c-1: adapter quirk: too many messages (addr 0x0003, size 0, read) [ 1573.243599][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.265278][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.290676][T16504] usb 2-1: USB disconnect, device number 59 [ 1573.355911][T20728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1573.435413][T20728] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1574.090686][ T5971] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1574.524814][ T5971] usb 3-1: device descriptor read/64, error -71 [ 1574.933939][ T5971] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1575.122784][ T5971] usb 3-1: device descriptor read/64, error -71 [ 1575.325360][ T5971] usb usb3-port1: attempt power cycle [ 1575.346707][T20748] netlink: 552 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1575.390011][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1575.477500][T20748] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1575.783264][ T5971] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1575.829362][ T5971] usb 3-1: device descriptor read/8, error -71 [ 1576.093536][ T5971] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1576.139186][ T5971] usb 3-1: device descriptor read/8, error -71 [ 1576.214374][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 1576.372800][ T5971] usb usb3-port1: unable to enumerate USB device [ 1578.224042][T20803] 9pnet_virtio: no channels available for device syz [ 1580.510672][T20828] netlink: 'syz.1.3821': attribute type 3 has an invalid length. [ 1581.762652][T20840] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1581.912900][ T30] audit: type=1326 audit(1755481178.760:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20838 comm="syz.0.3824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa55d78ebe9 code=0x0 [ 1582.349082][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1583.208434][ T5917] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1583.328290][T16155] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1583.368743][ T5917] usb 6-1: device descriptor read/64, error -71 [ 1583.565190][T16155] usb 2-1: config 0 has no interfaces? [ 1583.648338][T16155] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1583.682584][ T5917] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1583.743472][T16155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.592045][T16155] usb 2-1: Product: syz [ 1584.604607][T16155] usb 2-1: Manufacturer: syz [ 1584.629257][ T5917] usb 6-1: device descriptor read/64, error -71 [ 1584.679388][T16155] usb 2-1: SerialNumber: syz [ 1584.698024][T16155] usb 2-1: config 0 descriptor?? [ 1584.731033][T20884] uprobe: syz.2.3837:20884 failed to unregister, leaking uprobe [ 1584.769950][ T5917] usb usb6-port1: attempt power cycle [ 1585.359558][ T5917] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1585.403750][ T5917] usb 6-1: device descriptor read/8, error -71 [ 1585.669906][ T5917] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1585.766641][T20898] vxcan1 speed is unknown, defaulting to 1000 [ 1585.794466][ T5917] usb 6-1: device descriptor read/8, error -71 [ 1585.910205][ T5917] usb usb6-port1: unable to enumerate USB device [ 1587.338579][T20898] lo speed is unknown, defaulting to 1000 [ 1587.650932][ T5917] Process accounting resumed [ 1588.816642][T20949] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3854'. [ 1589.200756][T20958] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3855'. [ 1589.576583][T20962] sp0: Synchronizing with TNC [ 1590.219896][ T10] usb 2-1: USB disconnect, device number 60 [ 1591.943704][T16155] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1592.114020][T16155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.146282][T16155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.166720][T16155] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1592.198015][T16155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.224732][T16155] usb 2-1: config 0 descriptor?? [ 1592.644253][T20995] netlink: 'syz.1.3863': attribute type 7 has an invalid length. [ 1592.703547][T16155] kye 0003:0458:0153.002C: unknown main item tag 0x3 [ 1592.741522][T16155] kye 0003:0458:0153.002C: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0 [ 1592.895819][T16155] usb 2-1: USB disconnect, device number 61 [ 1593.015691][ T980] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1593.103545][T21020] ip6erspan0: entered promiscuous mode [ 1593.216659][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.246974][ T980] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1593.294635][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1593.344953][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1593.371453][T21026] binder: 21025:21026 ioctl 400c620e 200000000000 returned -22 [ 1593.394573][T21026] binder: 21025:21026 ioctl f501 0 returned -22 [ 1593.405734][T21022] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1593.423365][ T980] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1593.444850][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.461223][ T980] usb 6-1: Product: syz [ 1593.471221][ T980] usb 6-1: Manufacturer: syz [ 1593.507411][T21022] kvm: pic: non byte read [ 1593.519162][ T980] usb 6-1: SerialNumber: syz [ 1593.544155][T21022] kvm: pic: non byte read [ 1593.571414][ T980] usb 6-1: config 0 descriptor?? [ 1593.578423][T21022] kvm: pic: non byte read [ 1593.587766][ T980] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1593.601272][T21022] kvm: pic: level sensitive irq not supported [ 1593.601588][T21022] kvm: pic: non byte read [ 1593.619497][ T980] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1593.664898][T16155] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1593.676181][ T980] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1593.811093][ T980] usb 6-1: USB disconnect, device number 20 [ 1593.842099][ T980] garmin_gps 6-1:0.0: device disconnected [ 1593.844553][T16155] usb 3-1: Using ep0 maxpacket: 32 [ 1593.858850][T16155] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.881161][T16155] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1593.914641][T16155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.962804][T16155] usb 3-1: Product: syz [ 1594.005169][T16155] usb 3-1: Manufacturer: syz [ 1594.009943][T16155] usb 3-1: SerialNumber: syz [ 1594.025568][T21041] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1594.058202][T16155] usb 3-1: config 0 descriptor?? [ 1594.102833][T16155] cdc_ether 3-1:0.0: skipping garbage [ 1594.120016][T16155] usb 3-1: bad CDC descriptors [ 1594.136928][T16155] usb 3-1: unsupported MDLM descriptors [ 1594.308611][T16155] usb 3-1: USB disconnect, device number 48 [ 1594.513012][T21052] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1594.544364][T21048] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1595.926176][T21074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3888'. [ 1596.085914][T21074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3888'. [ 1596.880342][T21074] team0: entered promiscuous mode [ 1596.898636][T21074] team0: left promiscuous mode [ 1597.111046][ T30] audit: type=1326 audit(1755481193.951:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21088 comm="syz.1.3892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53ecd8ebe9 code=0x0 [ 1597.156577][ T980] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1597.317021][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 1597.343281][ T980] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1597.366957][ T980] usb 3-1: config 0 has no interface number 0 [ 1597.388004][ T980] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1597.406559][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.435056][ T980] usb 3-1: Product: syz [ 1597.449715][ T980] usb 3-1: Manufacturer: syz [ 1597.454399][ T980] usb 3-1: SerialNumber: syz [ 1597.510701][ T980] usb 3-1: config 0 descriptor?? [ 1597.522366][ T980] smsc95xx v2.0.0 [ 1598.537657][ T980] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1598.569988][ T980] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1598.757972][ T980] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1598.838156][ T980] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1599.363479][T16155] usb 3-1: USB disconnect, device number 49 [ 1600.000645][ T30] audit: type=1326 audit(1755481196.839:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21142 comm="syz.5.3909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e078ebe9 code=0x0 [ 1600.569559][T21152] /dev/nullb0: Can't open blockdev [ 1600.738360][T21147] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1601.178618][T21147] usb 2-1: Using ep0 maxpacket: 32 [ 1601.194531][T21147] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1601.221874][T21147] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1601.238253][T21147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.256770][T21147] usb 2-1: Product: syz [ 1601.267139][T21147] usb 2-1: Manufacturer: syz [ 1601.278061][T21147] usb 2-1: SerialNumber: syz [ 1601.299303][T21147] usb 2-1: config 0 descriptor?? [ 1601.306706][T21148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1601.340785][T21147] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 1602.146139][ T980] usb 2-1: USB disconnect, device number 63 [ 1602.146243][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1602.618926][T21178] tmpfs: Unknown parameter 'WƆ\ ]UF}C:CKWck7Yf+.Ip5' [ 1603.424406][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1603.599642][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1603.629393][ T9] usb 6-1: config 8 has an invalid interface number: 203 but max is 0 [ 1603.682190][ T9] usb 6-1: config 8 has no interface number 0 [ 1603.719460][ T9] usb 6-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1603.772279][ T9] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1603.825806][ T9] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 1603.872427][ T9] usb 6-1: config 8 interface 203 has no altsetting 0 [ 1603.905677][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1603.942236][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.975489][ T9] usb 6-1: Product: syz [ 1603.985235][ T9] usb 6-1: Manufacturer: syz [ 1603.996312][ T9] usb 6-1: SerialNumber: syz [ 1604.025103][T21176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1604.032859][T21176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1604.053750][T21200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1604.825443][T21195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.399996][ C0] port100 6-1:8.203: NFC: Urb failure (status -71) [ 1606.201282][ C0] port100 6-1:8.203: NFC: Urb failure (status -71) [ 1606.220833][ T9] port100 6-1:8.203: NFC: Could not get supported command types [ 1606.269008][ T9] usb 6-1: USB disconnect, device number 21 [ 1607.591645][ T1210] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1607.789813][ T1210] usb 3-1: device descriptor read/64, error -71 [ 1608.131857][ T1210] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1608.585282][ T1210] usb 3-1: device descriptor read/64, error -71 [ 1608.619565][T21240] sctp: [Deprecated]: syz.5.3934 (pid 21240) Use of int in maxseg socket option. [ 1608.619565][T21240] Use struct sctp_assoc_value instead [ 1608.688165][T21242] openvswitch: netlink: Message has 8 unknown bytes. [ 1609.763627][ T1210] usb usb3-port1: attempt power cycle [ 1609.862971][T21251] input: syz0 as /devices/virtual/input/input70 [ 1610.575028][T21262] sctp: [Deprecated]: syz.0.3941 (pid 21262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1610.575028][T21262] Use struct sctp_sack_info instead [ 1611.034362][T21288] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1611.044402][T21288] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1611.054523][T21289] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1611.066784][T21289] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1612.728318][T21332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.373867][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1613.391877][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1613.546221][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1613.556712][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1613.582173][ T10] usb 3-1: config 31 has an invalid interface number: 116 but max is 0 [ 1613.596040][ T10] usb 3-1: config 31 has no interface number 0 [ 1613.602362][ T10] usb 3-1: config 31 interface 116 has no altsetting 0 [ 1613.614013][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=ac.f7 [ 1613.623167][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.647750][ T10] usb 3-1: Product: syz [ 1613.652001][ T10] usb 3-1: Manufacturer: syz [ 1613.659582][ T10] usb 3-1: SerialNumber: syz [ 1613.951541][T21371] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20001 [ 1614.180223][T21371] sp0: Synchronizing with TNC [ 1614.295859][T21372] sp0: Found TNC [ 1614.420208][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 1614.427578][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 1614.433865][ T10] gspca_sn9c20x: Device initialization failed [ 1614.440118][ T10] gspca_sn9c20x 3-1:31.116: probe with driver gspca_sn9c20x failed with error -71 [ 1614.498099][ T10] usb 3-1: USB disconnect, device number 53 [ 1615.425113][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3973'. [ 1615.774927][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1616.035775][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1616.050370][ T10] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1616.059963][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.071027][ T10] usb 3-1: config 0 has no interface number 0 [ 1616.077563][ T10] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1616.091428][ T10] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1616.108061][ T10] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1616.120114][ T10] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1616.130897][ T10] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1616.141635][ T10] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1616.155722][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1616.165033][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.235076][ T5917] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1616.293808][ T10] usb 3-1: config 0 descriptor?? [ 1616.315987][T21381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1616.362293][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.552038][ T5917] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1616.572766][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.592104][ T10] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 1616.592195][ T5917] usb 6-1: Product: syz [ 1616.612926][ T10] usb 3-1: USB disconnect, device number 54 [ 1616.625191][ T5917] usb 6-1: Manufacturer: syz [ 1616.629861][ T5917] usb 6-1: SerialNumber: syz [ 1616.646151][ T5917] usb 6-1: config 0 descriptor?? [ 1616.835412][T21407] binfmt_misc: register: failed to install interpreter file ./file0 [ 1616.996477][T21394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.070657][T21394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.203831][T21394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.230150][T21394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.241293][T21394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.253601][T21394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.276851][T21394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.322048][T21394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.334104][T21394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.350446][T21394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.392114][ T5917] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1617.399664][ T5917] f81604 6-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1617.410552][ T5917] f81604 6-1:0.0: probe with driver f81604 failed with error -121 [ 1617.446360][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1618.326760][ T5917] usb 6-1: USB disconnect, device number 22 [ 1618.625474][T21437] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1618.859591][ T5917] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1619.777064][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1619.797838][ T5917] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1619.816659][ T5917] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1619.833611][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1619.860323][ T5917] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1619.882437][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.892376][ T5917] usb 6-1: Product: syz [ 1619.896720][ T5917] usb 6-1: Manufacturer: syz [ 1619.901368][ T5917] usb 6-1: SerialNumber: syz [ 1619.910266][ T5917] usb 6-1: config 0 descriptor?? [ 1621.294774][T21466] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1621.303954][T21466] overlayfs: failed to set xattr on upper [ 1621.311683][T21466] overlayfs: ...falling back to redirect_dir=nofollow. [ 1621.319198][T21466] overlayfs: ...falling back to index=off. [ 1621.325168][T21466] overlayfs: ...falling back to uuid=null. [ 1621.331548][T21466] overlayfs: ...falling back to xino=off. [ 1621.437014][ T1210] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1621.638232][ T1210] usb 3-1: device descriptor read/64, error -71 [ 1621.866568][T21477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.897193][ T1210] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1622.047339][ T1210] usb 3-1: device descriptor read/64, error -71 [ 1622.171305][ T1210] usb usb3-port1: attempt power cycle [ 1622.176973][ T5938] usb 6-1: USB disconnect, device number 23 [ 1622.527957][ T1210] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1622.560586][ T1210] usb 3-1: device descriptor read/8, error -71 [ 1622.647618][T16155] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1622.667573][ T5938] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1622.797431][T16155] usb 2-1: Using ep0 maxpacket: 16 [ 1622.803723][T16155] usb 2-1: no configurations [ 1622.808470][ T1210] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1622.816625][T16155] usb 2-1: can't read configurations, error -22 [ 1622.827427][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 1622.841312][ T1210] usb 3-1: device descriptor read/8, error -71 [ 1622.851893][ T5938] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1622.861670][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.870350][ T5938] usb 6-1: Product: syz [ 1622.874621][ T5938] usb 6-1: Manufacturer: syz [ 1622.883159][ T5938] usb 6-1: SerialNumber: syz [ 1622.924032][ T5938] usb 6-1: config 0 descriptor?? [ 1622.958123][ T1210] usb usb3-port1: unable to enumerate USB device [ 1622.977631][T16155] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1623.140384][T16155] usb 2-1: Using ep0 maxpacket: 16 [ 1623.148831][T16155] usb 2-1: no configurations [ 1623.153924][T16155] usb 2-1: can't read configurations, error -22 [ 1623.162424][ T5938] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1623.171969][T16155] usb usb2-port1: attempt power cycle [ 1623.205539][ T5938] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1623.232386][ T5938] usb 6-1: USB disconnect, device number 24 [ 1623.517864][T16155] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1623.538436][T16155] usb 2-1: Using ep0 maxpacket: 16 [ 1623.544520][T16155] usb 2-1: no configurations [ 1623.551630][T16155] usb 2-1: can't read configurations, error -22 [ 1623.688089][T16155] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1623.708592][T16155] usb 2-1: Using ep0 maxpacket: 16 [ 1623.714661][T16155] usb 2-1: no configurations [ 1623.722732][T16155] usb 2-1: can't read configurations, error -22 [ 1623.732456][T16155] usb usb2-port1: unable to enumerate USB device [ 1624.798965][T21512] --map-set only usable from mangle table [ 1624.802687][T21514] netlink: 1532 bytes leftover after parsing attributes in process `syz.5.4010'. [ 1624.827010][T21514] netlink: zone id is out of range [ 1624.834558][T21514] netlink: zone id is out of range [ 1624.839891][T21514] netlink: zone id is out of range [ 1624.849814][T21514] netlink: zone id is out of range [ 1624.855920][T21514] netlink: zone id is out of range [ 1624.863291][T21514] netlink: zone id is out of range [ 1624.907199][T21514] netlink: zone id is out of range [ 1624.946334][T21514] netlink: zone id is out of range [ 1625.620406][T21514] netlink: zone id is out of range [ 1625.627804][T21514] netlink: zone id is out of range [ 1625.844404][T21525] ptrace attach of "./syz-executor exec"[18220] was attempted by " [ 1626.229613][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1626.858826][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1627.008918][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1627.016571][ T10] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 1627.025770][ T10] usb 2-1: config 5 has no interface number 0 [ 1627.048869][ T10] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1627.061427][ T10] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1627.071932][ T10] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x6D, changing to 0xD [ 1627.084131][ T10] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0xD has an invalid bInterval 240, changing to 11 [ 1627.096135][ T10] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0xD has invalid maxpacket 41371, setting to 1024 [ 1627.107832][ T10] usb 2-1: config 5 interface 168 has no altsetting 0 [ 1627.122968][ T10] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1627.132563][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.145037][ T10] usb 2-1: Product: syz [ 1627.150201][ T10] usb 2-1: Manufacturer: syz [ 1627.157444][ T10] usb 2-1: SerialNumber: syz [ 1627.170858][T21539] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1627.308339][T21543] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 1627.316827][T21543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1627.326273][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1627.385212][ T10] pn533_usb 2-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1627.423231][ T10] usb 2-1: USB disconnect, device number 68 [ 1629.129230][T21552] loop9: detected capacity change from 0 to 7 [ 1629.158965][T21552] Dev loop9: unable to read RDB block 7 [ 1629.166924][T21552] loop9: unable to read partition table [ 1629.183362][T21552] loop9: partition table beyond EOD, truncated [ 1629.205810][T21552] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1629.473617][T21562] binder: 21561:21562 ioctl c018620c 200000000640 returned -22 [ 1632.654122][T21620] bridge0: entered allmulticast mode [ 1633.073091][T21623] bridge0: left allmulticast mode [ 1635.008228][T21637] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1635.096812][T21639] fuse: Bad value for 'group_id' [ 1635.111612][T21639] fuse: Bad value for 'group_id' [ 1635.294496][T21641] [ 1635.296915][T21641] ====================================================== [ 1635.303963][T21641] WARNING: possible circular locking dependency detected [ 1635.311015][T21641] 6.16.0-syzkaller #0 Not tainted [ 1635.316068][T21641] ------------------------------------------------------ [ 1635.323122][T21641] syz.5.4044/21641 is trying to acquire lock: [ 1635.329204][T21641] ffff88802598b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.340218][T21641] [ 1635.340218][T21641] but task is already holding lock: [ 1635.347608][T21641] ffff88802598ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1635.357231][T21641] [ 1635.357231][T21641] which lock already depends on the new lock. [ 1635.357231][T21641] [ 1635.367733][T21641] [ 1635.367733][T21641] the existing dependency chain (in reverse order) is: [ 1635.376839][T21641] [ 1635.376839][T21641] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1635.384691][T21641] lock_acquire+0x120/0x360 [ 1635.389750][T21641] __mutex_lock+0x182/0xe80 [ 1635.394797][T21641] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1635.400971][T21641] nbd_config_put+0x2c/0x790 [ 1635.406096][T21641] nbd_release+0xfe/0x140 [ 1635.411052][T21641] bdev_release+0x533/0x650 [ 1635.416090][T21641] blkdev_release+0x15/0x20 [ 1635.421225][T21641] __fput+0x449/0xa70 [ 1635.425742][T21641] fput_close_sync+0x119/0x200 [ 1635.431043][T21641] __x64_sys_close+0x7f/0x110 [ 1635.436253][T21641] do_syscall_64+0xfa/0x3b0 [ 1635.441391][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.447930][T21641] [ 1635.447930][T21641] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1635.455796][T21641] lock_acquire+0x120/0x360 [ 1635.460948][T21641] __mutex_lock+0x182/0xe80 [ 1635.466000][T21641] __del_gendisk+0x129/0x9e0 [ 1635.471140][T21641] del_gendisk+0xe8/0x160 [ 1635.476002][T21641] nbd_dev_remove_work+0x47/0xe0 [ 1635.481584][T21641] process_scheduled_works+0xade/0x17b0 [ 1635.487685][T21641] worker_thread+0x8a0/0xda0 [ 1635.492807][T21641] kthread+0x70e/0x8a0 [ 1635.497500][T21641] ret_from_fork+0x3fc/0x770 [ 1635.502626][T21641] ret_from_fork_asm+0x1a/0x30 [ 1635.507929][T21641] [ 1635.507929][T21641] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1635.516759][T21641] validate_chain+0xb9b/0x2140 [ 1635.522159][T21641] __lock_acquire+0xab9/0xd20 [ 1635.527368][T21641] lock_acquire+0x120/0x360 [ 1635.532398][T21641] down_write+0x96/0x1f0 [ 1635.537298][T21641] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.543581][T21641] nbd_start_device+0x16c/0xac0 [ 1635.549062][T21641] nbd_genl_connect+0x135b/0x18f0 [ 1635.554626][T21641] genl_family_rcv_msg_doit+0x215/0x300 [ 1635.560708][T21641] genl_rcv_msg+0x60e/0x790 [ 1635.565848][T21641] netlink_rcv_skb+0x205/0x470 [ 1635.571148][T21641] genl_rcv+0x28/0x40 [ 1635.575688][T21641] netlink_unicast+0x75c/0x8e0 [ 1635.581070][T21641] netlink_sendmsg+0x805/0xb30 [ 1635.586370][T21641] __sock_sendmsg+0x21c/0x270 [ 1635.591589][T21641] ____sys_sendmsg+0x505/0x830 [ 1635.596983][T21641] ___sys_sendmsg+0x21f/0x2a0 [ 1635.602198][T21641] __x64_sys_sendmsg+0x19b/0x260 [ 1635.607673][T21641] do_syscall_64+0xfa/0x3b0 [ 1635.612707][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.619128][T21641] [ 1635.619128][T21641] other info that might help us debug this: [ 1635.619128][T21641] [ 1635.629367][T21641] Chain exists of: [ 1635.629367][T21641] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1635.629367][T21641] [ 1635.643662][T21641] Possible unsafe locking scenario: [ 1635.643662][T21641] [ 1635.651131][T21641] CPU0 CPU1 [ 1635.656522][T21641] ---- ---- [ 1635.662077][T21641] lock(&nbd->config_lock); [ 1635.666778][T21641] lock(&disk->open_mutex); [ 1635.673992][T21641] lock(&nbd->config_lock); [ 1635.681126][T21641] lock(&set->update_nr_hwq_lock); [ 1635.686339][T21641] [ 1635.686339][T21641] *** DEADLOCK *** [ 1635.686339][T21641] [ 1635.694495][T21641] 3 locks held by syz.5.4044/21641: [ 1635.699782][T21641] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1635.707992][T21641] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1635.716982][T21641] #2: ffff88802598ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1635.727187][T21641] [ 1635.727187][T21641] stack backtrace: [ 1635.733103][T21641] CPU: 0 UID: 0 PID: 21641 Comm: syz.5.4044 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1635.733129][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1635.733140][T21641] Call Trace: [ 1635.733150][T21641] [ 1635.733159][T21641] dump_stack_lvl+0x189/0x250 [ 1635.733185][T21641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1635.733203][T21641] ? __pfx__printk+0x10/0x10 [ 1635.733224][T21641] ? print_lock_name+0xde/0x100 [ 1635.733245][T21641] print_circular_bug+0x2ee/0x310 [ 1635.733267][T21641] check_noncircular+0x134/0x160 [ 1635.733290][T21641] validate_chain+0xb9b/0x2140 [ 1635.733315][T21641] __lock_acquire+0xab9/0xd20 [ 1635.733332][T21641] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.733354][T21641] lock_acquire+0x120/0x360 [ 1635.733368][T21641] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.733393][T21641] ? kernfs_add_one+0xf0/0x520 [ 1635.733414][T21641] down_write+0x96/0x1f0 [ 1635.733434][T21641] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.733455][T21641] ? __pfx_down_write+0x10/0x10 [ 1635.733474][T21641] ? kernfs_add_one+0xf0/0x520 [ 1635.733495][T21641] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1635.733518][T21641] ? sysfs_add_file_mode_ns+0x238/0x300 [ 1635.733534][T21641] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1635.733552][T21641] nbd_start_device+0x16c/0xac0 [ 1635.733574][T21641] ? __nla_parse+0x40/0x60 [ 1635.733593][T21641] ? device_create_file+0xf4/0x1c0 [ 1635.733617][T21641] nbd_genl_connect+0x135b/0x18f0 [ 1635.733639][T21641] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1635.733662][T21641] ? __nla_parse+0x40/0x60 [ 1635.733681][T21641] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1635.733703][T21641] genl_family_rcv_msg_doit+0x215/0x300 [ 1635.733724][T21641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1635.733749][T21641] genl_rcv_msg+0x60e/0x790 [ 1635.733767][T21641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1635.733783][T21641] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1635.733806][T21641] netlink_rcv_skb+0x205/0x470 [ 1635.733829][T21641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1635.733845][T21641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1635.733872][T21641] ? down_read+0x1ad/0x2e0 [ 1635.733891][T21641] genl_rcv+0x28/0x40 [ 1635.733906][T21641] netlink_unicast+0x75c/0x8e0 [ 1635.733930][T21641] netlink_sendmsg+0x805/0xb30 [ 1635.733955][T21641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.733979][T21641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1635.733996][T21641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.734027][T21641] __sock_sendmsg+0x21c/0x270 [ 1635.734047][T21641] ____sys_sendmsg+0x505/0x830 [ 1635.734073][T21641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1635.734100][T21641] ? import_iovec+0x74/0xa0 [ 1635.734124][T21641] ___sys_sendmsg+0x21f/0x2a0 [ 1635.734149][T21641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1635.734185][T21641] ? __fget_files+0x2a/0x420 [ 1635.734203][T21641] ? __fget_files+0x3a0/0x420 [ 1635.734223][T21641] __x64_sys_sendmsg+0x19b/0x260 [ 1635.734248][T21641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1635.734276][T21641] ? rcu_is_watching+0x15/0xb0 [ 1635.734295][T21641] ? do_syscall_64+0xbe/0x3b0 [ 1635.734316][T21641] do_syscall_64+0xfa/0x3b0 [ 1635.734333][T21641] ? lockdep_hardirqs_on+0x9c/0x150 [ 1635.734349][T21641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.734367][T21641] ? clear_bhb_loop+0x60/0xb0 [ 1635.734385][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.734402][T21641] RIP: 0033:0x7f20e078ebe9 [ 1635.734419][T21641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.734434][T21641] RSP: 002b:00007f20e169f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.734453][T21641] RAX: ffffffffffffffda RBX: 00007f20e09b5fa0 RCX: 00007f20e078ebe9 [ 1635.734466][T21641] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 1635.734478][T21641] RBP: 00007f20e0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1635.734489][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.734499][T21641] R13: 00007f20e09b6038 R14: 00007f20e09b5fa0 R15: 00007ffd47224b78 [ 1635.734516][T21641] [ 1635.734545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.135766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.173471][T14396] block nbd0: Receive control failed (result -107) [ 1636.220200][T21641] nbd0: detected capacity change from 0 to 63 [ 1636.257192][T21647] tap0: tun_chr_ioctl cmd 2147767520