last executing test programs: 7m47.396639226s ago: executing program 0 (id=1307): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) socket$nl_generic(0x10, 0x3, 0x10) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r2, 0xa54ad000) sendfile(r3, r4, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)) 7m44.879433245s ago: executing program 0 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000015c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xf020}, [@IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x44}, 0x1, 0xba01, 0x80fe}, 0x0) 7m42.551761345s ago: executing program 0 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_stored_link_key={{0xa}, {0xfa, 0xfff, 0x8001}}}}, 0xb) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x7}, [@RTA_ENCAP={0x14, 0x1e, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x5}}}}]}, 0x30}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000000c0)="66b9910200000f32ec660f38820766b8f80ff1670f23d80f21f86635000000e00f23f8260f7895adff66b8ca0000000f23d00f21f86635200000010f23f836f2ad0fe1013ed9f1df7500", 0x4a}], 0x1, 0x22, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32) setreuid(0x0, 0xee00) (async, rerun: 32) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m41.030312894s ago: executing program 0 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f1, &(0x7f00000000c0)={0x2, 0xb7f3, 0x0, 0x0, 0x16, "bb5dee00"}) 7m40.497227323s ago: executing program 0 (id=1330): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x300, 0xb, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffffffffff32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x9) alarm(0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000}, {0x0, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0xc, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0xeeee8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x3400b0, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 7m38.911283084s ago: executing program 0 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000064000000850000003900000095"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e4e, @void, @value}, 0x94) 7m38.50229045s ago: executing program 32 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000064000000850000003900000095"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e4e, @void, @value}, 0x94) 2m10.090218673s ago: executing program 4 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d62696e643a372d4e3a4e2f4e17"]) r1 = syz_open_dev$vivid(&(0x7f00000002c0), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x80, 0x9, 0x0, "5c1e860a2d6a9d1b8055aa62c5b169f5ecabc3f085b84adabb01381615538442", 0x39565559}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x48}}, 0x0) 2m9.622364756s ago: executing program 4 (id=2465): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000002493da4fedb5d3020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2000}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x400, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x80) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0x100}}) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f0000006900)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@empty}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@loopback, @in6=@dev}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local}, {}, {}, 0x0, 0x0, 0x0, 0x167379a148b7fbe1}}}, 0x128}}, 0x0) (async, rerun: 32) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)=ANY=[@ANYBLOB="01666768696a6b6c6d6e6f7037e47e9ea1e2677172737475767778797a"], 0x29, 0xfffffffffffffffc) (rerun: 32) getpid() 2m8.605966036s ago: executing program 4 (id=2467): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0xa000000, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x30]}}}}]}) 2m8.528232379s ago: executing program 4 (id=2469): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000004c0)={0x4, @vbi={0x41, 0xffffff7f, 0x6, 0x49323159, [0x2, 0x5], [0xffff, 0x5], 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000c000000000000907fdd3d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) ppoll(&(0x7f00000008c0)=[{r3}, {r4}], 0x2, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ed0000/0x3000)=nil) r5 = socket$unix(0x1, 0x5, 0x0) accept4(r5, 0x0, &(0x7f0000000100), 0x180800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x6, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400800000f0800014000000000180005800e002000696d6d656469617465000000040000000900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 2m5.270165045s ago: executing program 4 (id=2477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180700ffff800000000000000000000818120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000001000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2m4.781606936s ago: executing program 4 (id=2478): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x75, 0xffffffffffffffff, {0x4}}, '\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x0, "0092938eda08a5513db99d08fdae429e4ae4c5bac9dd8259be4ee64b32c65e0a"}) (async) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8013}, 0x1}) (async) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x3d) (async) utimensat(r8, 0x0, 0x0, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000100)=0x2, 0x4) (async, rerun: 32) dup2(r9, r8) (async, rerun: 32) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="6d693f01c58eb3979336dced09468e036bd5c47eab241620a70d6849edc7499efd2815ebebeca06ceef4fe95e04cb1a6c2824c8d328d6cc81481efc7ac8d6af5c9eeef8ed98e75552eda0435cf1ff9a51edc67d511e852b13d9f9da8dc548dd1a0fb99b68964a36f68005ee53c5dd454cfa3acf6cbbd218a3c7511ffab63ed156a35d813db1746fd4e0f2fbe022d08bc1abebeeb7cd234d784c84b6923605cc8c8da459a58ab347794ffca583ae492641b06f3042fa5c511c22ffde58a918437fca17d9b7367b5b0aed1c7a9018a649a1668495933a1d8483fe4603f99a6d15b7fc69c31a8332d2ae46c440a617839de7a0ecefea6cf876d"], 0x8) (async) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (rerun: 64) recvmsg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/4114, 0x1012}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m4.263022077s ago: executing program 33 (id=2478): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x75, 0xffffffffffffffff, {0x4}}, '\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x0, "0092938eda08a5513db99d08fdae429e4ae4c5bac9dd8259be4ee64b32c65e0a"}) (async) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8013}, 0x1}) (async) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x3d) (async) utimensat(r8, 0x0, 0x0, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000100)=0x2, 0x4) (async, rerun: 32) dup2(r9, r8) (async, rerun: 32) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="6d693f01c58eb3979336dced09468e036bd5c47eab241620a70d6849edc7499efd2815ebebeca06ceef4fe95e04cb1a6c2824c8d328d6cc81481efc7ac8d6af5c9eeef8ed98e75552eda0435cf1ff9a51edc67d511e852b13d9f9da8dc548dd1a0fb99b68964a36f68005ee53c5dd454cfa3acf6cbbd218a3c7511ffab63ed156a35d813db1746fd4e0f2fbe022d08bc1abebeeb7cd234d784c84b6923605cc8c8da459a58ab347794ffca583ae492641b06f3042fa5c511c22ffde58a918437fca17d9b7367b5b0aed1c7a9018a649a1668495933a1d8483fe4603f99a6d15b7fc69c31a8332d2ae46c440a617839de7a0ecefea6cf876d"], 0x8) (async) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (rerun: 64) recvmsg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/4114, 0x1012}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 51.9065063s ago: executing program 3 (id=2657): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c00000000089078"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@bloom_filter={0x1e, 0x0, 0xf, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6644004aef03f6", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dafc94a9c50de3f1b52bc81bf2eb06b5b0a63c24697d05ae53bd35ccc14c6d7482a7717f96aad94e882d4f0498936351f5aa2f094d6dd1b9b4ef55772bccae3d7a449e6aef50bcce3732480ed8fd69fbeda2f48d707b4f208123f94958809d024243761c52821e4b7b8acfa58476d38d53d9178edc2e769eeeda763d751863038b796bbf726116cb73ad4274856d5e9822d1dd6bc877d3d611ddb22497f0e5b42b000000000", @ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRESHEX=r4, @ANYBLOB="0000a518965326938cfd50b579b61b4af6d7e4e513fafe8e6b80ce10eaaba0e5be210279457c03490c1b98f9a485942cba8d10d57e9440b554a7f2cb2aabad572310621e2f171cdfbd721a552abfc2e3e297ad57374e8cd6772bdf4c125525fbba8d65ebffe8c9fe307c200f52c785fccdee53adecae35042bd98e9b5a504ae1396878b78819c8708c33b8a505a24bb7c1e0a2267db17c2cad9b0427873292fbca452199a45d1cb9d5591a0d0000000000000058f55a4db78fbc129439eb00e84fe630931ab63e6ba5460cbc7a444bf6009cb5b40ca171dd2b7dcb2c42"]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x4066550}}, 0x50) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="a45d30280095b6f9c1c2c24ce2f968e5bb8bca3c7150f84f19c9274c885cbce4ef69e316b348af4b834a430f382fe832703be2890c78a6ed71981c9497f86e9ae0cc425bf5048c840b20a77122067f06c5eb1d1a02a8746d3ff9e60d70", &(0x7f00000005c0)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f25a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffffe, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x11) syz_fuse_handle_req(r3, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="82000000faff22ffffffffff042554bde2763e7cbe949bb9b12ed7e31ad2e965e8ee80650197f304958420e949f531851dfc0deaf771781e"], 0x0, 0x0, 0x0}) syz_open_dev$MSR(&(0x7f0000000300), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x5, 0x201d, 0x6, 0x0, 0x4, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x228000) clock_nanosleep(0x4, 0x0, &(0x7f0000000280)={r7, r8+60000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$int_in(r9, 0x5421, &(0x7f0000000200)=0x3ff) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000ffdbdf250200000008000200040003000c000180060000008880b4f8"], 0x28}}, 0x0) 51.532016022s ago: executing program 3 (id=2660): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/229, &(0x7f0000000000)=0xe5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x980914, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 49.829648099s ago: executing program 3 (id=2664): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x9) alarm(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 48.464613899s ago: executing program 3 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmr'], 0xa) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x37}) pivot_root(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r8 = syz_io_uring_setup(0x3d22, &(0x7f0000000480)={0x0, 0x8425, 0x100, 0x0, 0x8f, 0x0, r7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x29, 0x4007, @fd=r1, 0x6a13, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) 45.324116935s ago: executing program 3 (id=2675): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200003, 0x10100, 0x0, 0x1e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2={0xff, 0x5}, 0x1}, 0x1c) 43.962414078s ago: executing program 3 (id=2678): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x9) alarm(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 43.129338946s ago: executing program 34 (id=2678): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x9) alarm(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.987148218s ago: executing program 1 (id=2759): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x4080004) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') syz_open_dev$loop(0x0, 0x5, 0x80000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000008c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x1000000, 0x1}) write$proc_mixer(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB='MCM\n'], 0x4) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000a40)={{&(0x7f00000009c0)={'KERNEL\x00', {&(0x7f0000000900)=@adf_str={@format={'Cy', '1', 'BankNumber\x00'}, {"4807a77aec4bec3d5fa976bdcb1e3f754586741e059d386670a4da93ea718724a79780d31b7839d9fec84696c64cdd6c1b76f2a30c41a95545ef210d00ac1dfa"}, {&(0x7f0000000240)=@adf_hex={@normal='NumberDcInstances\x00', {0x3}}}}}}}, 0x40}) write$tcp_mem(r3, &(0x7f0000000540)={0xffffffff7fffffff, 0x20, 0x0, 0x20, 0x4}, 0x48) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) set_mempolicy(0x4005, &(0x7f0000000000)=0x7, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300)="bb2e65f51d9401e629058fe505945991d9af22770f24ca088a29a3e839d1c081dc372bfc3c86b19ecacbbcad5f6e10e833ae73256e7dca1c241ce3dbf8fcf7ee68027e90c42d70cf460dec48e242253bb16af53756abe8c798075a8cb58e433004da070081d65f86f5be8b775189e13cc4aa17b7863ad9b0ff589392a2cff06b2fe82cc0456460fcdb652e7d5aac8396331b28b34b936ce5a03262eef77ef52a9cf91a78120824", &(0x7f00000003c0)=""/243}, 0x20) openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x408841, 0x0) 11.933037425s ago: executing program 1 (id=2763): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/229, &(0x7f0000000000)=0xe5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x980914, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r4], 0x1000f) 10.303960422s ago: executing program 2 (id=2765): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x1805) 10.177686842s ago: executing program 1 (id=2767): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7f54, &(0x7f0000000100)={0x0, 0x0, 0x3e00, 0x0, 0x3b}, &(0x7f0000000000), &(0x7f00000000c0)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000068000301000000ef000000000000000000000000060003000a0000000800010000000000240002"], 0x4c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e2c72ca1d1a4195", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000a2000/0x4000)=nil, &(0x7f00004fc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x51}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) 9.790543069s ago: executing program 6 (id=2768): mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b0, &(0x7f0000001100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e010000000000008080"], 0xb) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.017377968s ago: executing program 2 (id=2769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 8.985874675s ago: executing program 1 (id=2770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000440)={0x67, 0x7d, 0x2, {{0x0, 0x43, 0x5, 0x3, {0x10, 0x0, 0x6}, 0x40000000, 0x277f, 0x2, 0x2, 0x6, '#\'^]\xbe\'', 0x5, '\xaa\xaa\xaa\xaa\xaa', 0x0, '', 0x5, '[%)e:'}, 0xf, '/dev/dri/card#\x00', 0x0, 0x0, r2}}, 0x67) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 7.296824007s ago: executing program 1 (id=2772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0xdb, 0x4, 0x0, 0x0, 0x38, 0x0, 0x6, 0xfd, 0x6, 0x8, 0x3, 0x7, 0x81, 0xf3, 0xcb, 0x4}}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) 6.25196123s ago: executing program 2 (id=2773): r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x3580ffff, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 6.194802394s ago: executing program 5 (id=2774): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x2c0c03, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a0100000000c00e008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) mmap(&(0x7f00001b1000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000a00)={{0xa, 0x0, 0x0, 0x0, '\x00', 0xffff}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a3bbf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1]}) io_setup(0x1, &(0x7f0000000180)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x6, 0xf5, 0x1}) r8 = eventfd(0x9) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x5b, r1, &(0x7f00000001c0)="3e1e9bbc0007e5ce55c8cc6a449dafc27c879507e815a30892c3ddda9a", 0x1d, 0x4, 0x0, 0x2, r8}]) 6.141221247s ago: executing program 6 (id=2775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000000409"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) 5.841076979s ago: executing program 5 (id=2776): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/229, &(0x7f0000000000)=0xe5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x980914, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r4], 0x1000f) 5.74308981s ago: executing program 2 (id=2777): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085400000ee6390487100000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000300)) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 4.181695953s ago: executing program 5 (id=2778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000092c0)={0x4c, 0x0, &(0x7f000000a300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0xfcffffffffffffff, 0x0}) 3.818088698s ago: executing program 2 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100002, 0xfffff7fc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000200)=0x110, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x7, 0x9, 0x0, 0x5, 0x0, 0x9, 0x0, 0x8, 0x9, 0x6d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x20000804) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3.809711071s ago: executing program 6 (id=2780): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000002600)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000ba0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40a1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) 3.809006711s ago: executing program 5 (id=2781): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioperm(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.706127272s ago: executing program 1 (id=2782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xca}, @mss={0x2, 0x4}, @sack_perm, @sack_perm, @window={0x3, 0x60, 0x7f}, @sack_perm, @sack_perm, @mss={0x2, 0xaf35}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000400)="f84ab18aa7b86ed31e677978e12325", 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r4, &(0x7f00000005c0), 0x20000000}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) r6 = socket$netlink(0x10, 0x3, 0x14) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x2) getpeername$netlink(r7, &(0x7f0000000080), &(0x7f00000000c0)=0xc) futex(0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x5000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080004"], 0x38}}, 0x0) 2.609366929s ago: executing program 5 (id=2783): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x9) alarm(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 987.233138ms ago: executing program 5 (id=2784): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) timer_gettime(0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @local}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030000000000000905c7"], 0x0) 813.553446ms ago: executing program 6 (id=2785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = dup2(r3, r3) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfd, 0x4ed2}, 0x14}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) r6 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x9, 0x3, {}, {0xffffffffffffffff}, 0x94, 0x860}) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x10000, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@smackfshat}, {@euid_lt={'euid<', r7}}]}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x4206, 0x0) r9 = io_uring_setup(0x6d95, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0x2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0xe, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='suota,grpquota_block_hardlimit<3,\x00']) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) 638.286462ms ago: executing program 6 (id=2786): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4420, 0x10804}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4420, 0x10804}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) (async) 635.809913ms ago: executing program 7 (id=2679): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x31, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000001240)={0x7, 0x0, [{0x80000001, 0x1, 0x8, 0x6, 0x8, 0xb, 0x7}, {0xc0000001, 0x3, 0x1, 0xfffffffe, 0x10001, 0x2}, {0xc0000000, 0x5, 0x0, 0x7, 0x6, 0x5, 0x40}, {0xc0000001, 0x5, 0x0, 0x200, 0x5, 0x7, 0x8000}, {0x40000001, 0x0, 0x4, 0x2cd, 0x8001, 0x80000000, 0x3}, {0xa, 0x6, 0x6, 0x8, 0x7, 0x10000, 0x80}, {0x1, 0x200000, 0x5, 0x8, 0x70470fcd, 0x9, 0x2}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 385.616826ms ago: executing program 6 (id=2787): io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x800002, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@uuid_auto}, {@redirect_dir_on}, {@index_on}]}) 0s ago: executing program 2 (id=2788): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085400000ee6390487100000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000300)) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) kernel console output (not intermixed with test programs): kb: 2107 callbacks suppressed [ 901.741401][ T29] audit: type=1400 audit(1736003591.546:296899): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15330 comm="syz.1.2491" name="newroot" dev="tmpfs" ino=2 [ 901.835100][ T8866] m920x_read = error: -19 [ 901.839844][ T8866] dvb-usb: error while querying for an remote control event. [ 901.996947][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 902.006910][ T8866] m920x_read = error: -19 [ 902.012441][ T8866] dvb-usb: error while querying for an remote control event. [ 902.019897][ T5827] audit: audit_lost=190219 audit_rate_limit=0 audit_backlog_limit=64 [ 902.046578][ T29] audit: type=1400 audit(1736003591.546:296900): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15330 comm="syz.1.2491" name="/" dev="devtmpfs" ino=1 [ 902.076673][ T5827] audit: backlog limit exceeded [ 902.086940][T10789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 902.092120][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 902.100253][ T5827] audit: audit_lost=190220 audit_rate_limit=0 audit_backlog_limit=64 [ 902.222641][T10789] audit: audit_lost=190221 audit_rate_limit=0 audit_backlog_limit=64 [ 902.222767][ T8866] m920x_read = error: -19 [ 902.230794][T10789] audit: backlog limit exceeded [ 902.249136][ T8866] dvb-usb: error while querying for an remote control event. [ 902.386363][ T3559] batman_adv: batadv0: Removing interface: ipvlan2 [ 902.401075][ T3559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.482326][T15266] Bluetooth: hci4: command tx timeout [ 902.507324][ T8866] m920x_read = error: -19 [ 902.512076][ T8866] dvb-usb: error while querying for an remote control event. [ 902.573911][ T3559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.585139][ T3559] bond0 (unregistering): Released all slaves [ 902.622198][ T8866] m920x_read = error: -19 [ 902.626543][ T8866] dvb-usb: error while querying for an remote control event. [ 902.753218][ T5865] m920x_read = error: -19 [ 902.757610][ T5865] dvb-usb: error while querying for an remote control event. [ 903.125484][T15345] input: syz0 as /devices/virtual/input/input35 [ 903.923415][ T5865] m920x_read = error: -19 [ 903.927788][ T5865] dvb-usb: error while querying for an remote control event. [ 904.176731][ T5865] m920x_read = error: -19 [ 904.181114][ T5865] dvb-usb: error while querying for an remote control event. [ 904.329636][ T8866] m920x_read = error: -19 [ 904.354268][ T8866] dvb-usb: error while querying for an remote control event. [ 904.361709][T15262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 904.450523][T15262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 904.483637][ T8866] m920x_read = error: -19 [ 904.488005][ T8866] dvb-usb: error while querying for an remote control event. [ 904.506148][T15262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 904.506682][T15266] Bluetooth: hci4: command tx timeout [ 904.604947][ T8866] m920x_read = error: -19 [ 904.628104][ T8866] dvb-usb: error while querying for an remote control event. [ 904.824880][ T5865] m920x_read = error: -19 [ 904.829829][ T5865] dvb-usb: error while querying for an remote control event. [ 905.731368][T15364] usb usb1: usbfs: process 15364 (syz.1.2498) did not claim interface 0 before use [ 905.823714][ T5867] m920x_read = error: -19 [ 905.828127][ T5867] dvb-usb: error while querying for an remote control event. [ 906.165653][ T5865] m920x_read = error: -19 [ 906.170109][ T5865] dvb-usb: error while querying for an remote control event. [ 906.224622][T15262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 906.302174][ T8866] m920x_read = error: -19 [ 906.306532][ T8866] dvb-usb: error while querying for an remote control event. [ 906.444659][T15310] chnl_net:caif_netlink_parms(): no params data found [ 906.452272][ T8866] m920x_read = error: -19 [ 906.456636][ T8866] dvb-usb: error while querying for an remote control event. [ 906.563446][T15262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.578503][T15262] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.582137][T15266] Bluetooth: hci4: command tx timeout [ 906.877922][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.885083][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.266098][ T8866] m920x_read = error: -19 [ 907.270800][ T8866] dvb-usb: error while querying for an remote control event. [ 907.275634][ T29] kauditd_printk_skb: 1944 callbacks suppressed [ 907.275650][ T29] audit: type=1400 audit(1736003597.196:298241): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15366 comm="syz.5.2500" name="newroot" dev="tmpfs" ino=2 [ 907.295176][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.310719][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.312148][ T29] audit: type=1400 audit(1736003597.196:298242): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15366 comm="syz.5.2500" name="/" dev="devtmpfs" ino=1 [ 907.337264][ T29] audit: type=1400 audit(1736003597.196:298243): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=15366 comm="syz.5.2500" name="swradio0" dev="devtmpfs" ino=954 [ 907.357390][ T29] audit: type=1400 audit(1736003597.196:298244): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=15366 comm="syz.5.2500" path="/dev/swradio0" dev="devtmpfs" ino=954 [ 907.377554][ T29] audit: type=1400 audit(1736003597.196:298245): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=15366 comm="syz.5.2500" path="/dev/swradio0" dev="devtmpfs" ino=954 [ 907.402405][ T29] audit: type=1400 audit(1736003597.206:298246): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=15366 comm="syz.5.2500" path="/dev/swradio0" dev="devtmpfs" ino=954 [ 907.403076][ T5865] m920x_read = error: -19 [ 907.423061][ T29] audit: type=1400 audit(1736003597.206:298247): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15366 comm="syz.5.2500" opid=15366 ocomm="syz.5.2500" [ 907.445328][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.503599][ T29] audit: type=1400 audit(1736003597.536:298248): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15366 comm="syz.5.2500" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 907.508597][T10789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 907.526437][ T29] audit: type=1400 audit(1736003598.036:298249): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 907.552077][ T5865] dvb-usb: error while querying for an remote control event. [ 907.650184][ T3559] batadv_slave_1: left promiscuous mode [ 907.677876][ T3559] hsr_slave_0: left promiscuous mode [ 907.699770][ T3559] hsr_slave_1: left promiscuous mode [ 907.715786][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.730749][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 907.741981][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.781611][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.808159][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.817042][ T8866] m920x_read = error: -19 [ 907.821545][ T8866] dvb-usb: error while querying for an remote control event. [ 908.321282][ T3559] batadv0: left allmulticast mode [ 908.330737][ T3559] veth1_macvtap: left promiscuous mode [ 908.330932][ T8866] m920x_read = error: -19 [ 908.352120][ T8866] dvb-usb: error while querying for an remote control event. [ 908.359558][ T3559] veth0_macvtap: left promiscuous mode [ 908.379705][ T3559] veth1_vlan: left promiscuous mode [ 908.389750][ T3559] veth0_vlan: left promiscuous mode [ 908.475500][ T5865] m920x_read = error: -19 [ 908.481260][ T5865] dvb-usb: error while querying for an remote control event. [ 908.592142][ T8866] m920x_read = error: -19 [ 908.598146][ T8866] dvb-usb: error while querying for an remote control event. [ 908.728216][ T8866] m920x_read = error: -19 [ 908.746666][ T8866] dvb-usb: error while querying for an remote control event. [ 908.862265][ T8866] m920x_read = error: -19 [ 908.878150][ T8866] dvb-usb: error while querying for an remote control event. [ 909.022383][ T8866] m920x_read = error: -19 [ 909.026769][ T8866] dvb-usb: error while querying for an remote control event. [ 909.142238][ T8866] m920x_read = error: -19 [ 909.171175][ T8866] dvb-usb: error while querying for an remote control event. [ 909.332207][ T5867] m920x_read = error: -19 [ 909.399360][ T5867] dvb-usb: error while querying for an remote control event. [ 909.512078][ T8866] m920x_read = error: -19 [ 909.516452][ T8866] dvb-usb: error while querying for an remote control event. [ 909.663323][ T8866] m920x_read = error: -19 [ 909.667692][ T8866] dvb-usb: error while querying for an remote control event. [ 909.789085][ T8866] m920x_read = error: -19 [ 909.793656][ T8866] dvb-usb: error while querying for an remote control event. [ 909.922741][ T8866] m920x_read = error: -19 [ 909.927115][ T8866] dvb-usb: error while querying for an remote control event. [ 909.970651][ T3559] team0 (unregistering): Port device team_slave_1 removed [ 910.009847][ T3559] team0 (unregistering): Port device team_slave_0 removed [ 910.058511][ T8866] m920x_read = error: -19 [ 910.063944][ T8866] dvb-usb: error while querying for an remote control event. [ 910.190116][ T8866] m920x_read = error: -19 [ 910.196135][ T8866] dvb-usb: error while querying for an remote control event. [ 910.317427][ T8866] m920x_read = error: -19 [ 910.321885][ T8866] dvb-usb: error while querying for an remote control event. [ 910.449168][ T8866] m920x_read = error: -19 [ 910.453680][ T8866] dvb-usb: error while querying for an remote control event. [ 910.572830][ T8866] m920x_read = error: -19 [ 910.577985][ T8866] dvb-usb: error while querying for an remote control event. [ 910.832303][ T8866] m920x_read = error: -19 [ 910.837657][ T8866] dvb-usb: error while querying for an remote control event. [ 910.952436][ T8866] m920x_read = error: -19 [ 910.972833][ T8866] dvb-usb: error while querying for an remote control event. [ 911.102129][ T8866] m920x_read = error: -19 [ 911.107682][ T8866] dvb-usb: error while querying for an remote control event. [ 911.140571][T15310] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.157298][T15310] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.166084][T15310] bridge_slave_0: entered allmulticast mode [ 911.179944][T15310] bridge_slave_0: entered promiscuous mode [ 911.207880][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.221254][T15310] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.232370][ T8866] m920x_read = error: -19 [ 911.232550][T15310] bridge_slave_1: entered allmulticast mode [ 911.236726][ T8866] dvb-usb: error while querying for an remote control event. [ 911.268690][T15310] bridge_slave_1: entered promiscuous mode [ 911.309940][T15310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.338390][T15310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.392373][ T8866] m920x_read = error: -19 [ 911.396745][ T8866] dvb-usb: error while querying for an remote control event. [ 911.528488][T15310] team0: Port device team_slave_0 added [ 911.541791][T15411] netlink: 'syz.3.2509': attribute type 9 has an invalid length. [ 911.552132][ T5867] m920x_read = error: -19 [ 911.556491][ T5867] dvb-usb: error while querying for an remote control event. [ 911.566754][ T3559] IPVS: stop unused estimator thread 0... [ 911.591428][T15310] team0: Port device team_slave_1 added [ 911.722431][ T5867] m920x_read = error: -19 [ 911.726808][ T5867] dvb-usb: error while querying for an remote control event. [ 912.299625][ T29] kauditd_printk_skb: 2816 callbacks suppressed [ 912.299642][ T29] audit: type=1400 audit(1736003602.846:300536): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15419 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 912.325804][ T8866] m920x_read = error: -19 [ 912.336368][ T8866] dvb-usb: error while querying for an remote control event. [ 912.351432][ T29] audit: type=1400 audit(1736003602.846:300537): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15419 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 912.400077][T15421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 912.420930][T15421] audit: audit_lost=190600 audit_rate_limit=0 audit_backlog_limit=64 [ 912.442113][T15422] audit: audit_backlog=65 > audit_backlog_limit=64 [ 912.448668][T15422] audit: audit_lost=190601 audit_rate_limit=0 audit_backlog_limit=64 [ 912.456965][T15422] audit: backlog limit exceeded [ 912.463388][ T8866] m920x_read = error: -19 [ 912.467800][ T8866] dvb-usb: error while querying for an remote control event. [ 912.478847][ T29] audit: type=1400 audit(1736003602.846:300538): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15419 comm="syz-executor" name="470" dev="tmpfs" ino=2564 [ 912.514280][T15422] audit: audit_backlog=65 > audit_backlog_limit=64 [ 912.520860][T15422] audit: audit_lost=190602 audit_rate_limit=0 audit_backlog_limit=64 [ 912.533683][T15422] FAULT_INJECTION: forcing a failure. [ 912.533683][T15422] name failslab, interval 1, probability 0, space 0, times 0 [ 912.546460][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.1.2512 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 912.557230][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 912.563098][T15310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.567266][T15422] Call Trace: [ 912.567277][T15422] [ 912.580395][T15422] dump_stack_lvl+0x241/0x360 [ 912.585074][T15422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.590266][T15422] ? __pfx__printk+0x10/0x10 [ 912.594850][T15422] ? kmem_cache_alloc_noprof+0x48/0x380 [ 912.600401][T15422] ? __pfx___might_resched+0x10/0x10 [ 912.602487][ T8866] m920x_read = error: -19 [ 912.605673][T15422] should_fail_ex+0x3b0/0x4e0 [ 912.605702][T15422] should_failslab+0xac/0x100 [ 912.610077][ T8866] dvb-usb: error while querying for an remote control event. [ 912.614663][T15422] ? getname_flags+0xb7/0x540 [ 912.614685][T15422] kmem_cache_alloc_noprof+0x70/0x380 [ 912.636715][T15422] getname_flags+0xb7/0x540 [ 912.641205][T15422] ? _copy_from_user+0x99/0xc0 [ 912.645961][T15422] user_path_at+0x24/0x60 [ 912.650288][T15422] __se_sys_mount+0x297/0x3c0 [ 912.654998][T15422] ? lockdep_hardirqs_on+0x99/0x150 [ 912.660203][T15422] ? __pfx___se_sys_mount+0x10/0x10 [ 912.665397][T15422] ? __x64_sys_mount+0x20/0xc0 [ 912.670159][T15422] do_syscall_64+0xf3/0x230 [ 912.674660][T15422] ? clear_bhb_loop+0x35/0x90 [ 912.679329][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.685220][T15422] RIP: 0033:0x7f8612b85d29 [ 912.689656][T15422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.709261][T15422] RSP: 002b:00007f86109d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 912.717671][T15422] RAX: ffffffffffffffda RBX: 00007f8612d76080 RCX: 00007f8612b85d29 [ 912.725642][T15422] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000180 [ 912.733605][T15422] RBP: 00007f86109d5090 R08: 0000000000000000 R09: 0000000000000000 [ 912.741587][T15422] R10: 0000000000008003 R11: 0000000000000246 R12: 0000000000000001 [ 912.749557][T15422] R13: 0000000000000000 R14: 00007f8612d76080 R15: 00007ffff82ece48 [ 912.757548][T15422] [ 912.760589][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.762469][ T8866] m920x_read = error: -19 [ 912.908064][ T8866] dvb-usb: error while querying for an remote control event. [ 912.912905][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.182357][ T8866] m920x_read = error: -19 [ 913.187061][ T8866] dvb-usb: error while querying for an remote control event. [ 913.195156][T15310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.213805][T15310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.220770][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.246978][T15310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.302801][ T5866] m920x_read = error: -19 [ 913.307172][ T5866] dvb-usb: error while querying for an remote control event. [ 913.333661][T15310] hsr_slave_0: entered promiscuous mode [ 913.350355][T15310] hsr_slave_1: entered promiscuous mode [ 913.432326][ T5866] m920x_read = error: -19 [ 913.436833][ T5866] dvb-usb: error while querying for an remote control event. [ 913.557955][T15262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.572213][ T5866] m920x_read = error: -19 [ 913.576740][ T5866] dvb-usb: error while querying for an remote control event. [ 913.702717][ T5865] m920x_read = error: -19 [ 913.707092][ T5865] dvb-usb: error while querying for an remote control event. [ 913.714013][T15262] veth0_vlan: entered promiscuous mode [ 913.760676][T15310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 913.780393][T15310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 913.801168][T15310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 913.817824][T15310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 913.832572][ T5866] m920x_read = error: -19 [ 913.837058][ T5866] dvb-usb: error while querying for an remote control event. [ 913.851087][T15262] veth1_vlan: entered promiscuous mode [ 913.929047][T15262] veth0_macvtap: entered promiscuous mode [ 913.952167][ T8866] m920x_read = error: -19 [ 913.956536][ T8866] dvb-usb: error while querying for an remote control event. [ 913.959394][T15262] veth1_macvtap: entered promiscuous mode [ 914.017360][T15262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.042580][T15262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.062115][T15262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.082130][T15262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.082490][ T8866] m920x_read = error: -19 [ 914.114194][T15262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.117888][ T8866] dvb-usb: error while querying for an remote control event. [ 914.173498][T15262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.202124][T15262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.211964][T15262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.222880][T15262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.234781][T15262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.245687][T15262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.262677][ T8866] m920x_read = error: -19 [ 914.267039][ T8866] dvb-usb: error while querying for an remote control event. [ 914.293284][T15262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.308440][T15310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.329951][T15262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.360599][T15262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.379789][T15262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.392135][T15262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.392353][ T8866] m920x_read = error: -19 [ 914.414441][ T8866] dvb-usb: error while querying for an remote control event. [ 914.447406][T15310] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.579598][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.586807][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.648530][ T5865] m920x_read = error: -19 [ 914.653467][ T5865] dvb-usb: error while querying for an remote control event. [ 914.673348][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.680451][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.779335][ T8866] m920x_read = error: -19 [ 914.783917][ T8866] dvb-usb: error while querying for an remote control event. [ 914.892384][ T8866] m920x_read = error: -19 [ 914.897117][ T8866] dvb-usb: error while querying for an remote control event. [ 915.042606][ T5867] m920x_read = error: -19 [ 915.047277][ T5867] dvb-usb: error while querying for an remote control event. [ 915.182980][ T5867] m920x_read = error: -19 [ 915.187845][ T5867] dvb-usb: error while querying for an remote control event. [ 915.322920][ T8866] m920x_read = error: -19 [ 915.329283][ T8866] dvb-usb: error while querying for an remote control event. [ 915.452428][ T5867] m920x_read = error: -19 [ 915.457011][ T5867] dvb-usb: error while querying for an remote control event. [ 915.582187][ T5866] m920x_read = error: -19 [ 915.586548][ T5866] dvb-usb: error while querying for an remote control event. [ 915.712580][ T5867] m920x_read = error: -19 [ 915.719701][T15310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.730404][ T5867] dvb-usb: error while querying for an remote control event. [ 915.771386][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.799939][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.872393][ T5867] m920x_read = error: -19 [ 915.876847][ T5867] dvb-usb: error while querying for an remote control event. [ 916.010508][ T6602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.023889][ T8866] m920x_read = error: -19 [ 916.028252][ T8866] dvb-usb: error while querying for an remote control event. [ 916.068216][ T6602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.393122][T15266] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 916.820107][ T8866] m920x_read = error: -19 [ 916.824735][ T8866] dvb-usb: error while querying for an remote control event. [ 916.960329][ T5865] m920x_read = error: -19 [ 916.992792][ T5865] dvb-usb: error while querying for an remote control event. [ 917.122419][ T5865] m920x_read = error: -19 [ 917.144462][ T5865] dvb-usb: error while querying for an remote control event. [ 917.169842][T15473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 917.178942][T15473] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 917.187446][T15473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 917.332580][ T5865] m920x_read = error: -19 [ 917.336917][ T5865] dvb-usb: error while querying for an remote control event. [ 917.345395][ T29] kauditd_printk_skb: 5792 callbacks suppressed [ 917.345406][ T29] audit: type=1400 audit(1736003607.766:304628): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15471 comm="syz.1.2523" opid=15471 ocomm="syz.1.2523" [ 917.652513][ T29] audit: type=1400 audit(1736003607.786:304629): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 917.681700][T15472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 917.682245][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 917.694902][T15472] audit: audit_lost=191170 audit_rate_limit=0 audit_backlog_limit=64 [ 917.694953][T15472] audit: backlog limit exceeded [ 917.703038][ T5175] audit: audit_lost=191171 audit_rate_limit=0 audit_backlog_limit=64 [ 917.703055][ T5175] audit: backlog limit exceeded [ 917.703077][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 917.703090][ T5175] audit: audit_lost=191172 audit_rate_limit=0 audit_backlog_limit=64 [ 917.889870][ T5867] m920x_read = error: -19 [ 917.894287][ T5867] dvb-usb: error while querying for an remote control event. [ 918.024501][ T5867] m920x_read = error: -19 [ 918.079452][T15478] .: renamed from bond0 (while UP) [ 918.150949][T15479] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 918.160404][T15479] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 918.172169][T15479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 918.255775][ T5867] dvb-usb: error while querying for an remote control event. [ 918.474620][ T5867] m920x_read = error: -19 [ 918.573579][ T5867] dvb-usb: error while querying for an remote control event. [ 918.593171][T15310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.774259][ T5865] m920x_read = error: -19 [ 918.778955][ T5865] dvb-usb: error while querying for an remote control event. [ 918.896759][ T5867] m920x_read = error: -19 [ 918.901218][ T5867] dvb-usb: error while querying for an remote control event. [ 919.022552][ T5867] m920x_read = error: -19 [ 919.032226][ T5867] dvb-usb: error while querying for an remote control event. [ 919.192144][ T5867] m920x_read = error: -19 [ 919.197062][ T5867] dvb-usb: error while querying for an remote control event. [ 919.692308][ T5867] m920x_read = error: -19 [ 919.696739][ T5867] dvb-usb: error while querying for an remote control event. [ 919.815378][ T5867] m920x_read = error: -19 [ 919.819768][ T5867] dvb-usb: error while querying for an remote control event. [ 919.967686][ T5867] m920x_read = error: -19 [ 919.982764][ T5867] dvb-usb: error while querying for an remote control event. [ 920.705651][ T5865] m920x_read = error: -19 [ 920.710045][ T5865] dvb-usb: error while querying for an remote control event. [ 920.822445][ T5865] m920x_read = error: -19 [ 921.120434][ T5865] dvb-usb: error while querying for an remote control event. [ 921.164744][T15266] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 921.176365][T15266] Bluetooth: hci1: Injecting HCI hardware error event [ 921.186234][T15266] Bluetooth: hci1: hardware error 0x00 [ 921.302184][ T5865] m920x_read = error: -19 [ 921.306563][ T5865] dvb-usb: error while querying for an remote control event. [ 921.413684][T15513] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 921.425406][ T5865] m920x_read = error: -19 [ 921.429757][ T5865] dvb-usb: error while querying for an remote control event. [ 921.479438][T15310] veth0_vlan: entered promiscuous mode [ 921.535862][T15310] veth1_vlan: entered promiscuous mode [ 921.542562][ T5865] m920x_read = error: -19 [ 921.550756][ T5865] dvb-usb: error while querying for an remote control event. [ 921.648760][T15310] veth0_macvtap: entered promiscuous mode [ 921.703980][ T5865] m920x_read = error: -19 [ 921.710292][ T5865] dvb-usb: error while querying for an remote control event. [ 921.715003][T15310] veth1_macvtap: entered promiscuous mode [ 923.054609][ T8866] m920x_read = error: -19 [ 923.055506][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.058963][ T8866] dvb-usb: error while querying for an remote control event. [ 923.077661][ T29] kauditd_printk_skb: 4123 callbacks suppressed [ 923.077676][ T29] audit: type=1400 audit(1736003613.096:307333): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15520 comm="syz.3.2537" opid=15520 ocomm="syz.3.2537" [ 923.081110][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.084659][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.116013][ C0] audit: audit_lost=191646 audit_rate_limit=0 audit_backlog_limit=64 [ 923.124137][ C0] audit: backlog limit exceeded [ 923.129345][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.135969][ C0] audit: audit_lost=191647 audit_rate_limit=0 audit_backlog_limit=64 [ 923.144089][ C0] audit: backlog limit exceeded [ 923.152167][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.158700][ C0] audit: audit_lost=191648 audit_rate_limit=0 audit_backlog_limit=64 [ 923.238897][ T5865] m920x_read = error: -19 [ 923.241951][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.243690][ T5865] dvb-usb: error while querying for an remote control event. [ 923.261326][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.284053][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.302961][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.313471][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.377123][T15310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.406414][T15266] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 923.573490][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.603602][ T8866] m920x_read = error: -19 [ 923.622302][ T8866] dvb-usb: error while querying for an remote control event. [ 923.638116][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.659449][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.671528][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.689079][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.700679][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.716275][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.729640][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.917182][T15310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.927441][T15310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.936214][T15310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.945246][T15310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.962301][T15310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.962473][ T5865] m920x_read = error: -19 [ 923.975525][ T5865] dvb-usb: error while querying for an remote control event. [ 924.047206][T15538] program syz.1.2541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 924.076571][T15539] netlink: 'syz.2.2540': attribute type 39 has an invalid length. [ 924.102839][ T8866] m920x_read = error: -19 [ 924.114799][ T8866] dvb-usb: error while querying for an remote control event. [ 924.239659][ T5865] m920x_read = error: -19 [ 924.244071][ T5865] dvb-usb: error while querying for an remote control event. [ 924.272255][T15541] netlink: 'syz.5.2543': attribute type 15 has an invalid length. [ 924.280130][T15541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2543'. [ 924.352263][ T5866] m920x_read = error: -19 [ 924.356661][ T5866] dvb-usb: error while querying for an remote control event. [ 924.479419][ T8866] m920x_read = error: -19 [ 924.484478][ T8866] dvb-usb: error while querying for an remote control event. [ 924.504060][T15418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.529245][T15418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.603448][ T5866] m920x_read = error: -19 [ 924.610492][ T5866] dvb-usb: error while querying for an remote control event. [ 924.613140][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.635407][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.825715][ T5866] m920x_read = error: -19 [ 924.830433][ T5866] dvb-usb: error while querying for an remote control event. [ 924.838117][ T8866] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 924.958892][T15554] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 925.489161][ T5866] m920x_read = error: -19 [ 925.493963][ T5866] dvb-usb: error while querying for an remote control event. [ 925.686807][ T5865] m920x_read = error: -19 [ 925.691206][ T5865] dvb-usb: error while querying for an remote control event. [ 925.707722][T10805] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 925.716602][T10805] Bluetooth: hci2: Injecting HCI hardware error event [ 925.732280][T10805] Bluetooth: hci2: hardware error 0x00 [ 925.760369][ T8866] usb 6-1: Using ep0 maxpacket: 16 [ 925.776552][ T8866] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 925.792076][ T8866] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 926.550838][ T5866] m920x_read = error: -19 [ 926.555669][ T5866] dvb-usb: error while querying for an remote control event. [ 926.572736][ T8866] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 926.583874][ T8866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.592435][ T8866] usb 6-1: Product: syz [ 926.596620][ T8866] usb 6-1: Manufacturer: syz [ 926.601372][ T8866] usb 6-1: SerialNumber: syz [ 926.609294][ T8866] usb 6-1: config 0 descriptor?? [ 926.616979][T15548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 926.642384][T15548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 926.682380][ T5865] m920x_read = error: -19 [ 926.686882][ T5865] dvb-usb: error while querying for an remote control event. [ 926.832254][ T5865] m920x_read = error: -19 [ 926.836766][ T5865] dvb-usb: error while querying for an remote control event. [ 926.873600][T15548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 926.890475][T15548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 926.962462][ T5865] m920x_read = error: -19 [ 926.972181][ T5865] dvb-usb: error while querying for an remote control event. [ 927.704546][ T5865] m920x_read = error: -19 [ 927.708927][ T5865] dvb-usb: error while querying for an remote control event. [ 927.717286][ T8866] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 927.728718][ T8866] asix 6-1:0.0: probe with driver asix failed with error -71 [ 927.739088][ T8866] usb 6-1: USB disconnect, device number 18 [ 927.832287][ T5865] m920x_read = error: -19 [ 927.837013][ T5865] dvb-usb: error while querying for an remote control event. [ 927.865069][T10805] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 927.994892][ T8866] m920x_read = error: -19 [ 928.007788][ T8866] dvb-usb: error while querying for an remote control event. [ 928.127791][ T29] kauditd_printk_skb: 3218 callbacks suppressed [ 928.127807][ T29] audit: type=1400 audit(1736003618.676:309676): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15575 comm="syz.5.2552" name="newroot" dev="tmpfs" ino=2 [ 928.614800][ T29] audit: type=1400 audit(1736003618.676:309677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15575 comm="syz.5.2552" name="/" dev="devtmpfs" ino=1 [ 928.639304][T15582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.639312][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.639328][ T5175] audit: audit_lost=191941 audit_rate_limit=0 audit_backlog_limit=64 [ 928.648863][T15583] audit: audit_backlog=66 > audit_backlog_limit=64 [ 928.655655][ T5175] audit: backlog limit exceeded [ 928.666548][ T8866] m920x_read = error: -19 [ 928.677795][T15582] audit: audit_lost=191942 audit_rate_limit=0 audit_backlog_limit=64 [ 928.685954][ T8866] dvb-usb: error while querying for an remote control event. [ 928.700112][ T29] audit: type=1400 audit(1736003618.676:309678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15575 comm="syz.5.2552" name="cpu" dev="devtmpfs" ino=85 [ 928.704058][T15583] audit: audit_lost=191943 audit_rate_limit=0 audit_backlog_limit=64 [ 928.842159][ T8866] m920x_read = error: -19 [ 928.846528][ T8866] dvb-usb: error while querying for an remote control event. [ 928.854022][ T5865] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 929.042269][ T5866] m920x_read = error: -19 [ 929.046637][ T5866] dvb-usb: error while querying for an remote control event. [ 929.098426][T15568] binder_alloc: 15566: binder_alloc_buf, no vma [ 929.162284][ T8866] m920x_read = error: -19 [ 929.166733][ T8866] dvb-usb: error while querying for an remote control event. [ 929.282967][ T8866] m920x_read = error: -19 [ 929.287324][ T8866] dvb-usb: error while querying for an remote control event. [ 929.507018][ T5865] usb 2-1: device not accepting address 36, error -71 [ 929.515291][ T8866] m920x_read = error: -19 [ 929.519660][ T8866] dvb-usb: error while querying for an remote control event. [ 929.775544][ T5866] m920x_read = error: -19 [ 929.799644][ T5866] dvb-usb: error while querying for an remote control event. [ 930.006568][ T8866] m920x_read = error: -19 [ 930.013805][ T8866] dvb-usb: error while querying for an remote control event. [ 930.402267][ T5866] m920x_read = error: -19 [ 930.406823][ T5866] dvb-usb: error while querying for an remote control event. [ 930.542231][ T5866] m920x_read = error: -19 [ 930.546623][ T5866] dvb-usb: error while querying for an remote control event. [ 930.682245][ T5866] m920x_read = error: -19 [ 930.692800][ T5866] dvb-usb: error while querying for an remote control event. [ 930.802239][ T5865] m920x_read = error: -19 [ 930.806738][ T5865] dvb-usb: error while querying for an remote control event. [ 930.925773][ T5865] m920x_read = error: -19 [ 930.930257][ T5865] dvb-usb: error while querying for an remote control event. [ 931.901559][ T5866] m920x_read = error: -19 [ 931.906008][ T5866] dvb-usb: error while querying for an remote control event. [ 931.927577][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.935727][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.674658][ T5865] m920x_read = error: -19 [ 932.682300][ T5865] dvb-usb: error while querying for an remote control event. [ 932.888306][ T5866] m920x_read = error: -19 [ 932.892971][ T5866] dvb-usb: error while querying for an remote control event. [ 933.238235][T15617] audit_log_start: 2229 callbacks suppressed [ 933.238254][T15617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.243300][T15616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.257394][T15616] audit: audit_lost=192179 audit_rate_limit=0 audit_backlog_limit=64 [ 933.265516][T15616] audit: backlog limit exceeded [ 933.270485][T15617] audit: audit_lost=192180 audit_rate_limit=0 audit_backlog_limit=64 [ 933.274923][T15616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.285558][T15616] audit: audit_lost=192181 audit_rate_limit=0 audit_backlog_limit=64 [ 933.293806][T15616] audit: backlog limit exceeded [ 933.298805][T15617] audit: backlog limit exceeded [ 933.303928][T15617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.484738][ T5866] m920x_read = error: -19 [ 933.489104][ T5866] dvb-usb: error while querying for an remote control event. [ 933.596102][T15621] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 934.312160][ T5865] m920x_read = error: -19 [ 934.316621][ T5865] dvb-usb: error while querying for an remote control event. [ 934.591582][ T5865] m920x_read = error: -19 [ 934.605808][ T5865] dvb-usb: error while querying for an remote control event. [ 935.049264][ T5865] m920x_read = error: -19 [ 935.054183][ T5865] dvb-usb: error while querying for an remote control event. [ 935.224704][ T5866] m920x_read = error: -19 [ 935.262444][ T5866] dvb-usb: error while querying for an remote control event. [ 935.375984][ T5866] m920x_read = error: -19 [ 935.388916][ T5866] dvb-usb: error while querying for an remote control event. [ 935.632549][ T5865] m920x_read = error: -19 [ 935.637033][ T5865] dvb-usb: error while querying for an remote control event. [ 936.052539][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 936.222653][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 936.233005][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.264266][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 936.265594][ T5865] m920x_read = error: -19 [ 936.286904][ T5865] dvb-usb: error while querying for an remote control event. [ 936.402503][ T5867] m920x_read = error: -19 [ 936.406883][ T5867] dvb-usb: error while querying for an remote control event. [ 936.413739][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.423668][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 936.431751][ T5901] usb 3-1: SerialNumber: syz [ 936.446294][ T5901] usb 3-1: bad CDC descriptors [ 937.216377][ T5867] m920x_read = error: -19 [ 937.220761][ T5867] dvb-usb: error while querying for an remote control event. [ 937.342122][ T5867] m920x_read = error: -19 [ 937.346509][ T5867] dvb-usb: error while querying for an remote control event. [ 937.378451][T15659] sctp: [Deprecated]: syz.1.2575 (pid 15659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 937.378451][T15659] Use struct sctp_sack_info instead [ 938.145001][ T5867] m920x_read = error: -19 [ 938.149403][ T5867] dvb-usb: error while querying for an remote control event. [ 938.272399][ T5867] m920x_read = error: -19 [ 938.276851][ T5867] dvb-usb: error while querying for an remote control event. [ 938.455323][T15663] audit_log_start: 1991 callbacks suppressed [ 938.455338][T15663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.467957][T15663] audit: audit_lost=192396 audit_rate_limit=0 audit_backlog_limit=64 [ 938.476352][T15663] audit: backlog limit exceeded [ 938.484295][ T5867] m920x_read = error: -19 [ 938.484341][T15663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.495525][T15663] audit: audit_lost=192397 audit_rate_limit=0 audit_backlog_limit=64 [ 938.504146][T15663] audit: backlog limit exceeded [ 938.509153][T15663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.515965][T15663] audit: audit_lost=192398 audit_rate_limit=0 audit_backlog_limit=64 [ 938.520485][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.524107][T15663] audit: backlog limit exceeded [ 938.536621][ T5867] dvb-usb: error while querying for an remote control event. [ 938.662150][ T5867] m920x_read = error: -19 [ 938.666585][ T5867] dvb-usb: error while querying for an remote control event. [ 938.766448][ T5901] usb 3-1: USB disconnect, device number 7 [ 938.782184][ T5865] m920x_read = error: -19 [ 938.786953][ T5865] dvb-usb: error while querying for an remote control event. [ 939.018217][ T5865] m920x_read = error: -19 [ 939.023070][ T5865] dvb-usb: error while querying for an remote control event. [ 939.133313][ T5865] m920x_read = error: -19 [ 939.142100][ T5865] dvb-usb: error while querying for an remote control event. [ 939.262280][ T5865] m920x_read = error: -19 [ 939.268087][ T5865] dvb-usb: error while querying for an remote control event. [ 939.402131][ T5865] m920x_read = error: -19 [ 939.435821][ T5865] dvb-usb: error while querying for an remote control event. [ 939.661493][T15679] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 939.820812][ T5865] m920x_read = error: -19 [ 939.825417][ T5865] dvb-usb: error while querying for an remote control event. [ 939.951328][ T5866] m920x_read = error: -19 [ 939.963668][ T5866] dvb-usb: error while querying for an remote control event. [ 940.088926][ T5866] m920x_read = error: -19 [ 940.106374][ T5866] dvb-usb: error while querying for an remote control event. [ 940.266788][ T5866] m920x_read = error: -19 [ 940.304593][ T5866] dvb-usb: error while querying for an remote control event. [ 940.492156][ T5866] m920x_read = error: -19 [ 940.504325][ T5866] dvb-usb: error while querying for an remote control event. [ 940.622318][ T5866] m920x_read = error: -19 [ 940.630681][ T5866] dvb-usb: error while querying for an remote control event. [ 941.498325][ T5866] m920x_read = error: -19 [ 941.502801][ T5866] dvb-usb: error while querying for an remote control event. [ 941.612215][ T5867] m920x_read = error: -19 [ 941.616592][ T5867] dvb-usb: error while querying for an remote control event. [ 941.732423][ T5866] m920x_read = error: -19 [ 941.736800][ T5866] dvb-usb: error while querying for an remote control event. [ 941.839881][T15721] atomic_op ffff888011ea4998 conn xmit_atomic 0000000000000000 [ 941.863143][ T5867] m920x_read = error: -19 [ 941.867539][ T5867] dvb-usb: error while querying for an remote control event. [ 942.072138][ T5867] m920x_read = error: -19 [ 942.077044][ T5867] dvb-usb: error while querying for an remote control event. [ 942.212140][ T5867] m920x_read = error: -19 [ 942.292261][ T5867] dvb-usb: error while querying for an remote control event. [ 942.482220][ T5867] m920x_read = error: -19 [ 942.486732][ T5867] dvb-usb: error while querying for an remote control event. [ 942.626913][ T5867] m920x_read = error: -19 [ 942.631322][ T5867] dvb-usb: error while querying for an remote control event. [ 942.651668][T15736] openvswitch: netlink: Missing key (keys=40, expected=100) [ 942.656274][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2597'. [ 942.668120][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2597'. [ 942.738985][T15735] team0: entered promiscuous mode [ 942.744604][ T5866] m920x_read = error: -19 [ 942.762505][ T5866] dvb-usb: error while querying for an remote control event. [ 942.772903][T15735] team_slave_0: entered promiscuous mode [ 942.779285][T15735] team_slave_1: entered promiscuous mode [ 942.822493][T10805] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 942.831236][T10805] Bluetooth: hci4: Injecting HCI hardware error event [ 942.841153][T10805] Bluetooth: hci4: hardware error 0x00 [ 942.856767][T15735] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 942.873589][ T5866] m920x_read = error: -19 [ 942.878037][ T5866] dvb-usb: error while querying for an remote control event. [ 942.892834][T15735] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 942.992193][ T5866] m920x_read = error: -19 [ 942.996917][ T5866] dvb-usb: error while querying for an remote control event. [ 943.123615][ T5866] m920x_read = error: -19 [ 943.469131][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.480049][ T29] kauditd_printk_skb: 3778 callbacks suppressed [ 943.480064][ T29] audit: type=1400 audit(1736003634.026:315699): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15749 comm="syz.5.2602" opid=15749 ocomm="syz.5.2602" [ 943.515513][ T5866] dvb-usb: error while querying for an remote control event. [ 944.034396][ C0] llc_conn_state_process: llc_conn_service failed [ 944.084433][ T5866] m920x_read = error: -19 [ 944.088802][ T5866] dvb-usb: error while querying for an remote control event. [ 944.526993][ T8866] m920x_read = error: -19 [ 944.531372][ T8866] dvb-usb: error while querying for an remote control event. [ 944.623637][T15310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 944.645861][ T29] audit: type=1400 audit(1736003634.056:315700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=1 comm="init" name="/" dev="sda1" ino=2 [ 944.669201][T15310] audit: audit_lost=192612 audit_rate_limit=0 audit_backlog_limit=64 [ 944.726853][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 944.727249][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.733422][ C0] audit: audit_lost=192613 audit_rate_limit=0 audit_backlog_limit=64 [ 944.743549][T15746] bond0: (slave rose0): Enslaving as an active interface with an up link [ 944.747436][ C0] audit: backlog limit exceeded [ 944.747739][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 944.747758][ C0] audit: audit_lost=192614 audit_rate_limit=0 audit_backlog_limit=64 [ 944.747775][ C0] audit: backlog limit exceeded [ 944.876712][ T5866] m920x_read = error: -19 [ 944.881103][ T5866] dvb-usb: error while querying for an remote control event. [ 944.992289][ T5866] m920x_read = error: -19 [ 944.996777][ T5866] dvb-usb: error while querying for an remote control event. [ 945.112263][ T8866] m920x_read = error: -19 [ 945.121498][ T8866] dvb-usb: error while querying for an remote control event. [ 945.151749][T10805] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 945.232217][ T8866] m920x_read = error: -19 [ 945.238261][ T8866] dvb-usb: error while querying for an remote control event. [ 945.252486][ T5866] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 945.406857][ T8866] m920x_read = error: -19 [ 945.422186][ T8866] dvb-usb: error while querying for an remote control event. [ 945.786816][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 945.832284][ T8866] m920x_read = error: -19 [ 945.836794][ T8866] dvb-usb: error while querying for an remote control event. [ 945.968056][ T8866] m920x_read = error: -19 [ 946.771515][ T8866] dvb-usb: error while querying for an remote control event. [ 946.955850][ T5866] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 946.955885][ T5866] usb 7-1: can't read configurations, error -61 [ 947.916785][ T5865] m920x_read = error: -19 [ 947.916809][ T5865] dvb-usb: error while querying for an remote control event. [ 948.024376][ T8866] m920x_read = error: -19 [ 948.024400][ T8866] dvb-usb: error while querying for an remote control event. [ 948.919072][ T8866] m920x_read = error: -19 [ 948.919109][ T8866] dvb-usb: error while querying for an remote control event. [ 948.919460][ T5866] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 948.919736][ T29] kauditd_printk_skb: 1573 callbacks suppressed [ 948.919758][ T29] audit: type=1400 audit(1736003639.086:316871): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 948.919796][ T29] audit: type=1400 audit(1736003639.466:316872): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=10789 comm="syz-executor" opid=15768 ocomm="syz.5.2608" [ 948.919828][ T29] audit: type=1400 audit(1736003639.466:316873): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=10789 comm="syz-executor" opid=15768 ocomm="syz.5.2608" [ 949.873563][ T29] audit: type=1400 audit(1736003639.586:316874): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 949.927261][ T29] audit: type=1400 audit(1736003640.476:316875): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5816 comm="syz-executor" opid=15773 ocomm="syz.3.2609" [ 949.927576][ T29] audit: type=1400 audit(1736003640.476:316876): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5816 comm="syz-executor" opid=15773 ocomm="syz.3.2609" [ 950.012612][ T8866] m920x_read = error: -19 [ 950.012635][ T8866] dvb-usb: error while querying for an remote control event. [ 950.168641][ T8866] m920x_read = error: -19 [ 950.168732][ T8866] dvb-usb: error while querying for an remote control event. [ 950.181726][T10789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 950.181798][T10789] audit: audit_lost=192749 audit_rate_limit=0 audit_backlog_limit=64 [ 950.181841][T10789] audit: backlog limit exceeded [ 950.182400][T10789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 950.316017][ T8866] m920x_read = error: -19 [ 950.316038][ T8866] dvb-usb: error while querying for an remote control event. [ 950.428638][ T8866] m920x_read = error: -19 [ 950.428660][ T8866] dvb-usb: error while querying for an remote control event. [ 950.644389][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.669746][ T8866] m920x_read = error: -19 [ 950.669766][ T8866] dvb-usb: error while querying for an remote control event. [ 950.766194][T15788] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 950.772307][ T5865] m920x_read = error: -19 [ 950.772330][ T5865] dvb-usb: error while querying for an remote control event. [ 950.888302][ T5865] m920x_read = error: -19 [ 950.888324][ T5865] dvb-usb: error while querying for an remote control event. [ 950.992262][ T8866] m920x_read = error: -19 [ 950.992284][ T8866] dvb-usb: error while querying for an remote control event. [ 951.039007][T15797] netlink: 'syz.6.2615': attribute type 1 has an invalid length. [ 951.109843][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2615'. [ 951.834418][ T5866] m920x_read = error: -19 [ 951.834440][ T5866] dvb-usb: error while querying for an remote control event. [ 951.862879][T15783] tty tty25: ldisc open failed (-12), clearing slot 24 [ 952.159106][ T8866] m920x_read = error: -19 [ 952.163561][ T8866] dvb-usb: error while querying for an remote control event. [ 952.620130][T15811] input: syz0 as /devices/virtual/input/input37 [ 952.704136][ T8866] m920x_read = error: -19 [ 952.712903][ T8866] dvb-usb: error while querying for an remote control event. [ 952.837343][ T8866] m920x_read = error: -19 [ 952.845155][ T8866] dvb-usb: error while querying for an remote control event. [ 953.734688][ T8866] m920x_read = error: -19 [ 953.739082][ T8866] dvb-usb: error while querying for an remote control event. [ 953.969456][ T5866] m920x_read = error: -19 [ 953.973885][ T5866] dvb-usb: error while querying for an remote control event. [ 954.015661][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 954.032325][ T29] kauditd_printk_skb: 2446 callbacks suppressed [ 954.032341][ T29] audit: type=1400 audit(1736003644.436:318346): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15822 comm="syz.1.2624" opid=15822 ocomm="syz.1.2624" [ 954.270037][ T5866] m920x_read = error: -19 [ 954.297733][ T5866] dvb-usb: error while querying for an remote control event. [ 955.036561][ T29] audit: type=1400 audit(1736003644.546:318347): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.042177][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 955.055947][ T29] audit: type=1400 audit(1736003644.546:318348): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.055984][ T29] audit: type=1400 audit(1736003644.546:318349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.056017][ T29] audit: type=1400 audit(1736003644.546:318350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.056048][ T29] audit: type=1400 audit(1736003644.546:318351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.067730][ T5816] audit: audit_lost=193076 audit_rate_limit=0 audit_backlog_limit=64 [ 955.081994][ T29] audit: type=1400 audit(1736003644.546:318352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.082072][ T29] audit: type=1400 audit(1736003644.546:318353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15830 comm="syz-executor" name="221" dev="tmpfs" ino=1191 [ 955.121441][ T5908] m920x_read = error: -19 [ 955.194169][ T5908] dvb-usb: error while querying for an remote control event. [ 955.302237][T15837] m920x_read = error: -19 [ 955.306696][T15837] dvb-usb: error while querying for an remote control event. [ 956.096123][T15837] m920x_read = error: -19 [ 956.286843][T15837] dvb-usb: error while querying for an remote control event. [ 956.530301][ T5866] m920x_read = error: -19 [ 956.618508][ T5866] dvb-usb: error while querying for an remote control event. [ 956.970057][ T5866] m920x_read = error: -19 [ 956.974820][ T5866] dvb-usb: error while querying for an remote control event. [ 957.100900][ T5866] m920x_read = error: -19 [ 957.244581][ T5866] dvb-usb: error while querying for an remote control event. [ 957.443022][ T5866] m920x_read = error: -19 [ 957.447400][ T5866] dvb-usb: error while querying for an remote control event. [ 957.657169][ T5828] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 957.880775][ T5828] usb 6-1: config 8 has an invalid interface number: 183 but max is 0 [ 958.222893][ T5866] m920x_read = error: -19 [ 958.227277][ T5866] dvb-usb: error while querying for an remote control event. [ 958.305199][ T5828] usb 6-1: config 8 has no interface number 0 [ 958.311356][ T5828] usb 6-1: config 8 interface 183 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 958.338141][ T5828] usb 6-1: config 8 interface 183 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 958.342360][T15837] m920x_read = error: -19 [ 958.348465][ T5828] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=ec.2f [ 958.358562][T15837] dvb-usb: error while querying for an remote control event. [ 958.361385][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.512347][T15837] m920x_read = error: -19 [ 958.516804][T15837] dvb-usb: error while querying for an remote control event. [ 958.562870][T15875] netlink: 'syz.3.2637': attribute type 33 has an invalid length. [ 958.589771][ T5828] usb 6-1: string descriptor 0 read error: -71 [ 958.597687][ T5828] HFC-S_USB 6-1:8.183: probe with driver HFC-S_USB failed with error -5 [ 958.602441][T15875] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2637'. [ 958.633617][ T5828] usb 6-1: USB disconnect, device number 19 [ 958.642247][T15837] m920x_read = error: -19 [ 958.653503][T15837] dvb-usb: error while querying for an remote control event. [ 959.647194][T15262] audit_log_start: 1975 callbacks suppressed [ 959.647206][T15262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 959.662200][ T29] audit: type=1400 audit(1736003649.956:319629): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15885 comm="kworker/u8:2" name="/" dev="sda1" ino=2 [ 959.686259][T15885] audit: audit_backlog=65 > audit_backlog_limit=64 [ 959.692962][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 959.699485][ C0] audit: audit_lost=193310 audit_rate_limit=0 audit_backlog_limit=64 [ 959.707563][ C0] audit: backlog limit exceeded [ 959.712972][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 959.719473][ C0] audit: audit_lost=193311 audit_rate_limit=0 audit_backlog_limit=64 [ 959.727541][ C0] audit: backlog limit exceeded [ 959.742166][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 959.752199][ T5866] m920x_read = error: -19 [ 959.756529][ T5866] dvb-usb: error while querying for an remote control event. [ 959.892267][ T5866] m920x_read = error: -19 [ 959.896644][ T5866] dvb-usb: error while querying for an remote control event. [ 960.283384][ T5866] m920x_read = error: -19 [ 960.292446][ T5866] dvb-usb: error while querying for an remote control event. [ 960.493974][ T5866] m920x_read = error: -19 [ 960.498318][ T5866] dvb-usb: error while querying for an remote control event. [ 960.716719][T15837] m920x_read = error: -19 [ 960.716743][T15837] dvb-usb: error while querying for an remote control event. [ 961.681149][ T5866] m920x_read = error: -19 [ 961.681176][ T5866] dvb-usb: error while querying for an remote control event. [ 961.782385][ T5866] m920x_read = error: -19 [ 961.782407][ T5866] dvb-usb: error while querying for an remote control event. [ 963.712548][ T5866] m920x_read = error: -19 [ 963.712566][ T5866] dvb-usb: error while querying for an remote control event. [ 963.955274][ T5866] m920x_read = error: -19 [ 963.955291][ T5866] dvb-usb: error while querying for an remote control event. [ 964.067673][T15837] m920x_read = error: -19 [ 964.067696][T15837] dvb-usb: error while querying for an remote control event. [ 964.172270][T15837] m920x_read = error: -19 [ 964.172294][T15837] dvb-usb: error while querying for an remote control event. [ 964.345038][T15837] m920x_read = error: -19 [ 964.349436][T15901] tty tty4: ldisc open failed (-12), clearing slot 3 [ 964.357249][T15837] dvb-usb: error while querying for an remote control event. [ 964.669480][ T5866] m920x_read = error: -19 [ 964.674967][ T5866] dvb-usb: error while querying for an remote control event. [ 964.744826][ T29] kauditd_printk_skb: 2727 callbacks suppressed [ 964.744880][ T29] audit: type=1400 audit(1736003655.296:320386): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5816 comm="syz-executor" opid=15889 ocomm="syz.3.2642" [ 964.802734][T15837] m920x_read = error: -19 [ 964.814911][T15837] dvb-usb: error while querying for an remote control event. [ 964.828288][ T29] audit: type=1400 audit(1736003655.296:320387): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5816 comm="syz-executor" opid=15889 ocomm="syz.3.2642" [ 964.828443][ T29] audit: type=1400 audit(1736003655.366:320388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 964.828601][ T29] audit: type=1400 audit(1736003655.366:320389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 964.828721][ T29] audit: type=1400 audit(1736003655.366:320390): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="226" dev="tmpfs" ino=1217 [ 964.828839][ T29] audit: type=1400 audit(1736003655.366:320391): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=15917 comm="syz-executor" opid=15917 ocomm="syz-executor" [ 964.829144][ T29] audit: type=1400 audit(1736003655.366:320392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="226" dev="tmpfs" ino=1217 [ 964.829291][ T29] audit: type=1400 audit(1736003655.366:320393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="226" dev="tmpfs" ino=1217 [ 964.829463][ T29] audit: type=1400 audit(1736003655.366:320394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=15917 comm="syz-executor" name="226" dev="tmpfs" ino=1217 [ 964.829613][ T29] audit: type=1400 audit(1736003655.366:320395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15917 comm="syz-executor" name="226" dev="tmpfs" ino=1217 [ 965.332516][T15837] m920x_read = error: -19 [ 965.336901][T15837] dvb-usb: error while querying for an remote control event. [ 966.030448][ T5866] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 966.133942][ T5908] m920x_read = error: -19 [ 966.138341][ T5908] dvb-usb: error while querying for an remote control event. [ 966.159446][T15924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.252464][T15837] m920x_read = error: -19 [ 966.256968][T15837] dvb-usb: error while querying for an remote control event. [ 966.362733][T15675] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 966.383561][T15837] m920x_read = error: -19 [ 966.433854][T15837] dvb-usb: error while querying for an remote control event. [ 966.582252][T15837] m920x_read = error: -19 [ 966.594031][T15837] dvb-usb: error while querying for an remote control event. [ 966.788339][ T5866] usb 7-1: not running at top speed; connect to a high speed hub [ 966.788544][T15675] usb 6-1: Using ep0 maxpacket: 8 [ 966.807404][T15675] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 966.814586][ T5866] usb 7-1: config 1 has an invalid interface number: 35 but max is 0 [ 966.816518][T15675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.829007][ T5866] usb 7-1: config 1 has no interface number 0 [ 966.850133][T15675] usb 6-1: Product: syz [ 966.851409][ T5866] usb 7-1: config 1 interface 35 has no altsetting 0 [ 966.854760][T15675] usb 6-1: Manufacturer: syz [ 966.872415][ T5908] m920x_read = error: -19 [ 966.876853][ T5908] dvb-usb: error while querying for an remote control event. [ 966.888663][T15675] usb 6-1: SerialNumber: syz [ 967.002831][T15837] m920x_read = error: -19 [ 967.008776][T15837] dvb-usb: error while querying for an remote control event. [ 967.123221][T15837] m920x_read = error: -19 [ 967.123950][T15675] usb 6-1: config 0 descriptor?? [ 967.127628][T15837] dvb-usb: error while querying for an remote control event. [ 967.244325][ T5866] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 967.253697][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=241 [ 967.261890][ T5866] usb 7-1: Product: syz [ 967.266300][ T5866] usb 7-1: Manufacturer: syz [ 967.270913][ T5866] usb 7-1: SerialNumber: syz [ 967.279864][T15837] m920x_read = error: -19 [ 967.284321][T15837] dvb-usb: error while querying for an remote control event. [ 967.467114][T15837] m920x_read = error: -19 [ 967.471517][T15837] dvb-usb: error while querying for an remote control event. [ 968.273550][T15837] m920x_read = error: -19 [ 968.277957][T15837] dvb-usb: error while querying for an remote control event. [ 968.289813][T15675] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 968.319807][ T5866] usb 7-1: can't set config #1, error -71 [ 968.338032][ T5866] usb 7-1: USB disconnect, device number 4 [ 968.393881][ T5908] m920x_read = error: -19 [ 968.398407][ T5908] dvb-usb: error while querying for an remote control event. [ 968.703147][ T5908] m920x_read = error: -19 [ 968.734655][ T5908] dvb-usb: error while querying for an remote control event. [ 968.872154][ T5866] m920x_read = error: -19 [ 968.890278][ T5866] dvb-usb: error while querying for an remote control event. [ 968.934123][T15955] fuse: Unknown parameter 'fD' [ 968.942344][T15955] netlink: 'syz.3.2657': attribute type 1 has an invalid length. [ 969.033538][ T5908] m920x_read = error: -19 [ 969.048954][ T5908] dvb-usb: error while querying for an remote control event. [ 969.182214][ T5908] m920x_read = error: -19 [ 969.186647][ T5908] dvb-usb: error while querying for an remote control event. [ 969.312199][ T5908] m920x_read = error: -19 [ 969.316670][ T5908] dvb-usb: error while querying for an remote control event. [ 970.056780][T15922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.067554][T15675] usb write operation failed. (-71) [ 970.073551][ T29] kauditd_printk_skb: 2677 callbacks suppressed [ 970.073567][ T29] audit: type=1400 audit(1736003660.606:321945): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15958 comm="syz.3.2660" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 970.111504][T15675] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 970.321054][ T5908] m920x_read = error: -19 [ 970.325495][ T5908] dvb-usb: error while querying for an remote control event. [ 970.342342][ T29] audit: type=1400 audit(1736003660.656:321946): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 970.372749][T15675] dvbdev: DVB: registering new adapter (Terratec H7) [ 970.379526][T15675] usb 6-1: media controller created [ 970.386918][T15675] usb read operation failed. (-71) [ 970.394035][T15675] usb write operation failed. (-71) [ 970.400214][T15968] FAULT_INJECTION: forcing a failure. [ 970.400214][T15968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.402551][T15675] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 970.422645][ T29] audit: type=1400 audit(1736003660.656:321947): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 970.422682][ T29] audit: type=1400 audit(1736003660.656:321948): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="i2c-2" dev="devtmpfs" ino=3261 [ 970.422713][ T29] audit: type=1400 audit(1736003660.656:321949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15675 comm="kworker/1:1" name="i2c" dev="debugfs" ino=9 [ 970.422744][ T29] audit: type=1400 audit(1736003660.676:321950): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15964 comm="syz.2.2661" opid=15964 ocomm="syz.2.2661" [ 970.422776][ T29] audit: type=1400 audit(1736003660.686:321951): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=15964 comm="syz.2.2661" opid=15964 ocomm="syz.2.2661" [ 970.422815][ T29] audit: type=1400 audit(1736003660.916:321952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 970.422846][ T29] audit: type=1400 audit(1736003660.916:321953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 970.422879][ T29] audit: type=1400 audit(1736003660.916:321954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15967 comm="syz-executor" name="506" dev="tmpfs" ino=2753 [ 970.425954][T15968] CPU: 0 UID: 0 PID: 15968 Comm: syz.1.2662 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 970.441764][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.460559][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 970.479584][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.498433][T15968] Call Trace: [ 970.498445][T15968] [ 970.517388][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.536566][T15968] dump_stack_lvl+0x241/0x360 [ 970.555820][ C1] hrtimer: interrupt took 114055331 ns [ 970.574980][T15968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.635343][T15968] ? __pfx__printk+0x10/0x10 [ 970.639958][T15968] ? __pfx_lock_release+0x10/0x10 [ 970.645007][T15968] should_fail_ex+0x3b0/0x4e0 [ 970.649705][T15968] _copy_from_user+0x2f/0xc0 [ 970.654317][T15968] copy_msghdr_from_user+0xae/0x680 [ 970.655858][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.659532][T15968] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 970.668633][T15971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2661'. [ 970.671289][T15968] ? __fget_files+0x2a/0x410 [ 970.684865][T15968] ? __fget_files+0x2a/0x410 [ 970.689484][T15968] __sys_sendmsg+0x209/0x350 [ 970.694096][T15968] ? __pfx_lock_release+0x10/0x10 [ 970.699145][T15968] ? __pfx___sys_sendmsg+0x10/0x10 [ 970.704299][T15968] ? __pfx_vfs_write+0x10/0x10 [ 970.709113][T15968] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 970.715464][T15968] ? do_syscall_64+0x100/0x230 [ 970.720268][T15968] ? do_syscall_64+0xb6/0x230 [ 970.724977][T15968] do_syscall_64+0xf3/0x230 [ 970.729501][T15968] ? clear_bhb_loop+0x35/0x90 [ 970.734195][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.740109][T15968] RIP: 0033:0x7f8612b85d29 [ 970.744538][T15968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.764168][T15968] RSP: 002b:00007f86109f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.772607][T15968] RAX: ffffffffffffffda RBX: 00007f8612d75fa0 RCX: 00007f8612b85d29 [ 970.780596][T15968] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 970.788579][T15968] RBP: 00007f86109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.796572][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.804566][T15968] R13: 0000000000000000 R14: 00007f8612d75fa0 R15: 00007ffff82ece48 [ 970.812565][T15968] [ 970.821106][ T5908] m920x_read = error: -19 [ 970.825531][ T5908] dvb-usb: error while querying for an remote control event. [ 970.931863][T15675] usb 6-1: USB disconnect, device number 20 [ 971.137269][ T5908] m920x_read = error: -19 [ 971.722627][T15978] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2663'. [ 971.834800][ T5908] dvb-usb: error while querying for an remote control event. [ 971.930923][T15977] netlink: 'syz.5.2663': attribute type 2 has an invalid length. [ 971.952239][ T5908] m920x_read = error: -19 [ 971.956689][ T5908] dvb-usb: error while querying for an remote control event. [ 972.175003][ T5908] m920x_read = error: -19 [ 972.183935][ T5866] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 972.564155][ T5908] dvb-usb: error while querying for an remote control event. [ 972.684788][T15837] m920x_read = error: -19 [ 972.689268][T15837] dvb-usb: error while querying for an remote control event. [ 972.818624][T15837] m920x_read = error: -19 [ 972.823086][T15837] dvb-usb: error while querying for an remote control event. [ 973.024380][T15837] m920x_read = error: -19 [ 973.028907][T15837] dvb-usb: error while querying for an remote control event. [ 973.108582][ T5908] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 973.232311][T15837] m920x_read = error: -19 [ 973.272151][T15837] dvb-usb: error while querying for an remote control event. [ 973.318962][ T5866] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 973.327842][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.338095][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 973.347108][ T5866] usb 3-1: config 1 has no interface number 0 [ 973.353342][ T5866] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 973.364163][ T5866] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 973.494160][ T8866] m920x_read = error: -19 [ 973.498631][ T8866] dvb-usb: error while querying for an remote control event. [ 973.610860][T16001] program syz.3.2668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 974.262821][ T8866] m920x_read = error: -19 [ 974.267219][ T8866] dvb-usb: error while querying for an remote control event. [ 974.276498][ T5908] usb 7-1: not running at top speed; connect to a high speed hub [ 974.285407][ T5908] usb 7-1: config 1 has an invalid interface number: 35 but max is 0 [ 974.293543][ T5908] usb 7-1: config 1 has no interface number 0 [ 974.299622][ T5908] usb 7-1: config 1 interface 35 has no altsetting 0 [ 974.327798][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.337656][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.352123][ T5866] usb 3-1: Product: syz [ 974.358746][ T5866] usb 3-1: Manufacturer: syz [ 974.369136][ T5866] usb 3-1: SerialNumber: syz [ 974.378952][ T5908] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 974.388599][ T8866] m920x_read = error: -19 [ 974.393070][ T8866] dvb-usb: error while querying for an remote control event. [ 974.400685][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=241 [ 974.412534][ T5908] usb 7-1: Product: syz [ 974.502470][ T8866] m920x_read = error: -19 [ 974.507145][ T8866] dvb-usb: error while querying for an remote control event. [ 975.085509][ T5827] audit_log_start: 1750 callbacks suppressed [ 975.085526][ T5827] audit: audit_backlog=66 > audit_backlog_limit=64 [ 975.085549][T10789] audit: audit_backlog=66 > audit_backlog_limit=64 [ 975.091532][ T5827] audit: audit_lost=194552 audit_rate_limit=0 audit_backlog_limit=64 [ 975.101527][T15983] audit: audit_backlog=66 > audit_backlog_limit=64 [ 975.114814][ T29] audit: type=1400 audit(1736003665.636:323088): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5827 comm="syz-executor" path="/509" dev="tmpfs" ino=2768 [ 975.119649][ T5908] usb 7-1: Manufacturer: syz [ 975.142072][T10789] audit: audit_lost=194553 audit_rate_limit=0 audit_backlog_limit=64 [ 975.143194][ T5908] usb 7-1: SerialNumber: syz [ 975.151027][T10789] audit: backlog limit exceeded [ 975.151048][T10789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 975.151063][T10789] audit: audit_lost=194554 audit_rate_limit=0 audit_backlog_limit=64 [ 975.172133][ T5816] audit: audit_backlog=66 > audit_backlog_limit=64 [ 975.495660][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.504916][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.089053][ T8866] m920x_read = error: -19 [ 976.093580][ T8866] dvb-usb: error while querying for an remote control event. [ 976.163996][ T5908] usb 7-1: can't set config #1, error -71 [ 976.193401][ T5908] usb 7-1: USB disconnect, device number 5 [ 976.206908][ T8866] m920x_read = error: -19 [ 976.211289][ T8866] dvb-usb: error while querying for an remote control event. [ 976.347813][ T8866] m920x_read = error: -19 [ 976.435552][ T8866] dvb-usb: error while querying for an remote control event. [ 976.448143][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.471659][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.496965][ T8866] usb 3-1: USB disconnect, device number 8 [ 976.572295][ T5908] m920x_read = error: -19 [ 976.576660][ T5908] dvb-usb: error while querying for an remote control event. [ 976.753226][T15418] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.278052][T16021] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2677'. [ 977.306550][ T8866] m920x_read = error: -19 [ 977.314567][ T8866] dvb-usb: error while querying for an remote control event. [ 977.418863][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2677'. [ 977.445425][ T8866] m920x_read = error: -19 [ 977.449791][ T8866] dvb-usb: error while querying for an remote control event. [ 977.468996][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2677'. [ 977.498931][T16021] netlink: 'syz.6.2677': attribute type 7 has an invalid length. [ 977.667397][ T8866] m920x_read = error: -19 [ 977.671804][ T8866] dvb-usb: error while querying for an remote control event. [ 977.690378][T15418] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.903889][ T5866] m920x_read = error: -19 [ 977.908334][ T5866] dvb-usb: error while querying for an remote control event. [ 977.943211][T15418] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.981200][T15266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.665774][ T8866] m920x_read = error: -19 [ 978.670157][ T8866] dvb-usb: error while querying for an remote control event. [ 978.723258][T15266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.731881][T15266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.774625][T15266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.803349][ T5866] m920x_read = error: -19 [ 978.807713][ T5866] dvb-usb: error while querying for an remote control event. [ 978.815962][T15418] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.418226][ T8866] m920x_read = error: -19 [ 979.422826][ T8866] dvb-usb: error while querying for an remote control event. [ 979.467385][T15266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 980.422198][ T5866] m920x_read = error: -19 [ 980.426599][ T5866] dvb-usb: error while querying for an remote control event. [ 980.434767][ T29] kauditd_printk_skb: 3406 callbacks suppressed [ 980.434783][ T29] audit: type=1400 audit(1736003670.236:324526): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16043 comm="syz.1.2687" name="newroot" dev="tmpfs" ino=2 [ 980.460334][ T29] audit: type=1400 audit(1736003670.236:324527): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16043 comm="syz.1.2687" name="/" dev="devtmpfs" ino=1 [ 980.493151][ T29] audit: type=1400 audit(1736003670.236:324528): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16043 comm="syz.1.2687" name="char" dev="devtmpfs" ino=1318 [ 980.522124][ T29] audit: type=1400 audit(1736003670.236:324529): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16043 comm="syz.1.2687" name="char" dev="devtmpfs" ino=1318 [ 980.541488][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.586784][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.602240][ T5827] audit: audit_lost=195211 audit_rate_limit=0 audit_backlog_limit=64 [ 980.622075][ T5827] audit: backlog limit exceeded [ 980.626981][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.704042][T16058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.710587][T16058] audit: audit_lost=195212 audit_rate_limit=0 audit_backlog_limit=64 [ 980.778236][ T8866] m920x_read = error: -19 [ 980.782799][ T8866] dvb-usb: error while querying for an remote control event. [ 980.893147][ T5866] m920x_read = error: -19 [ 980.897970][ T5866] dvb-usb: error while querying for an remote control event. [ 981.079531][T15266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.155121][ T5866] m920x_read = error: -19 [ 981.238714][ T5866] dvb-usb: error while querying for an remote control event. [ 981.357354][T16064] ax25_connect(): syz.2.2692 uses autobind, please contact jreuter@yaina.de [ 981.372356][ T5866] m920x_read = error: -19 [ 981.376803][ T5866] dvb-usb: error while querying for an remote control event. [ 981.553530][T16064] tipc: Started in network mode [ 981.558467][T16064] tipc: Node identity 00000000000000000079940000000001, cluster identity 4711 [ 981.567842][T16064] tipc: Enabling of bearer rejected, failed to enable media [ 982.378720][ T5866] m920x_read = error: -19 [ 982.383147][ T5866] dvb-usb: error while querying for an remote control event. [ 982.661140][T15418] vlan2: left promiscuous mode [ 982.672104][T15418] batadv0: left promiscuous mode [ 983.205150][T15418] bridge0: port 1(vlan2) entered disabled state [ 983.223247][T10805] Bluetooth: hci1: command tx timeout [ 983.245476][T15418] bridge_slave_1: left allmulticast mode [ 983.270859][T15418] bridge_slave_1: left promiscuous mode [ 983.278541][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.291406][ T8866] m920x_read = error: -19 [ 983.295878][ T8866] dvb-usb: error while querying for an remote control event. [ 983.413128][ T8866] m920x_read = error: -19 [ 983.422096][ T8866] dvb-usb: error while querying for an remote control event. [ 983.532179][ T5866] m920x_read = error: -19 [ 983.536542][ T5866] dvb-usb: error while querying for an remote control event. [ 983.652261][ T5866] m920x_read = error: -19 [ 983.658896][ T5866] dvb-usb: error while querying for an remote control event. [ 983.681203][T16080] FAULT_INJECTION: forcing a failure. [ 983.681203][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.681247][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.5.2693 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 983.681272][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 983.681285][T16080] Call Trace: [ 983.681293][T16080] [ 983.681302][T16080] dump_stack_lvl+0x241/0x360 [ 983.681332][T16080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.681355][T16080] ? __pfx__printk+0x10/0x10 [ 983.681380][T16080] ? __pfx_lock_release+0x10/0x10 [ 983.681409][T16080] should_fail_ex+0x3b0/0x4e0 [ 983.681434][T16080] _copy_from_user+0x2f/0xc0 [ 983.681459][T16080] __sys_bpf+0x1a4/0x810 [ 983.681481][T16080] ? __pfx___sys_bpf+0x10/0x10 [ 983.681510][T16080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 983.681533][T16080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 983.681555][T16080] ? do_syscall_64+0x100/0x230 [ 983.681584][T16080] __x64_sys_bpf+0x7c/0x90 [ 983.681609][T16080] do_syscall_64+0xf3/0x230 [ 983.681633][T16080] ? clear_bhb_loop+0x35/0x90 [ 983.681654][T16080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.681679][T16080] RIP: 0033:0x7fb2ae185d29 [ 983.681697][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.681713][T16080] RSP: 002b:00007fb2aef67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.681736][T16080] RAX: ffffffffffffffda RBX: 00007fb2ae376080 RCX: 00007fb2ae185d29 [ 983.681751][T16080] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 983.681765][T16080] RBP: 00007fb2aef67090 R08: 0000000000000000 R09: 0000000000000000 [ 983.681779][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.681792][T16080] R13: 0000000000000000 R14: 00007fb2ae376080 R15: 00007ffe68613808 [ 983.681821][T16080] [ 983.835279][ T5866] m920x_read = error: -19 [ 983.835322][ T5866] dvb-usb: error while querying for an remote control event. [ 983.942353][ T5908] m920x_read = error: -19 [ 983.942392][ T5908] dvb-usb: error while querying for an remote control event. [ 984.333409][ T5866] m920x_read = error: -19 [ 984.341160][T16078] tty tty23: ldisc open failed (-12), clearing slot 22 [ 984.344359][ T5866] dvb-usb: error while querying for an remote control event. [ 984.956559][T15418] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 984.965336][T15418] ip6gretap2 (unregistering): left promiscuous mode [ 985.002225][T15418] ip6gretap2 (unregistering): left allmulticast mode [ 985.079833][ T5866] m920x_read = error: -19 [ 985.085109][ T5866] dvb-usb: error while querying for an remote control event. [ 985.220784][ T5866] m920x_read = error: -19 [ 985.232106][ T5866] dvb-usb: error while querying for an remote control event. [ 985.303575][T15266] Bluetooth: hci1: command tx timeout [ 985.362262][ T5866] m920x_read = error: -19 [ 985.366874][ T5866] dvb-usb: error while querying for an remote control event. [ 985.558711][ T5866] m920x_read = error: -19 [ 985.573438][ T5866] dvb-usb: error while querying for an remote control event. [ 985.645548][ T29] kauditd_printk_skb: 4432 callbacks suppressed [ 985.645587][ T29] audit: type=1400 audit(1736003676.196:326173): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5805 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 985.725407][ T29] audit: type=1400 audit(1736003676.196:326174): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16090 comm="syz.2.2698" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 985.748966][ T29] audit: type=1400 audit(1736003676.196:326175): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16090 comm="syz.2.2698" saddr=10.128.0.169 src=30008 daddr=10.128.10.2 dest=52946 netif=eth0 [ 985.788251][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.800088][T15262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.806970][T15262] audit: audit_lost=196145 audit_rate_limit=0 audit_backlog_limit=64 [ 985.811636][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.815169][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.821570][ C1] audit: audit_lost=196146 audit_rate_limit=0 audit_backlog_limit=64 [ 985.828081][ C0] audit: audit_lost=196147 audit_rate_limit=0 audit_backlog_limit=64 [ 985.956695][ T5866] m920x_read = error: -19 [ 985.961189][ T5866] dvb-usb: error while querying for an remote control event. [ 986.112486][T15837] m920x_read = error: -19 [ 986.118407][T15837] dvb-usb: error while querying for an remote control event. [ 986.866762][T15837] m920x_read = error: -19 [ 986.872160][T15837] dvb-usb: error while querying for an remote control event. [ 987.063996][T15837] m920x_read = error: -19 [ 987.162306][T15837] dvb-usb: error while querying for an remote control event. [ 987.354844][T15837] m920x_read = error: -19 [ 987.362219][T15837] dvb-usb: error while querying for an remote control event. [ 987.387735][T15266] Bluetooth: hci1: command tx timeout [ 987.492198][ T5866] m920x_read = error: -19 [ 987.496569][ T5866] dvb-usb: error while querying for an remote control event. [ 988.206366][ T5866] m920x_read = error: -19 [ 988.210749][ T5866] dvb-usb: error while querying for an remote control event. [ 988.328669][ T8866] m920x_read = error: -19 [ 988.328691][ T8866] dvb-usb: error while querying for an remote control event. [ 988.608274][ T8866] m920x_read = error: -19 [ 988.612739][ T8866] dvb-usb: error while querying for an remote control event. [ 988.691273][T15418] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.761550][ T5866] m920x_read = error: -19 [ 988.766002][ T5866] dvb-usb: error while querying for an remote control event. [ 988.831685][T15418] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.844202][T15418] . (unregistering): Released all slaves [ 988.861146][T15418] bond1 (unregistering): Released all slaves [ 988.891499][T15418] bond2 (unregistering): Released all slaves [ 988.906291][ T5866] m920x_read = error: -19 [ 988.910653][ T5866] dvb-usb: error while querying for an remote control event. [ 989.022284][ T8866] m920x_read = error: -19 [ 989.022304][ T8866] dvb-usb: error while querying for an remote control event. [ 989.131265][T16141] bond0: Device is already in use. [ 989.132486][ T8866] m920x_read = error: -19 [ 989.132508][ T8866] dvb-usb: error while querying for an remote control event. [ 989.136928][T15418] tipc: Disabling bearer [ 989.137176][T15418] tipc: Left network mode [ 989.221406][T16142] binder: 16133:16142 ioctl c018620c 20000080 returned -22 [ 989.259070][ T8866] m920x_read = error: -19 [ 989.259092][ T8866] dvb-usb: error while querying for an remote control event. [ 989.362137][ T8866] m920x_read = error: -19 [ 989.362158][ T8866] dvb-usb: error while querying for an remote control event. [ 989.463642][T15266] Bluetooth: hci1: command tx timeout [ 989.472684][ T8866] m920x_read = error: -19 [ 989.472707][ T8866] dvb-usb: error while querying for an remote control event. [ 989.582528][ T8866] m920x_read = error: -19 [ 989.582550][ T8866] dvb-usb: error while querying for an remote control event. [ 989.692330][ T8866] m920x_read = error: -19 [ 989.696699][ T8866] dvb-usb: error while querying for an remote control event. [ 989.822273][ T5866] m920x_read = error: -19 [ 989.826649][ T5866] dvb-usb: error while querying for an remote control event. [ 990.617699][ T5866] m920x_read = error: -19 [ 990.622532][ T5866] dvb-usb: error while querying for an remote control event. [ 990.665111][T16034] chnl_net:caif_netlink_parms(): no params data found [ 990.698539][ T29] kauditd_printk_skb: 3907 callbacks suppressed [ 990.698554][ T29] audit: type=1400 audit(1736003681.246:327894): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16155 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 990.716974][T15262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.732408][T15837] m920x_read = error: -19 [ 990.736774][T15837] dvb-usb: error while querying for an remote control event. [ 990.748593][T16157] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.755214][T16157] audit: audit_lost=196879 audit_rate_limit=0 audit_backlog_limit=64 [ 990.763526][T16156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.770059][T16156] audit: audit_lost=196880 audit_rate_limit=0 audit_backlog_limit=64 [ 990.776962][ T29] audit: type=1400 audit(1736003681.246:327895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16155 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 990.778189][T16156] audit: backlog limit exceeded [ 990.802455][T16157] audit: backlog limit exceeded [ 990.803604][ T29] audit: type=1400 audit(1736003681.246:327896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16155 comm="syz-executor" name="522" dev="tmpfs" ino=2834 [ 990.852326][ T8866] m920x_read = error: -19 [ 990.856695][ T8866] dvb-usb: error while querying for an remote control event. [ 990.953904][T15418] hsr_slave_0: left promiscuous mode [ 990.961599][T15418] hsr_slave_1: left promiscuous mode [ 990.972360][ T8866] m920x_read = error: -19 [ 990.977132][ T8866] dvb-usb: error while querying for an remote control event. [ 990.982261][T16159] netlink: 'syz.1.2717': attribute type 1 has an invalid length. [ 991.033893][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.044305][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2720'. [ 991.063388][T15418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.077561][T16159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2717'. [ 991.092190][T15837] m920x_read = error: -19 [ 991.096603][T15837] dvb-usb: error while querying for an remote control event. [ 991.104764][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.129327][T15418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.192211][ T5866] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 991.426531][T15418] batadv0: left allmulticast mode [ 991.472881][T15418] veth1_macvtap: left promiscuous mode [ 991.478598][T15418] veth0_macvtap: left promiscuous mode [ 991.576795][ T8866] m920x_read = error: -19 [ 991.581580][ T8866] dvb-usb: error while querying for an remote control event. [ 991.596417][ T5866] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 991.604615][T15418] veth1_vlan: left promiscuous mode [ 991.604744][T15418] veth0_vlan: left promiscuous mode [ 991.610051][ T5866] usb 3-1: config 0 has no interface number 0 [ 991.631533][ T5866] usb 3-1: config 0 interface 86 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 991.864051][ T8866] m920x_read = error: -19 [ 991.868418][ T8866] dvb-usb: error while querying for an remote control event. [ 991.876057][ T5866] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid maxpacket 520, setting to 64 [ 991.888032][ T5866] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 991.899004][ T5866] usb 3-1: config 0 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.909825][ T5866] usb 3-1: config 0 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 991.921761][ T5866] usb 3-1: config 0 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.934235][ T5866] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a8d, bcdDevice=82.a8 [ 991.943433][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.956609][ T5866] usb 3-1: config 0 descriptor?? [ 991.968190][T16163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 991.993842][ T8866] m920x_read = error: -19 [ 991.998228][ T8866] dvb-usb: error while querying for an remote control event. [ 992.136328][ T5866] m920x_read = error: -19 [ 992.149196][ T5866] dvb-usb: error while querying for an remote control event. [ 992.260708][ T5828] usb 3-1: USB disconnect, device number 9 [ 992.292257][ T5866] m920x_read = error: -19 [ 992.988916][ T5866] dvb-usb: error while querying for an remote control event. [ 993.105843][ T5866] m920x_read = error: -19 [ 993.110222][ T5866] dvb-usb: error while querying for an remote control event. [ 993.146232][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.153324][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.223061][ T5866] m920x_read = error: -19 [ 993.227419][ T5866] dvb-usb: error while querying for an remote control event. [ 994.249197][ T5866] m920x_read = error: -19 [ 994.255062][ T5866] dvb-usb: error while querying for an remote control event. [ 994.441076][ T5866] m920x_read = error: -19 [ 994.445578][ T5866] dvb-usb: error while querying for an remote control event. [ 994.493599][T15418] team0 (unregistering): Port device team_slave_1 removed [ 994.540493][T15418] team0 (unregistering): Port device team_slave_0 removed [ 994.564523][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 994.564699][ T5908] m920x_read = error: -19 [ 994.578359][ T5908] dvb-usb: error while querying for an remote control event. [ 994.747340][ T5901] usb 3-1: config 2 has an invalid interface number: 248 but max is 1 [ 994.765809][ T5901] usb 3-1: config 2 has an invalid interface number: 254 but max is 1 [ 994.775487][ T5908] m920x_read = error: -19 [ 994.780326][ T5908] dvb-usb: error while querying for an remote control event. [ 994.796599][ T5901] usb 3-1: config 2 has no interface number 0 [ 994.802931][ T5901] usb 3-1: config 2 has no interface number 1 [ 994.809216][ T5901] usb 3-1: config 2 interface 248 has no altsetting 0 [ 994.822962][ T5901] usb 3-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice=37.14 [ 994.832905][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.840937][ T5901] usb 3-1: Product: syz [ 994.848732][ T5901] usb 3-1: Manufacturer: syz [ 995.054748][ T5901] usb 3-1: SerialNumber: syz [ 995.462992][ T5901] ftdi_sio 3-1:2.248: FTDI USB Serial Device converter detected [ 995.471488][ T5901] ftdi_sio ttyUSB0: unknown device type: 0x3714 [ 995.473011][ T5866] m920x_read = error: -19 [ 995.482185][ T5866] dvb-usb: error while querying for an remote control event. [ 995.503337][ T5901] ftdi_sio 3-1:2.254: FTDI USB Serial Device converter detected [ 995.511307][ T5901] ftdi_sio ttyUSB1: unknown device type: 0x3714 [ 995.520124][ T5901] usb 3-1: USB disconnect, device number 10 [ 995.530002][ T5901] ftdi_sio 3-1:2.248: device disconnected [ 995.537437][ T5901] ftdi_sio 3-1:2.254: device disconnected [ 995.597032][ T5908] m920x_read = error: -19 [ 995.601406][ T5908] dvb-usb: error while querying for an remote control event. [ 995.687279][T16174] bridge_slave_0: left allmulticast mode [ 995.695367][T16174] bridge_slave_0: left promiscuous mode [ 995.701038][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.710959][T16174] bridge_slave_1: left allmulticast mode [ 995.714222][ T5908] m920x_read = error: -19 [ 995.721054][ T5908] dvb-usb: error while querying for an remote control event. [ 995.730195][T16174] bridge_slave_1: left promiscuous mode [ 995.737009][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.748057][T16174] bond0: (slave bond_slave_0): Releasing backup interface [ 995.761136][T16174] bond0: (slave bond_slave_1): Releasing backup interface [ 995.800156][T16174] team0: Port device team_slave_0 removed [ 995.819701][T16174] team0: Port device team_slave_1 removed [ 995.826320][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.833868][ T5908] m920x_read = error: -19 [ 995.838194][ T5908] dvb-usb: error while querying for an remote control event. [ 995.841855][T16174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.855374][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.863120][T16174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.877122][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2723'. [ 995.919836][ T29] kauditd_printk_skb: 1455 callbacks suppressed [ 995.919852][ T29] audit: type=1400 audit(1736003686.466:329068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 995.921419][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.926455][ T29] audit: type=1400 audit(1736003686.466:329069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 995.952139][ T5908] m920x_read = error: -19 [ 995.952160][ T5908] dvb-usb: error while querying for an remote control event. [ 995.970804][ T5827] audit: audit_lost=196976 audit_rate_limit=0 audit_backlog_limit=64 [ 995.971877][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.987196][ T5827] audit: backlog limit exceeded [ 996.010862][T15310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.011049][T15262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.019312][T15310] audit: audit_lost=196977 audit_rate_limit=0 audit_backlog_limit=64 [ 996.033001][T15310] audit: backlog limit exceeded [ 996.037952][T15310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.099026][T16206] netlink: 'syz.1.2729': attribute type 41 has an invalid length. [ 996.112386][ T5908] m920x_read = error: -19 [ 996.116748][ T5908] dvb-usb: error while querying for an remote control event. [ 996.275961][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.289256][ T5908] m920x_read = error: -19 [ 996.293708][ T5908] dvb-usb: error while querying for an remote control event. [ 996.542483][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.549697][T16034] bridge_slave_0: entered allmulticast mode [ 996.718869][ T5908] m920x_read = error: -19 [ 997.341737][ T5908] dvb-usb: error while querying for an remote control event. [ 997.363793][T16034] bridge_slave_0: entered promiscuous mode [ 997.386699][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.411802][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.428696][T16034] bridge_slave_1: entered allmulticast mode [ 997.442217][T16034] bridge_slave_1: entered promiscuous mode [ 997.500530][ T8866] m920x_read = error: -19 [ 997.598022][ T8866] dvb-usb: error while querying for an remote control event. [ 997.689181][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 997.940498][ T5908] m920x_read = error: -19 [ 997.951287][ T5908] dvb-usb: error while querying for an remote control event. [ 998.083015][ T8866] m920x_read = error: -19 [ 998.088052][ T8866] dvb-usb: error while querying for an remote control event. [ 998.284081][ T8866] m920x_read = error: -19 [ 998.362260][ T8866] dvb-usb: error while querying for an remote control event. [ 998.693896][ T8866] m920x_read = error: -19 [ 998.702179][ T8866] dvb-usb: error while querying for an remote control event. [ 998.916442][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.052026][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.199837][ T8866] m920x_read = error: -19 [ 999.204324][ T8866] dvb-usb: error while querying for an remote control event. [ 999.322153][ T8866] m920x_read = error: -19 [ 999.326724][ T8866] dvb-usb: error while querying for an remote control event. [ 999.452263][ T8866] m920x_read = error: -19 [ 999.456632][ T8866] dvb-usb: error while querying for an remote control event. [ 999.572143][ T5908] m920x_read = error: -19 [ 999.576511][ T5908] dvb-usb: error while querying for an remote control event. [ 999.606070][T16034] team0: Port device team_slave_0 added [ 999.639869][T16034] team0: Port device team_slave_1 added [ 999.877524][ T8866] m920x_read = error: -19 [ 999.881907][ T8866] dvb-usb: error while querying for an remote control event. [ 1000.631467][ T5908] m920x_read = error: -19 [ 1000.636020][ T5908] dvb-usb: error while querying for an remote control event. [ 1000.936229][T16256] audit_log_start: 2428 callbacks suppressed [ 1000.936247][T16256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.948824][T16256] audit: audit_lost=197280 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.957007][T16256] audit: backlog limit exceeded [ 1000.970068][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.976657][ C1] audit: audit_lost=197281 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.984767][ C1] audit: backlog limit exceeded [ 1001.068027][T16256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1001.074933][T16256] audit: audit_lost=197282 audit_rate_limit=0 audit_backlog_limit=64 [ 1001.083165][T16256] audit: backlog limit exceeded [ 1001.088251][T16256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1001.292637][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.299603][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.325501][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.440736][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.589561][ T8866] m920x_read = error: -19 [ 1001.594191][ T8866] dvb-usb: error while querying for an remote control event. [ 1001.595315][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.609468][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.779823][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.903079][T16263] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1002.318289][T16034] hsr_slave_0: entered promiscuous mode [ 1002.371884][T16034] hsr_slave_1: entered promiscuous mode [ 1002.432497][T16034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.618139][ T5908] m920x_read = error: -19 [ 1002.622582][ T5908] dvb-usb: error while querying for an remote control event. [ 1002.647049][T16034] Cannot create hsr debugfs directory [ 1003.228643][ T8866] m920x_read = error: -19 [ 1003.233117][ T8866] dvb-usb: error while querying for an remote control event. [ 1003.364824][T16276] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2750'. [ 1003.946119][ T5908] m920x_read = error: -19 [ 1003.950603][ T5908] dvb-usb: error while querying for an remote control event. [ 1004.251001][ T8866] m920x_read = error: -19 [ 1004.268560][ T8866] dvb-usb: error while querying for an remote control event. [ 1004.822236][ T5908] m920x_read = error: -19 [ 1004.826625][ T5908] dvb-usb: error while querying for an remote control event. [ 1004.943016][ T8866] m920x_read = error: -19 [ 1004.948155][ T8866] dvb-usb: error while querying for an remote control event. [ 1005.062267][ T8866] m920x_read = error: -19 [ 1005.066654][ T8866] dvb-usb: error while querying for an remote control event. [ 1005.359430][T16034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1005.469679][T16034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1005.546249][ T8866] m920x_read = error: -19 [ 1005.550708][ T8866] dvb-usb: error while querying for an remote control event. [ 1005.556012][T16034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1005.586636][T16034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1005.665035][ T8866] m920x_read = error: -19 [ 1005.669477][ T8866] dvb-usb: error while querying for an remote control event. [ 1005.684155][ T5901] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1005.818353][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.852260][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1005.874850][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.901196][ T5908] m920x_read = error: -19 [ 1005.906089][ T5908] dvb-usb: error while querying for an remote control event. [ 1005.916990][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.927821][ T5901] usb 3-1: config 0 interface 0 altsetting 8 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.939460][ T5901] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1005.950783][ T5901] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1005.952273][ T29] kauditd_printk_skb: 2591 callbacks suppressed [ 1005.952290][ T29] audit: type=1400 audit(1736003696.476:332704): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1005.960606][ T5901] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.966988][ T29] audit: type=1400 audit(1736003696.476:332705): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1005.967026][ T29] audit: type=1400 audit(1736003696.476:332706): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1005.967059][ T29] audit: type=1400 audit(1736003696.476:332707): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=16303 comm="syz-executor" opid=16303 ocomm="syz-executor" [ 1005.967090][ T29] audit: type=1400 audit(1736003696.476:332708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1005.967122][ T29] audit: type=1400 audit(1736003696.476:332709): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1005.967153][ T29] audit: type=1400 audit(1736003696.476:332710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1005.987182][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1006.038701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.147068][ T5901] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1006.156325][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.231296][T16034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.242127][T16034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.281627][ T29] audit: type=1400 audit(1736003696.476:332711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1006.311547][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.318687][T15418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.332110][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.339241][T15418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.347126][ T29] audit: type=1400 audit(1736003696.476:332712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1006.371406][ T5901] usb 3-1: config 0 descriptor?? [ 1006.403763][ T5908] m920x_read = error: -19 [ 1006.408136][ T5908] dvb-usb: error while querying for an remote control event. [ 1006.408458][ T29] audit: type=1400 audit(1736003696.476:332713): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16303 comm="syz-executor" name="246" dev="tmpfs" ino=1334 [ 1006.458262][ T5901] hso 3-1:0.0: Can't find BULK IN endpoint [ 1006.522182][ T5908] m920x_read = error: -19 [ 1006.526551][ T5908] dvb-usb: error while querying for an remote control event. [ 1006.642225][ T8866] m920x_read = error: -19 [ 1006.654294][ T8866] dvb-usb: error while querying for an remote control event. [ 1006.695334][ T8866] usb 3-1: USB disconnect, device number 11 [ 1006.795690][ T5866] m920x_read = error: -19 [ 1006.801275][ T5866] dvb-usb: error while querying for an remote control event. [ 1006.881196][ T5908] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1006.915428][ T5866] m920x_read = error: -19 [ 1006.932253][ T5866] dvb-usb: error while querying for an remote control event. [ 1007.032413][ T5908] usb 6-1: device descriptor read/64, error -71 [ 1007.885855][ T5866] m920x_read = error: -19 [ 1007.890282][ T5866] dvb-usb: error while querying for an remote control event. [ 1008.078488][ T5866] m920x_read = error: -19 [ 1008.105391][ T5866] dvb-usb: error while querying for an remote control event. [ 1008.322267][ T5866] m920x_read = error: -19 [ 1008.332455][ T5866] dvb-usb: error while querying for an remote control event. [ 1008.442160][ T5908] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1008.465789][ T5866] m920x_read = error: -19 [ 1008.470196][ T5866] dvb-usb: error while querying for an remote control event. [ 1008.669261][T16327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2762'. [ 1009.030204][ T8866] m920x_read = error: -19 [ 1009.034853][ T8866] dvb-usb: error while querying for an remote control event. [ 1009.999293][ T8866] m920x_read = error: -19 [ 1010.003753][ T8866] dvb-usb: error while querying for an remote control event. [ 1010.183449][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.310488][ T5866] m920x_read = error: -19 [ 1010.314995][ T5908] usb 6-1: device descriptor read/64, error -71 [ 1010.321322][ T5866] dvb-usb: error while querying for an remote control event. [ 1010.593944][ T8866] m920x_read = error: -19 [ 1010.598325][ T8866] dvb-usb: error while querying for an remote control event. [ 1010.964291][ T5908] usb usb6-port1: attempt power cycle [ 1010.970083][ T8866] m920x_read = error: -19 [ 1010.974495][ T8866] dvb-usb: error while querying for an remote control event. [ 1010.986743][ T29] kauditd_printk_skb: 2635 callbacks suppressed [ 1010.986760][ T29] audit: type=1400 audit(1736003700.926:334467): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=16336 comm="syz.2.2765" opid=16336 ocomm="syz.2.2765" [ 1010.992360][T16330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.993754][T16342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1011.016081][ T29] audit: type=1400 audit(1736003701.116:334468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16331 comm="syz.6.2766" name="newroot" dev="tmpfs" ino=2 [ 1011.082332][T16330] audit: audit_lost=197739 audit_rate_limit=0 audit_backlog_limit=64 [ 1011.097395][T16341] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1011.111065][T16342] audit: audit_lost=197740 audit_rate_limit=0 audit_backlog_limit=64 [ 1011.120181][ T5866] m920x_read = error: -19 [ 1011.124735][ T5866] dvb-usb: error while querying for an remote control event. [ 1011.138649][T16341] audit: audit_lost=197741 audit_rate_limit=0 audit_backlog_limit=64 [ 1011.146755][T16344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1011.152172][T16342] audit: backlog limit exceeded [ 1011.448179][ T5866] m920x_read = error: -19 [ 1011.452752][ T5866] dvb-usb: error while querying for an remote control event. [ 1011.562792][ T5866] m920x_read = error: -19 [ 1011.567315][ T5866] dvb-usb: error while querying for an remote control event. [ 1011.692202][ T5866] m920x_read = error: -19 [ 1011.696622][ T5866] dvb-usb: error while querying for an remote control event. [ 1012.167406][T16359] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1013.063870][ T5866] m920x_read = error: -19 [ 1013.068263][ T5866] dvb-usb: error while querying for an remote control event. [ 1013.192248][T15837] m920x_read = error: -19 [ 1013.196627][T15837] dvb-usb: error while querying for an remote control event. [ 1013.478160][ T5908] m920x_read = error: -19 [ 1013.486233][ T5908] dvb-usb: error while querying for an remote control event. [ 1014.350748][T16034] veth0_vlan: entered promiscuous mode [ 1014.356866][T16368] netlink: 'syz.5.2774': attribute type 33 has an invalid length. [ 1014.372157][T16368] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2774'. [ 1014.403896][T16034] veth1_vlan: entered promiscuous mode [ 1014.412222][ T5908] m920x_read = error: -19 [ 1014.416603][ T5908] dvb-usb: error while querying for an remote control event. [ 1014.475288][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.485299][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.490871][T16034] veth0_macvtap: entered promiscuous mode [ 1014.497983][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.505200][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.512186][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.519112][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.557809][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.579566][T16034] veth1_macvtap: entered promiscuous mode [ 1014.593543][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.617602][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.641548][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.673238][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.704749][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.706848][ T5908] m920x_read = error: -19 [ 1014.712069][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.715705][ T5908] dvb-usb: error while querying for an remote control event. [ 1014.746228][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.746377][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.763345][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.780552][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.782635][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.816578][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1014.848215][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2775'. [ 1014.879142][T15837] m920x_read = error: -19 [ 1014.883926][T15837] dvb-usb: error while querying for an remote control event. [ 1015.044850][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.073189][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1015.803753][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1015.810683][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1015.894417][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.933137][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.030245][T15837] m920x_read = error: -19 [ 1016.034679][T15837] dvb-usb: error while querying for an remote control event. [ 1016.062260][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.292205][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.303037][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.309496][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.324502][ T29] kauditd_printk_skb: 3847 callbacks suppressed [ 1016.324517][ T29] audit: type=1400 audit(1736003706.626:336437): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=16383 comm="syz.2.2777" opid=16383 ocomm="syz.2.2777" [ 1016.354089][T16387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1016.360626][T16387] audit: audit_lost=198368 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.369028][T16387] audit: backlog limit exceeded [ 1016.373986][T16387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1016.380501][T16387] audit: audit_lost=198369 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.388983][T16387] audit: backlog limit exceeded [ 1016.394000][T16387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1016.400512][T16387] audit: audit_lost=198370 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.408900][T16387] audit: backlog limit exceeded [ 1016.418756][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.428127][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.445728][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.472119][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.482401][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.501469][ T5908] m920x_read = error: -19 [ 1016.502969][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.505874][ T5908] dvb-usb: error while querying for an remote control event. [ 1016.518515][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.543307][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.549832][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.559611][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.565616][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.622181][ T5908] m920x_read = error: -19 [ 1016.626578][ T5908] dvb-usb: error while querying for an remote control event. [ 1016.638352][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.644944][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.659284][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.665884][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.676956][T16034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.689408][T16375] 9pnet_fd: Insufficient options for proto=fd [ 1016.703263][T16034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.712285][T16034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.720995][T16034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.873774][T15837] m920x_read = error: -19 [ 1016.878155][T15837] dvb-usb: error while querying for an remote control event. [ 1017.863971][ T5866] m920x_read = error: -19 [ 1017.868359][ T5866] dvb-usb: error while querying for an remote control event. [ 1018.386715][ T8866] m920x_read = error: -19 [ 1018.391110][ T8866] dvb-usb: error while querying for an remote control event. [ 1018.424980][ T6603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.432976][ T6603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.440452][ T6603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.448414][ T6603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.524552][ T5908] m920x_read = error: -19 [ 1018.530562][ T5908] dvb-usb: error while querying for an remote control event. [ 1019.204874][ T5908] m920x_read = error: -19 [ 1019.210991][ T5908] dvb-usb: error while querying for an remote control event. [ 1019.362119][ T5866] m920x_read = error: -19 [ 1019.388576][ T5866] dvb-usb: error while querying for an remote control event. [ 1019.522375][ T5908] m920x_read = error: -19 [ 1019.526746][ T5908] dvb-usb: error while querying for an remote control event. [ 1019.637040][T16413] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 1019.662282][T15837] m920x_read = error: -19 [ 1019.666651][T15837] dvb-usb: error while querying for an remote control event. [ 1019.802500][T15837] m920x_read = error: -19 [ 1019.807456][T15837] dvb-usb: error while querying for an remote control event. [ 1019.877757][T16420] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 1019.885669][ T5908] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1019.898281][T16420] netlink: 'syz.6.2786': attribute type 2 has an invalid length. [ 1019.922420][T15837] m920x_read = error: -19 [ 1019.926788][T15837] dvb-usb: error while querying for an remote control event. [ 1020.088340][T15837] m920x_read = error: -19 [ 1020.098439][T15837] dvb-usb: error while querying for an remote control event. [ 1020.132150][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 1020.138984][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1020.194260][T16428] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2679'. [ 1020.264100][T16431] netlink: 'syz.7.2679': attribute type 2 has an invalid length. [ 1020.369395][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 1020.381051][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 1020.392867][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 1020.405525][T15837] m920x_read = error: -19 [ 1020.409919][T15837] dvb-usb: error while querying for an remote control event. [ 1020.429853][ T5908] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1020.439037][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.448394][ T5908] usb 6-1: Product: syz [ 1020.458234][ T5908] usb 6-1: Manufacturer: syz [ 1020.469962][ T5908] usb 6-1: SerialNumber: syz [ 1020.487376][ T5908] usb 6-1: config 0 descriptor?? [ 1020.508072][T16412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.522224][T15837] m920x_read = error: -19 [ 1020.526636][T15837] dvb-usb: error while querying for an remote control event. [ 1020.544487][ T5908] smsusb:smsusb_probe: board id=2, interface number 0 [ 1020.663321][T15837] m920x_read = error: -19 [ 1020.807039][T15837] dvb-usb: error while querying for an remote control event. [ 1020.818453][ T5908] smsusb:siano_media_device_register: media controller created [ 1020.827366][ T5908] ------------[ cut here ]------------ [ 1020.833367][ T5908] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 1020.840368][ T5908] WARNING: CPU: 0 PID: 5908 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x1930 [ 1020.850686][ T5908] Modules linked in: [ 1020.854707][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/0:7 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1020.865567][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1020.875709][ T5908] Workqueue: usb_hub_wq hub_event [ 1020.880736][ T5908] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 1020.886615][ T5908] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 e0 c7 ae 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 6a 26 fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 10 42 58 8f [ 1020.906548][ T5908] RSP: 0018:ffffc9000438eae8 EFLAGS: 00010246 [ 1020.912673][ T5908] RAX: 4284b77d77323300 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1020.920661][ T5908] RDX: ffffc9001aa58000 RSI: 0000000000040ba8 RDI: 0000000000040ba9 [ 1020.928722][ T5908] RBP: 0000000000000003 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 1020.937255][ T5908] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888057d560a0 [ 1020.945687][ T5908] R13: ffff88802cf68000 R14: 0000000000000001 R15: ffffffff8caec5cc [ 1020.953687][ T5908] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1020.962648][ T5908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1020.969226][ T5908] CR2: 000000110c3a129f CR3: 0000000055396000 CR4: 00000000003526f0 [ 1020.977253][ T5908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1020.985339][ T5908] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1020.993464][ T5908] Call Trace: [ 1020.996767][ T5908] [ 1020.999721][ T5908] ? __warn+0x165/0x4d0 [ 1021.003933][ T5908] ? usb_submit_urb+0xc4e/0x1930 [ 1021.008887][ T5908] ? report_bug+0x2b3/0x500 [ 1021.013479][ T5908] ? usb_submit_urb+0xc4e/0x1930 [ 1021.018439][ T5908] ? handle_bug+0x60/0x90 [ 1021.022816][ T5908] ? exc_invalid_op+0x1a/0x50 [ 1021.027489][ T5908] ? asm_exc_invalid_op+0x1a/0x20 [ 1021.032573][ T5908] ? __warn_printk+0x292/0x360 [ 1021.037761][ T5908] ? usb_submit_urb+0xc4e/0x1930 [ 1021.043095][ T5908] ? usb_submit_urb+0xc4d/0x1930 [ 1021.048044][ T5908] smsusb_start_streaming+0x22/0x340 [ 1021.053364][ T5908] smsusb_probe+0x1c54/0x2410 [ 1021.058056][ T5908] ? __pfx_smsusb_probe+0x10/0x10 [ 1021.063157][ T5908] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1021.068703][ T5908] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1021.074674][ T5908] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1021.081004][ T5908] ? __pm_runtime_set_status+0x6c1/0xa10 [ 1021.086708][ T5908] usb_probe_interface+0x641/0xbb0 [ 1021.091822][ T5908] ? __pfx_usb_probe_interface+0x10/0x10 [ 1021.097486][ T5908] really_probe+0x2b8/0xad0 [ 1021.101997][ T5908] __driver_probe_device+0x1a2/0x390 [ 1021.107362][ T5908] driver_probe_device+0x50/0x430 [ 1021.112438][ T5908] __device_attach_driver+0x2d6/0x530 [ 1021.117825][ T5908] bus_for_each_drv+0x24e/0x2e0 [ 1021.122733][ T5908] ? __pfx___device_attach_driver+0x10/0x10 [ 1021.128621][ T5908] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1021.134056][ T5908] __device_attach+0x333/0x520 [ 1021.139283][ T5908] ? __pfx_lock_release+0x10/0x10 [ 1021.144726][ T5908] ? __pfx___device_attach+0x10/0x10 [ 1021.150010][ T5908] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1021.155235][ T5908] bus_probe_device+0x189/0x260 [ 1021.160123][ T5908] device_add+0x856/0xbf0 [ 1021.164516][ T5908] usb_set_configuration+0x1976/0x1fb0 [ 1021.169985][ T5908] usb_generic_driver_probe+0x88/0x140 [ 1021.175473][ T5908] usb_probe_device+0x1b8/0x380 [ 1021.180321][ T5908] ? __pfx_usb_probe_device+0x10/0x10 [ 1021.185743][ T5908] really_probe+0x2b8/0xad0 [ 1021.190252][ T5908] __driver_probe_device+0x1a2/0x390 [ 1021.195568][ T5908] driver_probe_device+0x50/0x430 [ 1021.200589][ T5908] __device_attach_driver+0x2d6/0x530 [ 1021.206002][ T5908] bus_for_each_drv+0x24e/0x2e0 [ 1021.210851][ T5908] ? __pfx___device_attach_driver+0x10/0x10 [ 1021.216768][ T5908] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1021.222190][ T5908] __device_attach+0x333/0x520 [ 1021.226947][ T5908] ? __pfx___device_attach+0x10/0x10 [ 1021.232333][ T5908] bus_probe_device+0x189/0x260 [ 1021.237202][ T5908] device_add+0x856/0xbf0 [ 1021.241962][ T5908] usb_new_device+0x104a/0x19a0 [ 1021.247231][ T5908] ? __pfx_usb_new_device+0x10/0x10 [ 1021.252465][ T5908] ? _raw_spin_unlock_irq+0x23/0x50 [ 1021.257659][ T5908] ? lockdep_hardirqs_on+0x99/0x150 [ 1021.262907][ T5908] hub_event+0x2d6d/0x5150 [ 1021.267346][ T5908] ? __pfx_hub_event+0x10/0x10 [ 1021.272156][ T5908] ? __pfx_lock_acquire+0x10/0x10 [ 1021.277191][ T5908] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1021.283208][ T5908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1021.289566][ T5908] ? process_scheduled_works+0x976/0x1840 [ 1021.295305][ T5908] process_scheduled_works+0xa66/0x1840 [ 1021.300862][ T5908] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.306880][ T5908] ? assign_work+0x364/0x3d0 [ 1021.311468][ T5908] worker_thread+0x870/0xd30 [ 1021.316111][ T5908] ? __kthread_parkme+0x169/0x1d0 [ 1021.321148][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 1021.326309][ T5908] kthread+0x2f0/0x390 [ 1021.330379][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 1021.335537][ T5908] ? __pfx_kthread+0x10/0x10 [ 1021.340612][ T5908] ret_from_fork+0x4b/0x80 [ 1021.345432][ T5908] ? __pfx_kthread+0x10/0x10 [ 1021.350028][ T5908] ret_from_fork_asm+0x1a/0x30 [ 1021.354821][ T5908] [ 1021.357840][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1021.365109][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/0:7 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1021.375856][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1021.385908][ T5908] Workqueue: usb_hub_wq hub_event [ 1021.390965][ T5908] Call Trace: [ 1021.394284][ T5908] [ 1021.397207][ T5908] dump_stack_lvl+0x241/0x360 [ 1021.401885][ T5908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.407075][ T5908] ? __pfx__printk+0x10/0x10 [ 1021.411652][ T5908] ? _printk+0xd5/0x120 [ 1021.415802][ T5908] ? __init_begin+0x41000/0x41000 [ 1021.420820][ T5908] ? vscnprintf+0x5d/0x90 [ 1021.425139][ T5908] panic+0x349/0x880 [ 1021.429023][ T5908] ? __warn+0x174/0x4d0 [ 1021.433192][ T5908] ? __pfx_panic+0x10/0x10 [ 1021.437609][ T5908] ? ret_from_fork_asm+0x1a/0x30 [ 1021.442557][ T5908] __warn+0x344/0x4d0 [ 1021.446545][ T5908] ? usb_submit_urb+0xc4e/0x1930 [ 1021.451478][ T5908] report_bug+0x2b3/0x500 [ 1021.455801][ T5908] ? usb_submit_urb+0xc4e/0x1930 [ 1021.460730][ T5908] handle_bug+0x60/0x90 [ 1021.464892][ T5908] exc_invalid_op+0x1a/0x50 [ 1021.469385][ T5908] asm_exc_invalid_op+0x1a/0x20 [ 1021.474231][ T5908] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 1021.479766][ T5908] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 e0 c7 ae 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 6a 26 fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 10 42 58 8f [ 1021.499356][ T5908] RSP: 0018:ffffc9000438eae8 EFLAGS: 00010246 [ 1021.505424][ T5908] RAX: 4284b77d77323300 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1021.513386][ T5908] RDX: ffffc9001aa58000 RSI: 0000000000040ba8 RDI: 0000000000040ba9 [ 1021.521344][ T5908] RBP: 0000000000000003 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 1021.529300][ T5908] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888057d560a0 [ 1021.537260][ T5908] R13: ffff88802cf68000 R14: 0000000000000001 R15: ffffffff8caec5cc [ 1021.545229][ T5908] ? __warn_printk+0x292/0x360 [ 1021.549985][ T5908] ? usb_submit_urb+0xc4d/0x1930 [ 1021.554922][ T5908] smsusb_start_streaming+0x22/0x340 [ 1021.560200][ T5908] smsusb_probe+0x1c54/0x2410 [ 1021.564883][ T5908] ? __pfx_smsusb_probe+0x10/0x10 [ 1021.569899][ T5908] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1021.575435][ T5908] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1021.581317][ T5908] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1021.587637][ T5908] ? __pm_runtime_set_status+0x6c1/0xa10 [ 1021.593271][ T5908] usb_probe_interface+0x641/0xbb0 [ 1021.598390][ T5908] ? __pfx_usb_probe_interface+0x10/0x10 [ 1021.604011][ T5908] really_probe+0x2b8/0xad0 [ 1021.608535][ T5908] __driver_probe_device+0x1a2/0x390 [ 1021.613812][ T5908] driver_probe_device+0x50/0x430 [ 1021.618851][ T5908] __device_attach_driver+0x2d6/0x530 [ 1021.624216][ T5908] bus_for_each_drv+0x24e/0x2e0 [ 1021.629080][ T5908] ? __pfx___device_attach_driver+0x10/0x10 [ 1021.634959][ T5908] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1021.640326][ T5908] __device_attach+0x333/0x520 [ 1021.645087][ T5908] ? __pfx_lock_release+0x10/0x10 [ 1021.650103][ T5908] ? __pfx___device_attach+0x10/0x10 [ 1021.655379][ T5908] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1021.660571][ T5908] bus_probe_device+0x189/0x260 [ 1021.665416][ T5908] device_add+0x856/0xbf0 [ 1021.669736][ T5908] usb_set_configuration+0x1976/0x1fb0 [ 1021.675204][ T5908] usb_generic_driver_probe+0x88/0x140 [ 1021.680659][ T5908] usb_probe_device+0x1b8/0x380 [ 1021.685499][ T5908] ? __pfx_usb_probe_device+0x10/0x10 [ 1021.690855][ T5908] really_probe+0x2b8/0xad0 [ 1021.695375][ T5908] __driver_probe_device+0x1a2/0x390 [ 1021.700647][ T5908] driver_probe_device+0x50/0x430 [ 1021.705662][ T5908] __device_attach_driver+0x2d6/0x530 [ 1021.711020][ T5908] bus_for_each_drv+0x24e/0x2e0 [ 1021.715881][ T5908] ? __pfx___device_attach_driver+0x10/0x10 [ 1021.721761][ T5908] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1021.727129][ T5908] __device_attach+0x333/0x520 [ 1021.731891][ T5908] ? __pfx___device_attach+0x10/0x10 [ 1021.737174][ T5908] bus_probe_device+0x189/0x260 [ 1021.742024][ T5908] device_add+0x856/0xbf0 [ 1021.746362][ T5908] usb_new_device+0x104a/0x19a0 [ 1021.751216][ T5908] ? __pfx_usb_new_device+0x10/0x10 [ 1021.756415][ T5908] ? _raw_spin_unlock_irq+0x23/0x50 [ 1021.761598][ T5908] ? lockdep_hardirqs_on+0x99/0x150 [ 1021.766793][ T5908] hub_event+0x2d6d/0x5150 [ 1021.771249][ T5908] ? __pfx_hub_event+0x10/0x10 [ 1021.776021][ T5908] ? __pfx_lock_acquire+0x10/0x10 [ 1021.781121][ T5908] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1021.787104][ T5908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1021.793423][ T5908] ? process_scheduled_works+0x976/0x1840 [ 1021.799141][ T5908] process_scheduled_works+0xa66/0x1840 [ 1021.804712][ T5908] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.810689][ T5908] ? assign_work+0x364/0x3d0 [ 1021.815279][ T5908] worker_thread+0x870/0xd30 [ 1021.819894][ T5908] ? __kthread_parkme+0x169/0x1d0 [ 1021.824915][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 1021.830043][ T5908] kthread+0x2f0/0x390 [ 1021.834101][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 1021.839224][ T5908] ? __pfx_kthread+0x10/0x10 [ 1021.843813][ T5908] ret_from_fork+0x4b/0x80 [ 1021.848217][ T5908] ? __pfx_kthread+0x10/0x10 [ 1021.852799][ T5908] ret_from_fork_asm+0x1a/0x30 [ 1021.857566][ T5908] [ 1021.860831][ T5908] Kernel Offset: disabled [ 1021.865209][ T5908] Rebooting in 86400 seconds..